Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3137302e3134302e302f32322d3234203d3e203238353830.roa
File:                     34352e3137302e3134302e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          zx1BzuQDcHbAdvLWNqm5IfyruUAYkcOsF9bvy5W7mWE=
Subject key identifier:   4A:1B:92:B5:80:A6:9E:36:D3:3B:3B:3F:40:38:1C:76:1A:17:D9:D7
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       6A39A3A073A968684CB283335E8681132F4683E2
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3137302e3134302e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:02 +0000
ROA not before:           Thu 19 Oct 2023 19:10:02 +0000
ROA not after:            Thu 17 Oct 2024 19:15:02 +0000
asID:                     28580
IP address blocks:        45.170.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:39:a3:a0:73:a9:68:68:4c:b2:83:33:5e:86:81:13:2f:46:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:02 2023 GMT
            Not After : Oct 17 19:15:02 2024 GMT
        Subject: CN=4A1B92B580A69E36D33B3B3F40381C761A17D9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ce:1f:5c:cf:4c:d1:10:92:0a:df:74:0d:34:
                    94:be:d9:f2:9e:f5:f9:0e:24:29:8a:78:b8:b0:eb:
                    02:41:b2:ea:95:f7:64:44:9b:22:bc:ad:20:dc:6f:
                    fe:ec:9e:36:cb:84:a4:58:0b:d7:65:c7:e5:de:4c:
                    6c:dc:fa:c5:e8:89:56:da:d4:b6:6d:c9:3a:10:8f:
                    9d:20:20:91:06:c7:9d:07:d0:51:ef:de:e1:57:eb:
                    46:b9:96:88:4a:0b:22:dc:3a:e8:31:04:15:1a:d0:
                    74:c1:4e:9e:68:3c:31:0a:3c:e6:a2:ad:b8:de:4f:
                    4d:49:d0:b2:f2:81:da:37:2e:80:e4:e6:f8:52:06:
                    5e:f9:51:84:ba:38:b6:e2:64:f5:e8:8f:60:96:92:
                    74:19:bd:56:7f:af:8f:e7:e2:13:68:94:0d:8f:25:
                    9a:03:60:3d:71:5f:e0:28:c0:47:5b:69:59:8c:98:
                    8c:73:35:8d:78:53:40:ff:37:59:c0:4a:3c:b5:73:
                    d0:f0:46:ef:cd:af:56:54:07:6e:0d:55:a1:bf:c1:
                    b7:5a:83:7e:02:9c:fd:8c:03:0c:c9:59:8a:56:58:
                    94:01:99:37:f4:53:82:2b:e3:4b:d1:dc:9b:20:7d:
                    69:54:b8:90:5b:30:54:6a:14:d0:c4:32:78:db:5c:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1B:92:B5:80:A6:9E:36:D3:3B:3B:3F:40:38:1C:76:1A:17:D9:D7
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3137302e3134302e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:fa:31:6d:ae:0a:f1:d4:b1:f9:48:17:25:b3:ee:63:8b:e8:
         9a:fe:20:c4:bf:0f:50:ff:3d:52:40:25:8a:b8:6e:41:b6:c4:
         02:14:65:6a:d8:13:d9:fe:17:7f:9b:26:6b:cc:31:1d:43:01:
         b8:53:59:e6:c4:8f:99:87:d5:7d:a6:46:1f:1f:29:06:ba:1d:
         8b:94:b7:09:e7:0a:3f:8b:3a:4a:64:6e:39:eb:bf:89:fa:fb:
         da:7c:d7:32:76:00:17:dc:a6:b4:8c:e0:e8:ab:e4:b3:7a:b4:
         a9:1e:81:cf:8a:d4:a5:a3:7e:63:28:17:df:83:1a:02:82:94:
         c1:08:f4:d1:d2:a9:3f:a8:a5:94:a6:c8:50:59:59:9d:ee:2e:
         75:b8:40:58:60:dd:8f:50:42:2c:ef:e6:4f:26:0c:c1:92:42:
         a8:0f:17:d4:7c:60:7d:86:1f:98:d2:1b:22:31:16:2a:3b:98:
         e9:4d:76:55:a2:28:b0:c4:60:21:9d:c1:79:d9:c8:0c:67:93:
         3b:58:94:56:c6:9b:4b:d9:f2:e3:38:04:07:17:b6:11:af:10:
         b5:75:93:c5:c7:6a:c0:a8:84:87:e6:4a:9c:6e:03:f2:a5:e8:
         98:af:35:fa:17:a7:09:37:fb:90:5c:a3:0f:66:0c:e3:3a:e4:
         25:fb:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org