Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/34352e3136362e3136342e302f32322d3332203d3e203533313831.roa
File:                     34352e3136362e3136342e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          Ts+dXAsmd7TXNrdTxyFETmdmU7Zfsc+H2fqveZJYKmw=
Subject key identifier:   57:A9:BC:A9:8F:18:00:71:2C:53:79:58:A9:84:61:EB:53:6F:EA:D9
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       025BB83DF3AE383595BACDBEA5D0CFB05002BF3B
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/34352e3136362e3136342e302f32322d3332203d3e203533313831.roa
Signing time:             Tue 28 Feb 2023 18:02:54 +0000
ROA not before:           Tue 28 Feb 2023 17:57:54 +0000
ROA not after:            Tue 27 Feb 2024 18:02:54 +0000
asID:                     53181
IP address blocks:        45.166.164.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5b:b8:3d:f3:ae:38:35:95:ba:cd:be:a5:d0:cf:b0:50:02:bf:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Feb 28 17:57:54 2023 GMT
            Not After : Feb 27 18:02:54 2024 GMT
        Subject: CN=57A9BCA98F1800712C537958A98461EB536FEAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:91:c7:14:00:83:7d:ed:52:d4:4f:e1:1a:
                    06:ef:29:f2:63:d4:8a:2d:8a:a9:d2:ba:9c:ce:c5:
                    94:cf:22:63:02:1a:5d:33:f3:a3:7b:a4:91:e3:6d:
                    a2:10:05:eb:d7:dc:89:6f:77:0f:13:41:b6:63:96:
                    d6:bf:3e:f8:85:77:94:e9:38:c2:48:35:26:8e:70:
                    55:bf:5f:3e:fe:61:75:77:01:3f:b0:f9:c0:19:68:
                    38:75:7d:01:bd:19:8b:87:da:e0:0b:b2:a5:7f:81:
                    e8:34:9b:f9:c6:ff:d1:4e:68:ed:d6:d8:b1:a5:27:
                    a9:f9:84:42:2e:25:73:35:98:0c:e5:d8:53:ba:65:
                    fa:1e:87:e7:d9:c6:b2:93:ae:df:c4:b0:72:3c:5b:
                    64:b0:0d:55:74:e9:17:b3:e4:a4:3d:bd:ae:da:c5:
                    25:34:dd:a1:3b:39:1f:16:3f:d5:a2:0d:3a:05:86:
                    9a:0d:a9:cc:a3:34:f6:c6:01:c3:97:28:bf:41:53:
                    c1:b1:08:38:c2:5d:45:6b:b3:c2:66:47:c1:db:8f:
                    1d:14:2e:73:dd:4d:63:98:66:64:f1:a9:3b:6c:17:
                    27:27:c9:a5:b6:56:22:e4:1e:b7:77:7c:f2:d5:7a:
                    f6:8a:c9:d2:7a:a5:d9:43:48:8c:c4:c2:c2:79:83:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A9:BC:A9:8F:18:00:71:2C:53:79:58:A9:84:61:EB:53:6F:EA:D9
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/34352e3136362e3136342e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:a2:b7:36:65:60:d2:44:76:a6:3b:50:94:5b:08:92:fb:
         e4:5a:db:28:2c:e8:cc:2b:b0:ef:87:b7:d8:21:20:74:b6:cc:
         8a:8f:c1:1a:25:13:a8:89:66:2e:c0:b6:35:4d:41:16:08:6f:
         ad:44:76:15:05:ad:ff:1e:29:c9:3a:17:02:ad:68:ec:1d:3f:
         ef:f7:5e:7a:b7:0d:c6:79:89:0d:3f:97:5b:1d:2f:b6:84:a8:
         e4:fc:9f:b7:95:5d:c3:ea:eb:ab:c7:c8:32:56:d9:52:13:f8:
         72:46:be:95:7e:c5:57:82:b4:19:ff:8a:7a:d5:f5:52:bc:b7:
         6c:dc:00:27:3e:b7:66:53:ae:09:8f:a3:5e:51:12:f1:8e:98:
         91:6a:fe:44:61:81:09:8b:28:83:ec:59:a3:6a:97:80:99:50:
         db:7f:52:76:8d:cb:cc:ab:25:32:39:9b:14:fc:b5:44:37:1f:
         3e:ec:ed:88:fa:f1:24:99:f9:a2:bb:2c:04:c4:4f:fc:98:62:
         f1:41:90:4b:d8:14:a4:93:b3:4d:ea:b8:1d:e1:cb:3d:28:a0:
         40:a0:ac:7c:66:85:e0:a3:ce:b6:03:98:ba:2f:2a:bb:ca:48:
         da:2b:3f:ec:fd:d3:cf:be:c6:0b:73:c3:0a:5b:64:c3:ad:7b:
         b5:86:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org