Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3136362e3132342e302f32322d3234203d3e203238353830.roa
File:                     34352e3136362e3132342e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          eWYqQNfjl6XgI8kzrUWuN9iyTbOdz6vCxjEdGRXffxU=
Subject key identifier:   C9:DC:D7:C7:73:1C:7E:62:BF:88:1F:EB:18:B5:C3:19:55:3C:77:0E
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       514BD8FE3AED69395B6D102995D1E50D086E37F6
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3136362e3132342e302f32322d3234203d3e203238353830.roa
Signing time:             Wed 05 Apr 2023 17:29:00 +0000
ROA not before:           Wed 05 Apr 2023 17:24:00 +0000
ROA not after:            Wed 03 Apr 2024 17:29:00 +0000
asID:                     28580
IP address blocks:        45.166.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4b:d8:fe:3a:ed:69:39:5b:6d:10:29:95:d1:e5:0d:08:6e:37:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Apr  5 17:24:00 2023 GMT
            Not After : Apr  3 17:29:00 2024 GMT
        Subject: CN=C9DCD7C7731C7E62BF881FEB18B5C319553C770E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:0f:da:1f:32:84:b7:76:16:3a:7e:23:28:
                    1c:f1:ec:1a:8a:f5:cc:b8:4f:e6:55:d0:d6:e1:d4:
                    7e:b3:5b:ff:df:88:82:a0:10:b7:d5:b6:8c:00:a1:
                    89:10:eb:14:f9:5f:2c:73:51:1b:ce:7a:30:db:0a:
                    3d:f1:44:5e:b2:e1:0d:87:76:65:8f:81:ad:95:04:
                    28:81:fc:fd:8f:b1:fb:7a:3d:46:08:8a:db:d9:d7:
                    24:c9:e1:e9:25:2c:b7:86:d9:d0:e5:0f:45:81:60:
                    86:dd:dd:df:0d:fa:92:99:c5:bf:73:f0:4d:e9:6b:
                    66:4e:9b:cb:18:58:fe:0d:a3:b4:e8:d2:ab:06:8f:
                    31:bd:80:4f:5f:5a:bb:18:a8:24:9d:be:ce:d6:b6:
                    0d:5f:c0:0f:f3:b3:72:14:7e:7e:73:59:0b:45:89:
                    7f:79:35:00:88:b3:6a:e4:29:1a:94:5b:4b:9f:e2:
                    44:c3:2e:69:dd:7f:00:c3:5d:ec:7f:57:d7:44:3d:
                    4c:17:72:e1:a8:6d:56:cb:bd:f3:41:d0:a9:b5:a6:
                    52:4c:8d:f8:5c:b5:af:78:97:eb:15:84:1d:a8:13:
                    2d:48:af:c3:c1:93:25:f4:67:6e:6e:b9:96:cc:65:
                    c8:e6:e2:1e:a7:f4:75:61:a4:a7:6e:ad:4d:de:fe:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DC:D7:C7:73:1C:7E:62:BF:88:1F:EB:18:B5:C3:19:55:3C:77:0E
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3136362e3132342e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:84:26:a2:c3:ca:bb:24:99:8b:30:94:30:b3:65:c3:d1:97:
         79:94:e0:3f:ea:6b:45:33:1d:8c:f5:d1:3b:30:46:b9:d3:36:
         fa:d4:b1:0e:c6:48:5e:00:7d:db:68:64:df:15:a1:88:04:0a:
         37:f5:d0:0b:96:06:6e:97:f4:fa:e9:19:82:ce:ff:13:40:29:
         5f:75:38:31:2d:c2:e7:99:dd:bb:48:7f:a2:2c:4f:f9:d1:f2:
         8e:81:bf:64:ef:79:47:f1:d0:c9:2b:44:75:37:f8:57:31:c6:
         a6:17:d7:95:02:34:8a:ce:d0:41:71:60:3e:6c:4b:bc:d0:7b:
         3f:1e:3b:f6:63:ef:08:47:e3:5a:1c:65:6e:26:7a:9d:54:df:
         d0:57:fd:9b:11:9b:c4:ef:cd:fb:e9:04:f8:d0:a4:7c:91:9c:
         ba:16:8f:07:35:6a:23:68:6a:1e:99:bd:98:7a:ef:93:7f:77:
         c4:86:8c:61:22:78:72:98:65:fc:49:45:fd:97:25:42:94:db:
         89:51:23:e2:c0:72:fd:0b:aa:21:00:ab:12:b8:4a:8e:3c:d2:
         2e:95:30:dc:18:21:b5:5e:3d:fb:7b:f1:b8:c4:45:8f:49:35:
         06:c1:30:26:a5:72:f9:d5:22:88:b2:d0:14:a4:ea:7c:2d:01:
         c2:c4:31:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org