Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3233372e31362e302f32322d3234203d3e203238353830.roa
File:                     34352e3233372e31362e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          1cs6Nz1VUkZrr4+8eIKUYXtqVcD/hKAOw/hpXg6+5Q8=
Subject key identifier:   56:44:97:1C:83:2B:A9:60:0E:EF:4F:0D:24:8E:FD:7A:2A:1D:6D:03
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       2DB6BDEED84DC64945FC22B2D0CBD7C3934E79C9
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3233372e31362e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:06 +0000
ROA not before:           Thu 19 Oct 2023 19:10:06 +0000
ROA not after:            Thu 17 Oct 2024 19:15:06 +0000
asID:                     28580
IP address blocks:        45.237.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b6:bd:ee:d8:4d:c6:49:45:fc:22:b2:d0:cb:d7:c3:93:4e:79:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:06 2023 GMT
            Not After : Oct 17 19:15:06 2024 GMT
        Subject: CN=5644971C832BA9600EEF4F0D248EFD7A2A1D6D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ad:82:b4:ce:ce:20:e6:34:a5:42:0b:38:5f:
                    5f:e0:93:22:77:0d:ea:f6:4a:ad:f0:55:b7:fd:8c:
                    f7:58:5f:1a:2b:5e:75:ce:af:3b:b6:d1:9a:dc:c3:
                    6c:35:a5:38:47:5a:4f:94:27:90:7a:d4:dd:3a:fa:
                    8e:9d:46:85:f2:60:ed:d8:38:b6:d0:32:4c:7d:85:
                    2c:5b:dc:ef:b5:c9:e8:df:99:c2:6e:a9:f9:2a:56:
                    01:1b:5b:44:e8:ed:71:d7:38:39:b1:68:6c:4b:cc:
                    3f:c8:f1:c0:06:57:47:59:28:3c:3e:0e:64:07:30:
                    7f:ab:0e:35:04:c8:c7:84:85:e8:3e:20:7e:f6:3f:
                    47:f6:0f:78:70:ae:9d:21:52:e9:33:6b:f2:90:09:
                    24:ee:4c:b3:fd:ae:85:f7:da:d4:26:c0:c6:bc:8e:
                    67:1b:b4:9d:41:d1:8a:6f:2e:99:4f:f7:f2:50:bd:
                    47:35:c3:89:c0:ad:23:39:1e:b5:7a:36:e2:f3:81:
                    48:87:1f:de:c8:57:7f:48:6e:61:c2:3b:39:b4:39:
                    9c:3c:11:e0:24:5f:34:a5:2b:d0:45:15:82:bb:8a:
                    ad:6f:99:2a:63:b7:63:db:79:e8:0a:7b:44:69:cd:
                    48:92:04:14:93:0a:ca:89:e3:a4:9a:05:8f:ea:c0:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:44:97:1C:83:2B:A9:60:0E:EF:4F:0D:24:8E:FD:7A:2A:1D:6D:03
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e3233372e31362e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:57:cc:32:f8:1e:67:e0:06:58:3a:cf:43:9b:0e:40:31:1e:
         00:78:87:04:56:a9:a7:26:cf:69:26:a6:d9:b9:93:04:f5:40:
         cb:c1:31:05:a2:d9:39:e2:b9:7d:90:92:29:77:80:6c:ea:14:
         39:ac:59:1c:4f:ed:c6:59:57:c1:41:21:3a:44:90:ee:b6:a7:
         2a:ab:d2:98:1e:59:94:35:5e:7f:a5:8e:34:bc:10:de:43:36:
         75:4f:0e:ca:a8:c7:18:7c:72:86:fa:7d:49:1b:80:48:ba:1a:
         0c:32:ac:1c:7d:5c:4b:ed:29:42:fc:68:a7:c6:61:74:9e:c5:
         00:ba:c4:b7:15:06:71:e4:b6:ec:76:f3:93:28:80:8a:ed:27:
         66:67:70:db:63:4e:57:71:13:9d:3f:d8:90:47:b2:e4:e6:83:
         34:3d:51:83:bd:1e:04:a8:49:ee:1c:2f:05:ae:b2:5a:ea:a6:
         17:e4:34:21:4b:01:9b:2c:16:af:32:fb:e5:75:07:2c:03:cb:
         14:70:8c:79:db:af:62:6d:33:58:51:b2:35:2f:2b:51:51:a9:
         b0:d8:f6:00:60:da:2d:c8:49:19:99:a0:e9:f4:bd:d3:cb:1b:
         e5:4c:e6:f1:c4:4b:31:bf:87:ba:b6:8d:50:e3:df:e5:00:9c:
         c3:e5:a8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org