Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa
File:                     34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa (raw, json)
Hash identifier:          md5VK2WUet73hFnLM5cNKh95apmKcxR2bcCGNqLYSPo=
Subject key identifier:   C2:8E:A0:A3:AE:22:B1:2B:85:24:BA:3C:BC:03:2C:A5:E9:B7:E0:30
Certificate issuer:       /CN=4BE2C3E4D0A75D7C403797C760DDF72F52442B3E
Certificate serial:       5F906AD963ADC589C3A99E391A45FF60687D2236
Authority key identifier: 4B:E2:C3:E4:D0:A7:5D:7C:40:37:97:C7:60:DD:F7:2F:52:44:2B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa
Signing time:             Thu 04 Apr 2024 03:26:29 +0000
ROA not before:           Thu 04 Apr 2024 03:21:29 +0000
ROA not after:            Thu 03 Apr 2025 03:26:29 +0000
asID:                     267940
IP address blocks:        45.165.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:90:6a:d9:63:ad:c5:89:c3:a9:9e:39:1a:45:ff:60:68:7d:22:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE2C3E4D0A75D7C403797C760DDF72F52442B3E
        Validity
            Not Before: Apr  4 03:21:29 2024 GMT
            Not After : Apr  3 03:26:29 2025 GMT
        Subject: CN=C28EA0A3AE22B12B8524BA3CBC032CA5E9B7E030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:e6:11:26:36:e0:ab:10:d8:1d:c4:64:b5:
                    bb:d8:68:fc:b3:f6:4c:39:07:c5:35:b9:cf:53:0d:
                    30:3c:1d:03:3c:48:e3:07:a1:98:ff:e6:55:3e:88:
                    74:b1:72:23:33:5f:94:e8:42:ea:40:4b:4d:5e:d9:
                    0f:0b:4b:1f:69:d7:e6:2a:1d:67:eb:a0:40:96:f9:
                    f0:80:7d:cd:ba:df:0c:05:7b:7c:03:fb:24:5d:e5:
                    80:57:71:25:20:1e:0b:3f:df:e1:ce:7f:40:be:40:
                    49:ca:cc:e6:13:20:6e:d0:cf:bb:ec:d0:d3:43:f8:
                    31:ee:20:0e:0e:03:bc:c4:3f:22:9c:e2:28:86:fd:
                    bb:5a:62:15:4f:c6:30:ac:77:97:8e:41:f4:33:7a:
                    aa:2b:da:62:4f:43:0c:49:d4:0b:70:cd:50:91:3b:
                    bb:8c:d8:b3:83:52:41:d1:fd:9b:8c:9d:81:9b:78:
                    9b:c1:44:3a:f0:89:79:35:71:37:51:79:99:f5:b5:
                    db:52:e6:89:1d:3a:bf:a8:94:1e:03:79:9d:b1:6c:
                    04:76:f0:16:58:3d:8c:d4:8a:4e:84:d8:30:d8:00:
                    7e:46:05:b6:c1:fc:ef:5d:65:a3:2c:e8:e4:c3:e9:
                    71:62:b4:98:22:71:bf:2c:2b:fa:00:13:b0:58:4d:
                    e3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8E:A0:A3:AE:22:B1:2B:85:24:BA:3C:BC:03:2C:A5:E9:B7:E0:30
            X509v3 Authority Key Identifier:
                keyid:4B:E2:C3:E4:D0:A7:5D:7C:40:37:97:C7:60:DD:F7:2F:52:44:2B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BE2C3E4D0A75D7C403797C760DDF72F52442B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wc6NHykgwGz6krANKJLh4cNRf51a1scFRAdMuGjt7kw/1/34352e3136352e3231382e302f32332d3233203d3e20323637393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:6c:1e:9f:b4:61:76:78:dc:85:67:ea:86:99:73:06:d7:88:
         41:8e:53:03:14:b9:03:4b:8a:5b:bf:9d:27:9e:d1:fd:23:33:
         42:12:b6:f9:87:ae:73:e0:64:e6:74:ff:a1:1c:f3:b5:26:aa:
         84:3b:7c:8d:6f:97:26:2e:ad:4f:da:52:c3:7d:9a:46:da:d1:
         db:ae:32:de:c3:58:27:58:85:0b:54:da:69:1d:59:dc:38:fa:
         0b:b4:78:96:34:3a:26:7c:73:68:d4:b5:9b:f0:7f:54:25:1b:
         0d:9d:57:9b:c1:b6:4a:11:9f:0a:d9:28:28:ae:a9:af:4a:a0:
         08:f8:c0:57:a0:b6:99:25:aa:26:43:7e:af:50:a5:cf:c1:29:
         9d:76:50:28:b0:9d:66:84:89:3d:75:40:a4:bd:16:ea:6a:e8:
         6f:83:81:8b:91:d5:67:2b:dd:6c:78:53:24:2f:5d:f9:ed:3c:
         da:6f:22:dc:6f:c2:4b:a5:d3:7d:a0:1e:66:32:9f:cb:99:57:
         c0:8a:7d:ca:78:30:13:7d:6d:4a:53:0b:ff:a2:49:06:a4:a9:
         ee:51:c0:0d:ad:db:a6:19:1e:49:7e:d2:c4:74:39:b6:3c:2c:
         02:68:6f:35:dd:8b:78:df:35:d0:3e:e4:cb:a6:92:f8:57:62:
         f8:04:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org