Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/34352e3136322e3133382e302f32342d3234203d3e20323638353230.roa
File:                     34352e3136322e3133382e302f32342d3234203d3e20323638353230.roa (raw, json)
Hash identifier:          ba/3uy41Xxp5TbXV++X9p2m3YjmsJeV30MYMRJdCfe0=
Subject key identifier:   91:7C:DC:A3:39:F8:EC:DC:FF:FA:08:7C:0B:72:F9:D8:21:DF:FB:D2
Certificate issuer:       /CN=3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF
Certificate serial:       4D311890AE41AB07486F4C09964F621E6843B781
Authority key identifier: 3F:4E:E2:BF:37:D8:D6:30:C9:DA:0D:09:09:4E:3A:B1:01:40:A9:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/34352e3136322e3133382e302f32342d3234203d3e20323638353230.roa
Signing time:             Sat 16 Jul 2022 05:10:09 +0000
ROA not before:           Sat 16 Jul 2022 05:05:09 +0000
ROA not after:            Sat 15 Jul 2023 05:10:09 +0000
asID:                     268520
IP address blocks:        45.162.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:31:18:90:ae:41:ab:07:48:6f:4c:09:96:4f:62:1e:68:43:b7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF
        Validity
            Not Before: Jul 16 05:05:09 2022 GMT
            Not After : Jul 15 05:10:09 2023 GMT
        Subject: CN=917CDCA339F8ECDCFFFA087C0B72F9D821DFFBD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c1:84:93:80:6c:19:8a:ed:ef:33:28:54:9d:
                    a2:bb:cc:79:34:18:67:4c:18:d9:4b:36:be:15:25:
                    a9:59:6d:7f:fc:f0:61:37:96:c6:44:92:61:5d:66:
                    48:2b:fc:65:a9:94:d5:19:23:56:69:12:c6:2d:f6:
                    0a:0b:6a:72:50:58:13:f7:19:ff:ea:30:58:71:be:
                    e5:9b:8b:17:e2:52:1e:e7:4c:7c:2a:d4:b9:7b:b1:
                    23:99:4c:4a:27:1c:6c:df:6f:7a:9f:a7:16:74:31:
                    d8:8f:c5:06:c7:f5:0f:31:36:e2:a6:b7:4a:a5:1b:
                    67:c6:a3:fc:a0:cc:b9:fb:a0:ce:ba:22:d0:00:42:
                    e6:a1:f1:b3:fd:56:b2:45:b0:29:39:ee:0a:a3:64:
                    20:f2:3d:32:ae:8a:5c:67:2d:b3:b7:c9:4e:42:a0:
                    8f:b1:0f:48:ec:4c:a5:91:95:32:56:ab:2d:8b:d6:
                    4e:fd:62:12:ae:3c:9f:2d:6f:8f:e8:c2:63:49:8c:
                    33:f4:df:c9:87:da:ff:4c:35:b7:cd:4f:42:18:f9:
                    09:6f:eb:f2:f7:45:ee:a8:dd:55:4e:91:e2:32:75:
                    8a:bb:f1:7f:d6:9c:4a:2e:bf:a7:90:71:29:c2:f5:
                    dc:1d:58:3c:8b:41:3f:7b:58:2d:53:35:4b:31:70:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7C:DC:A3:39:F8:EC:DC:FF:FA:08:7C:0B:72:F9:D8:21:DF:FB:D2
            X509v3 Authority Key Identifier:
                keyid:3F:4E:E2:BF:37:D8:D6:30:C9:DA:0D:09:09:4E:3A:B1:01:40:A9:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F4EE2BF37D8D630C9DA0D09094E3AB10140A9BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NKoS8HdNdRPW9srGy5afZPz5MNCHoqyeMrxXinKXCMN/0/34352e3136322e3133382e302f32342d3234203d3e20323638353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a1:02:e7:70:c5:fe:ee:3a:10:18:c2:0c:40:bc:79:b2:0a:
         7e:e6:66:4a:71:d5:21:46:b0:bf:38:8a:a6:43:9d:d1:c1:a5:
         c9:a0:31:21:8d:97:53:12:ec:b5:f0:68:c6:60:80:9e:d1:a7:
         91:e7:75:cb:94:d4:ba:3b:0f:32:07:48:a1:7a:b8:aa:98:00:
         a0:5a:5d:a8:af:f8:52:02:fd:49:1c:3f:ed:e6:8e:50:1a:72:
         1c:28:b4:66:83:20:ec:d4:73:1a:60:d2:69:e8:e1:71:2d:26:
         ae:3f:ac:fa:8f:47:ce:0e:0f:45:3a:c1:47:76:be:6d:1c:ca:
         80:bf:93:d4:b8:8f:4e:b8:69:af:3f:bf:5d:e4:6b:7f:92:88:
         a1:46:dd:00:b0:07:19:c2:59:4b:70:29:09:50:22:17:db:84:
         3f:4e:11:ff:83:20:5b:88:e2:3d:59:c7:89:d3:48:6b:5f:18:
         ea:37:07:64:54:97:04:8e:fe:9a:77:38:b2:76:05:7a:74:ec:
         0a:84:2c:22:6c:fb:43:50:c0:2f:ce:9c:23:ef:6a:84:2e:6f:
         76:3d:28:58:bc:27:9e:34:29:be:8c:bd:04:58:e1:2c:49:db:
         dc:9b:74:9d:13:a7:a7:06:fd:d4:98:97:7f:52:89:23:55:b1:
         05:aa:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org