Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/34352e3136322e3133372e302f32342d3234203d3e20323638353230.roa
File:                     34352e3136322e3133372e302f32342d3234203d3e20323638353230.roa (raw, json)
Hash identifier:          8gyh30Xp+jytBohiA07bywkiS1u8wRtHdeqdxTcxtUo=
Subject key identifier:   AF:72:15:20:A5:35:BC:5B:08:B7:4D:F1:0B:14:1A:92:F5:88:43:A6
Certificate issuer:       /CN=3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF
Certificate serial:       204A0FDA2C469F0948B13467FCC9EE9A93A3EDEB
Authority key identifier: 3F:4E:E2:BF:37:D8:D6:30:C9:DA:0D:09:09:4E:3A:B1:01:40:A9:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/34352e3136322e3133372e302f32342d3234203d3e20323638353230.roa
Signing time:             Sat 16 Jul 2022 05:10:10 +0000
ROA not before:           Sat 16 Jul 2022 05:05:10 +0000
ROA not after:            Sat 15 Jul 2023 05:10:10 +0000
asID:                     268520
IP address blocks:        45.162.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4a:0f:da:2c:46:9f:09:48:b1:34:67:fc:c9:ee:9a:93:a3:ed:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF
        Validity
            Not Before: Jul 16 05:05:10 2022 GMT
            Not After : Jul 15 05:10:10 2023 GMT
        Subject: CN=AF721520A535BC5B08B74DF10B141A92F58843A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:35:55:3b:52:3a:75:19:95:78:b3:43:93:
                    13:4a:cc:e0:5f:65:0b:d4:32:2c:42:95:40:ca:10:
                    ff:f3:60:dc:d9:af:f2:d3:f8:9c:fa:be:62:d8:b2:
                    f9:c0:73:88:ac:ab:8f:f1:75:7b:ff:2e:af:fb:62:
                    aa:ef:97:e5:4a:e5:16:56:50:85:a7:ca:63:0c:c3:
                    31:13:98:15:cc:9b:89:70:00:d4:72:a9:d2:b4:8a:
                    ea:e3:cd:9b:aa:66:e5:92:0e:e4:c8:58:ff:18:5c:
                    05:8f:a3:ee:59:54:7d:93:2a:bb:a2:31:a1:1f:fc:
                    1f:41:b5:71:b5:cd:13:28:16:b4:fc:e7:b1:9c:84:
                    56:40:ed:5e:84:ca:ff:e6:6d:41:62:94:51:6e:20:
                    a4:78:7b:fb:fc:a3:f4:67:4b:75:85:6b:91:31:1d:
                    c6:97:c4:8e:2b:d0:c2:51:41:7e:06:c4:36:1e:8a:
                    f8:01:92:49:97:27:45:3b:27:9f:90:e7:7d:7b:0f:
                    77:b2:5f:6e:e5:be:0a:9a:0b:a3:1d:96:84:cf:b9:
                    f9:08:42:f8:1c:d3:7a:4c:d1:bb:2e:72:78:32:3a:
                    53:e8:cf:34:0f:e1:34:61:70:fb:88:10:15:f0:97:
                    e1:b3:1a:66:f3:1f:72:10:e2:6c:af:db:b0:1a:4b:
                    95:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:72:15:20:A5:35:BC:5B:08:B7:4D:F1:0B:14:1A:92:F5:88:43:A6
            X509v3 Authority Key Identifier:
                keyid:3F:4E:E2:BF:37:D8:D6:30:C9:DA:0D:09:09:4E:3A:B1:01:40:A9:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/34352e3136322e3133372e302f32342d3234203d3e20323638353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:52:b1:01:54:0d:70:f9:08:da:69:e8:34:3e:21:ed:d1:d2:
         1e:88:d6:74:f2:40:3a:fc:e6:5f:d4:db:33:33:86:a3:ea:a9:
         ba:cf:07:2a:1b:55:c4:2f:14:b3:75:ba:d7:dd:ee:d4:92:de:
         fe:49:64:40:26:8f:bf:61:2e:06:fe:21:f9:be:b3:5f:14:f4:
         e6:7d:1d:24:30:7e:6e:13:03:b4:77:71:80:4b:28:03:1c:b9:
         5d:9b:05:8d:fb:ab:6e:32:af:21:af:57:8f:d8:aa:b7:b7:5c:
         01:77:3e:44:b1:f7:fd:a1:00:0f:c3:4d:a6:ea:d0:1b:1b:35:
         29:ad:64:6c:86:a7:bd:81:ed:7d:20:6d:a7:7b:b5:bb:d8:6c:
         a1:ad:78:52:3d:9a:01:34:df:22:fd:27:8b:16:b1:be:8c:59:
         e6:ec:26:28:7e:50:13:90:26:84:67:5e:79:a1:a5:df:33:75:
         8b:1b:e5:34:7e:6a:f6:f3:72:10:66:28:a0:80:5b:c4:e9:ec:
         c6:9b:3f:27:a1:e1:76:71:99:aa:88:75:52:3a:c9:e3:52:97:
         8d:61:b8:86:cd:a6:1f:50:c5:16:58:f3:ad:ec:d9:cc:b0:62:
         bd:d4:c9:57:93:f4:bc:ab:65:f4:66:f6:c5:a1:a6:ef:0b:a1:
         b3:a8:b3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org