Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa
File:                     34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa (raw, json)
Hash identifier:          XUlZVdcXV4grkH55HLIBrU9AVtOno5Jo002Jf6akiXM=
Subject key identifier:   39:69:51:F5:3B:82:D7:11:5D:B3:4E:3C:A2:38:00:87:20:C2:A4:8A
Certificate issuer:       /CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
Certificate serial:       2E42CFE3B90D131004477950E43438263F960639
Authority key identifier: 5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa
Signing time:             Mon 19 Jun 2023 17:18:27 +0000
ROA not before:           Mon 19 Jun 2023 17:13:27 +0000
ROA not after:            Mon 17 Jun 2024 17:18:27 +0000
asID:                     269433
IP address blocks:        45.185.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:42:cf:e3:b9:0d:13:10:04:47:79:50:e4:34:38:26:3f:96:06:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
        Validity
            Not Before: Jun 19 17:13:27 2023 GMT
            Not After : Jun 17 17:18:27 2024 GMT
        Subject: CN=396951F53B82D7115DB34E3CA238008720C2A48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:ca:7c:2a:c2:42:07:12:c8:6e:9d:d7:b8:
                    74:e6:df:ba:59:59:8d:00:ca:d0:89:b3:98:0a:92:
                    3f:ed:e9:b7:70:8e:a0:d5:1c:03:87:40:20:39:ec:
                    56:87:1c:62:e2:2f:d5:31:9f:5c:02:1a:65:04:0a:
                    6a:9a:61:68:d9:de:fa:ab:ac:fc:52:42:db:d7:99:
                    6e:ec:45:b4:53:6d:3f:0d:04:e1:a8:31:f3:ba:d7:
                    53:a3:53:f7:6b:ad:42:5b:00:57:2c:9f:81:46:18:
                    c8:24:92:d8:11:95:60:e1:8c:74:d7:be:bc:a7:29:
                    7c:0c:85:20:cd:91:0a:28:34:30:0e:ec:90:01:0d:
                    54:84:97:14:21:45:7c:aa:28:7a:c8:28:1d:67:a1:
                    6d:3e:eb:61:cc:0d:69:6f:a0:ab:11:06:5f:6d:28:
                    ad:33:e3:8b:9c:96:4f:4e:1b:a5:0e:eb:d0:21:cd:
                    ad:73:60:10:77:8e:fc:9f:ae:8c:c3:d3:9f:8b:2e:
                    b4:9b:bb:cb:7f:0b:26:b2:77:cb:7d:5d:54:fc:c4:
                    29:78:ac:24:f2:9e:ec:66:a2:7c:6b:24:04:46:1e:
                    5d:ef:c2:10:0a:6e:78:98:d9:65:46:f3:47:aa:d0:
                    c6:a4:94:a9:bd:15:84:3f:ff:f6:56:a8:6b:f6:e6:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:69:51:F5:3B:82:D7:11:5D:B3:4E:3C:A2:38:00:87:20:C2:A4:8A
            X509v3 Authority Key Identifier:
                keyid:5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/34352e3138352e3233312e302f32342d3234203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:ff:6c:38:8d:d6:b7:23:53:83:27:bf:4b:20:e5:47:6f:
         6f:b9:e0:53:53:8f:25:2c:50:41:a1:76:15:5d:57:b2:af:7d:
         6e:99:ce:84:b0:b6:b4:41:7c:cd:88:97:0c:ad:25:ea:83:0b:
         89:73:8b:b3:d6:a8:56:4c:60:a0:db:b4:64:99:0d:9f:e8:cf:
         c8:19:83:21:b9:4a:b2:99:d4:74:11:e5:be:87:17:ff:2f:2b:
         cf:1f:4a:5d:3f:9d:ef:f6:13:4e:bc:de:4e:8e:43:00:35:ec:
         08:95:61:55:a5:5d:4c:ea:73:82:92:57:75:0c:d1:cf:30:94:
         64:3d:72:c0:11:81:bb:66:bd:dc:08:6e:59:09:15:5d:36:66:
         b2:86:df:49:d2:28:b8:b4:67:90:03:45:4f:ef:38:c5:4c:d1:
         24:48:2c:4c:05:db:d5:42:3d:89:43:e2:3f:c3:93:22:0a:38:
         ab:5c:99:3d:ca:5c:12:7b:9d:1f:a7:ad:4f:7f:34:3e:d4:05:
         59:c4:0b:7e:eb:07:8e:4b:bd:a5:cb:d1:85:51:72:3f:da:c7:
         9a:fe:3c:8c:0a:1c:1b:12:7e:8e:68:4c:31:4a:0e:41:9b:be:
         8f:15:d6:7e:21:2d:f0:ef:30:ec:b6:e7:0d:5b:8d:31:fb:6f:
         88:c0:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org