Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32322d3234203d3e20323637303132.roa
File:                     34352e3232372e3132302e302f32322d3234203d3e20323637303132.roa (raw, json)
Hash identifier:          f2a6Km4FwoFhnCJzLL0ThhlaPfYd+SXQtTVE/+XR6bo=
Subject key identifier:   DF:D5:9F:B6:BA:B7:7D:82:7A:21:19:F4:4D:99:6A:A0:6A:C8:80:03
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       2A0918980DA74B3D97E79CCC487334995E21FDFA
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32322d3234203d3e20323637303132.roa
Signing time:             Thu 15 Jun 2023 14:00:01 +0000
ROA not before:           Thu 15 Jun 2023 13:55:01 +0000
ROA not after:            Thu 13 Jun 2024 14:00:01 +0000
asID:                     267012
IP address blocks:        45.227.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:09:18:98:0d:a7:4b:3d:97:e7:9c:cc:48:73:34:99:5e:21:fd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Jun 15 13:55:01 2023 GMT
            Not After : Jun 13 14:00:01 2024 GMT
        Subject: CN=DFD59FB6BAB77D827A2119F44D996AA06AC88003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:fa:48:25:97:f0:cd:d6:54:96:af:f4:bf:
                    8c:6f:10:39:1a:72:66:3f:90:cd:0d:cc:f9:d6:74:
                    33:23:90:6b:11:a4:fe:6c:51:6d:b1:72:16:c6:9a:
                    49:29:0d:4e:a2:57:9b:1a:cd:ce:d6:33:5d:04:7a:
                    43:cd:5e:35:9a:bd:1a:37:bd:fb:41:74:46:8a:7b:
                    0c:c1:c2:4c:c8:39:66:74:be:51:95:8c:cc:62:dc:
                    89:06:54:ec:c5:82:5d:75:d6:1a:82:e9:99:3d:41:
                    36:b8:f4:37:9e:a7:0b:0e:9d:98:52:bb:16:37:0a:
                    04:50:f1:c1:db:bd:c6:cb:d5:1c:68:b1:fe:31:c2:
                    30:c9:37:f5:6f:2f:0c:7e:2b:a6:48:6e:b4:c7:46:
                    fe:5a:6c:b0:5f:50:51:0a:67:ad:3f:25:d4:28:7d:
                    a0:7f:9d:48:90:31:91:5e:61:08:df:94:fd:02:07:
                    6b:fd:18:a1:75:31:c1:37:89:e2:69:e5:41:cc:71:
                    48:9d:5e:ae:42:f3:ed:02:26:14:26:b0:cb:9d:44:
                    83:60:4a:c9:70:87:52:54:f4:e0:5d:20:2a:74:0d:
                    a1:19:c0:66:95:c6:a5:3b:ca:a3:7f:b8:9e:a4:64:
                    fe:c2:31:51:1a:5f:ec:fd:ea:74:39:36:96:52:56:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D5:9F:B6:BA:B7:7D:82:7A:21:19:F4:4D:99:6A:A0:6A:C8:80:03
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32322d3234203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:14:81:a4:df:19:07:f1:45:fc:6f:aa:29:e5:f5:5d:ac:c8:
         4f:57:5d:5c:e9:1f:85:42:7f:c4:42:d3:b1:cb:61:57:0e:d0:
         a3:2f:14:9c:04:ce:2c:89:94:8d:38:2c:1b:33:22:d7:59:70:
         ba:4f:e9:6e:43:9d:fe:fb:4c:19:11:54:91:78:f7:68:ba:a1:
         95:18:db:9d:08:ce:94:cd:3a:f4:14:17:2e:9f:84:b3:11:f4:
         73:82:fe:f6:c5:75:27:55:5c:56:94:ef:ea:ad:8d:f2:79:a5:
         eb:c3:de:0d:b9:b8:65:f4:85:cf:f1:b9:68:30:46:be:27:4d:
         43:90:9a:42:47:f9:a0:84:d4:81:85:81:3c:20:92:78:bf:71:
         63:b2:65:f9:35:e7:ad:f7:73:83:35:64:73:e1:6d:25:96:f8:
         16:a9:e4:2d:ab:69:54:46:47:cc:b8:d6:26:84:9d:42:0b:cc:
         58:9f:b1:27:ab:ea:e9:30:b3:4b:5f:99:a4:64:f3:d5:41:0f:
         57:34:d6:0d:14:24:27:ee:c8:c8:0c:ac:44:27:27:f4:21:53:
         d4:b8:f9:7b:37:75:7d:15:2b:96:27:49:f6:47:0a:e4:a4:45:
         ee:b8:68:3c:5f:6e:a8:62:ab:1c:ee:23:f1:be:db:07:f0:df:
         91:b4:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org