Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/1/34352e3137342e3135362e302f32322d3234203d3e20323636313330.roa
File:                     34352e3137342e3135362e302f32322d3234203d3e20323636313330.roa (raw, json)
Hash identifier:          kPGJ98hwa8DZCEJVisomH35TvtapqwqmWB/fog5Ry+s=
Subject key identifier:   50:D8:ED:02:EC:97:F6:26:D6:81:9A:65:7B:37:88:D1:8D:F1:E1:BA
Certificate issuer:       /CN=EEB5C5F27AE27F49E4A2BF5439CFCF33A08B544E
Certificate serial:       38DE6317498F4507B3CBFE8D4529FC3108710D09
Authority key identifier: EE:B5:C5:F2:7A:E2:7F:49:E4:A2:BF:54:39:CF:CF:33:A0:8B:54:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEB5C5F27AE27F49E4A2BF5439CFCF33A08B544E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/1/34352e3137342e3135362e302f32322d3234203d3e20323636313330.roa
Signing time:             Thu 04 Apr 2024 19:28:34 +0000
ROA not before:           Thu 04 Apr 2024 19:23:34 +0000
ROA not after:            Thu 03 Apr 2025 19:28:34 +0000
asID:                     266130
IP address blocks:        45.174.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:de:63:17:49:8f:45:07:b3:cb:fe:8d:45:29:fc:31:08:71:0d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEB5C5F27AE27F49E4A2BF5439CFCF33A08B544E
        Validity
            Not Before: Apr  4 19:23:34 2024 GMT
            Not After : Apr  3 19:28:34 2025 GMT
        Subject: CN=50D8ED02EC97F626D6819A657B3788D18DF1E1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:2c:a6:03:22:c3:24:2e:22:c7:63:92:04:
                    6f:03:25:90:cb:ed:df:f1:51:c3:90:53:2d:11:7a:
                    1c:0f:86:67:4f:06:8c:ec:57:2f:d7:8c:45:04:d0:
                    cb:d5:9c:cc:0c:55:a2:d6:93:36:7c:2f:2b:37:f2:
                    49:41:08:6f:6e:84:cc:d3:da:0d:e8:7b:69:64:63:
                    2c:fe:42:2c:e9:a5:ba:8b:6f:21:a4:c7:c8:a3:b7:
                    3c:46:8a:bb:a1:e7:7f:6c:7e:2b:e2:11:4f:a3:66:
                    40:53:1f:13:7a:71:f2:79:9a:20:e7:ec:d7:c1:c3:
                    e7:5f:e3:52:0f:03:08:53:6a:f3:ff:d3:cd:da:1d:
                    0c:8a:e3:af:cc:c0:d0:de:af:4c:97:1f:3c:5e:68:
                    55:c6:af:74:4a:5f:57:82:76:46:54:cf:f6:03:55:
                    bc:cd:38:a9:e9:a0:8b:39:cf:f6:63:c0:c9:bd:4b:
                    64:4d:0e:e2:44:31:04:de:3a:eb:b8:aa:e8:d9:6b:
                    78:8b:25:a2:af:19:06:fb:47:9d:42:95:af:d3:13:
                    41:6d:c3:94:89:f1:83:c7:fa:ed:79:6d:b6:be:31:
                    57:fd:1e:28:5f:a1:59:a8:07:e8:64:8d:63:9f:bb:
                    cb:72:3f:e5:bc:2b:e2:7d:a4:dd:3a:72:30:e5:39:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D8:ED:02:EC:97:F6:26:D6:81:9A:65:7B:37:88:D1:8D:F1:E1:BA
            X509v3 Authority Key Identifier:
                keyid:EE:B5:C5:F2:7A:E2:7F:49:E4:A2:BF:54:39:CF:CF:33:A0:8B:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/1/EEB5C5F27AE27F49E4A2BF5439CFCF33A08B544E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEB5C5F27AE27F49E4A2BF5439CFCF33A08B544E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kQF2Zw4BaneDRLNLBWZRCtD2Z23H56zjEf8tw69AYJD/1/34352e3137342e3135362e302f32322d3234203d3e20323636313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:68:7b:12:41:a3:18:55:95:42:7c:16:34:81:ef:85:fe:c6:
         e9:93:e7:e4:b3:64:d3:aa:09:e6:03:88:d9:84:af:1c:30:88:
         04:c6:3e:5a:cc:48:93:ce:a6:a5:05:40:9c:30:08:57:47:c1:
         cb:2d:79:d1:8c:57:c9:7b:f4:cd:4c:a9:11:8e:eb:9c:c3:67:
         01:d4:22:50:93:bc:76:fe:62:e2:bc:a8:a6:75:82:9f:88:b8:
         0a:f5:a4:05:7a:93:2d:6e:86:1d:3c:27:e6:6d:7f:6b:17:a9:
         ef:77:2b:4b:60:47:1c:8e:a1:32:e0:98:23:f8:c5:32:8e:a3:
         65:e2:3e:bf:5f:d0:64:c6:00:21:d4:5b:35:1c:32:e1:f8:c7:
         0a:e1:52:c8:2a:73:c5:c7:71:35:5b:01:c4:9a:a4:88:92:47:
         b6:c3:5e:d7:ef:53:e5:76:5a:98:63:0d:cc:ae:84:62:2e:0e:
         25:85:07:af:ee:9c:2c:ae:8b:8e:b6:f2:5c:8e:a6:82:7d:0b:
         5b:da:81:9e:03:50:a8:5b:cd:37:1f:6b:fd:d0:7a:0a:1f:9f:
         fe:5a:e1:73:8f:b2:5c:3d:db:66:43:b4:e3:e0:47:e5:41:98:
         c7:53:b9:9b:a5:1e:81:0f:18:9a:c7:0f:39:31:2f:29:d2:c4:
         ba:fe:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org