Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39322e302f32322d3234203d3e20323638313439.roa
File:                     34352e3137302e39322e302f32322d3234203d3e20323638313439.roa (raw, json)
Hash identifier:          APEHpXLSJRMrivm/Qx51Gzo0+Fxrf5NAe676/JmAhgE=
Subject key identifier:   FE:09:6D:C9:1B:80:3F:42:0F:B6:EE:9E:AE:C3:75:ED:BC:3C:F2:75
Certificate issuer:       /CN=EC27B2D17E0186C08D879669E1FC4B395BBB0B1C
Certificate serial:       77E502973229CD9D2EFF5D63468E63B53946E7EC
Authority key identifier: EC:27:B2:D1:7E:01:86:C0:8D:87:96:69:E1:FC:4B:39:5B:BB:0B:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39322e302f32322d3234203d3e20323638313439.roa
Signing time:             Wed 13 Sep 2023 16:34:23 +0000
ROA not before:           Wed 13 Sep 2023 16:29:23 +0000
ROA not after:            Wed 11 Sep 2024 16:34:23 +0000
asID:                     268149
IP address blocks:        45.170.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e5:02:97:32:29:cd:9d:2e:ff:5d:63:46:8e:63:b5:39:46:e7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC27B2D17E0186C08D879669E1FC4B395BBB0B1C
        Validity
            Not Before: Sep 13 16:29:23 2023 GMT
            Not After : Sep 11 16:34:23 2024 GMT
        Subject: CN=FE096DC91B803F420FB6EE9EAEC375EDBC3CF275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:6f:a5:e6:d5:05:b3:ce:d8:e9:fb:af:d2:
                    6d:32:8b:32:89:3c:97:9d:44:92:88:d0:60:33:e7:
                    f6:dd:cb:9e:04:d4:01:fc:29:e9:fd:b1:32:28:40:
                    70:ee:61:89:da:74:6c:0d:0b:66:ad:64:6c:1e:56:
                    47:20:56:b3:0e:09:71:bc:a3:88:a1:3d:93:cc:b0:
                    3a:6d:31:71:02:ca:80:45:f2:74:6d:3e:5a:7c:43:
                    16:e2:c1:e7:7d:73:97:0c:a1:e8:2a:44:13:e9:5b:
                    c9:d5:94:54:f7:de:3d:28:be:32:9d:97:61:4a:c9:
                    0c:02:59:b2:0c:b5:18:13:bb:68:2b:e3:c7:8f:da:
                    6c:69:5d:97:43:ba:62:76:67:ca:4e:fb:d9:84:e2:
                    60:2e:68:a5:59:69:e7:41:f4:90:e2:f8:ee:55:7f:
                    a2:d3:a4:46:66:c3:68:00:a3:93:13:47:95:0d:e3:
                    51:05:7b:e2:5f:19:9d:38:ab:55:09:18:e0:3a:83:
                    02:af:67:0e:db:ea:ff:df:60:d9:12:6a:46:64:6c:
                    12:9e:d7:d7:3c:7e:33:3e:1f:b0:ad:6b:5e:b9:94:
                    41:a0:91:3f:8d:83:78:99:f3:de:32:a0:67:09:97:
                    ee:74:72:c9:9d:36:d3:e6:3a:1c:16:a3:14:43:1d:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:09:6D:C9:1B:80:3F:42:0F:B6:EE:9E:AE:C3:75:ED:BC:3C:F2:75
            X509v3 Authority Key Identifier:
                keyid:EC:27:B2:D1:7E:01:86:C0:8D:87:96:69:E1:FC:4B:39:5B:BB:0B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC27B2D17E0186C08D879669E1FC4B395BBB0B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YXL3wyjuwrtfsF3r8reLFQ5KnbeAyGhkuK5ghKJiCQd/0/34352e3137302e39322e302f32322d3234203d3e20323638313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:74:db:1e:27:4c:cf:92:87:8f:a8:3b:f1:a7:8d:2e:52:ff:
         50:21:95:f3:77:c9:47:81:f6:04:2b:83:13:ce:dd:aa:39:a3:
         46:b8:96:99:5b:80:17:85:aa:ac:14:37:31:19:8f:7b:ca:6f:
         75:2b:6d:6d:9b:76:9a:f3:ff:03:91:09:b1:36:41:a0:5f:99:
         de:33:23:69:a7:04:ea:56:97:f1:69:5d:f5:ec:c6:b8:71:59:
         4e:5e:9e:94:8a:a1:b8:db:75:2d:dd:13:b2:82:32:3d:1c:6b:
         5c:dd:05:5b:24:df:c1:72:de:a3:f2:03:13:e3:d4:26:9e:1e:
         37:48:d8:ca:6f:b9:02:36:7f:a5:02:f2:ab:39:4b:e0:25:dc:
         ca:11:9b:8a:2b:5b:0d:f2:f4:8d:45:86:3b:49:ba:93:da:c2:
         d1:e2:2e:8c:f1:ce:51:13:c7:b1:cf:fd:14:0f:94:34:71:8c:
         5a:23:ac:07:e6:19:04:8d:85:17:2f:fc:7f:0e:c0:02:ed:33:
         0e:e9:fc:61:10:b9:9a:21:ef:5f:4f:89:10:d5:a8:37:04:7e:
         e1:f3:14:e8:be:ba:9d:47:69:02:f5:39:d3:31:ff:27:d5:34:
         22:c9:f9:c8:ac:17:9e:e7:77:18:d7:df:5f:6a:03:fa:d9:49:
         6f:3c:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org