Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e372e3230342e302f32322d3234203d3e203238353830.roa
File:                     34352e372e3230342e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          jelKFtCOomAWES3HGYfjVnvL86NG9UTZ5dS2Jeimye8=
Subject key identifier:   5E:AC:B7:99:4A:8F:3C:2B:F8:63:79:18:28:39:37:B1:75:B9:C9:01
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       780824CFB5F2CF59C0857F5D6B0A0BF47635329D
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e372e3230342e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:03 +0000
ROA not before:           Thu 19 Oct 2023 19:10:03 +0000
ROA not after:            Thu 17 Oct 2024 19:15:03 +0000
asID:                     28580
IP address blocks:        45.7.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:08:24:cf:b5:f2:cf:59:c0:85:7f:5d:6b:0a:0b:f4:76:35:32:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:03 2023 GMT
            Not After : Oct 17 19:15:03 2024 GMT
        Subject: CN=5EACB7994A8F3C2BF8637918283937B175B9C901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:18:70:dc:50:2f:1b:5c:9e:7c:79:7e:7a:
                    b7:ed:38:b4:75:82:c2:47:16:ba:21:bf:39:58:85:
                    e4:b2:13:0d:d6:66:a2:a3:4f:6e:47:8e:29:da:ac:
                    22:b1:11:16:79:e1:b3:af:5c:c6:22:c7:9b:30:21:
                    cb:19:f5:42:d9:a5:bd:ed:7a:95:f3:fe:b8:89:3e:
                    dd:7e:a6:83:41:54:d4:14:89:91:0e:c6:2a:fe:b6:
                    e3:27:bf:47:a1:3b:73:8a:fa:f7:41:5d:cb:26:30:
                    33:35:ef:c3:21:c5:ab:40:8e:31:03:43:c5:fa:24:
                    22:22:a5:4e:44:fd:64:97:99:7e:93:69:52:76:14:
                    5b:84:b1:bc:d8:b8:e4:5c:8a:f3:c4:47:74:40:9b:
                    91:53:d5:24:54:e5:c6:e2:8b:ca:1e:e8:0b:f4:40:
                    8c:3c:a3:b2:44:4f:7c:78:13:d7:04:85:96:c9:ab:
                    29:cc:45:b5:83:87:e4:b8:95:39:b3:63:7c:04:57:
                    7e:2b:07:c3:83:4c:34:c1:1f:1f:52:7e:e2:ca:ed:
                    b3:4e:7f:33:e2:80:0b:f2:c3:e5:3b:7f:8c:f2:68:
                    2b:51:30:3e:b1:f0:86:5f:89:07:de:73:7b:70:24:
                    39:a2:4e:a2:14:70:88:f0:49:c5:4e:08:f3:0b:5f:
                    5d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AC:B7:99:4A:8F:3C:2B:F8:63:79:18:28:39:37:B1:75:B9:C9:01
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/34352e372e3230342e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:e0:d7:ad:61:59:42:91:37:3b:fb:67:6b:c5:15:a8:4b:5a:
         4b:b9:6d:11:53:f6:23:13:c5:2a:2b:9a:2b:d3:49:7c:14:3c:
         ab:f1:11:15:3b:a4:4c:99:1f:6b:4b:79:51:af:9a:35:62:92:
         5a:9e:2b:30:63:a6:00:65:e5:13:15:13:dc:dc:31:3e:0c:4c:
         28:9e:c8:63:e6:90:26:7e:7a:b7:54:d7:65:47:bb:58:ab:80:
         1c:c2:35:76:ed:85:f0:19:a5:ed:a4:eb:87:12:8d:1a:be:91:
         4f:17:da:82:62:08:8c:43:71:f5:b8:81:14:70:79:93:77:f9:
         b8:8a:e9:1d:19:b1:b2:49:15:0d:41:d4:f8:10:e4:a3:b0:3b:
         a6:23:c8:ad:af:7b:9f:da:a6:f9:87:9a:80:1b:eb:cb:88:d1:
         6b:55:e4:42:ae:c8:b4:f8:c2:33:7b:04:a0:c3:5e:18:20:69:
         12:86:cc:52:d2:00:c6:b8:93:76:0a:8a:68:52:71:aa:aa:47:
         63:b9:76:42:68:f9:82:6f:fa:5a:c2:ae:39:89:e9:8d:1c:ce:
         f0:72:03:df:74:cd:f0:80:9b:9e:b8:9a:25:62:d1:f5:60:69:
         bc:a7:4b:a4:c8:b6:37:e9:fc:d9:be:e0:b9:5c:7a:35:2e:f2:
         13:7e:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org