Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ocknxkAtgsgH7Ah46D3v14XgXRcmAR2KjpPZLNX37uM/0/34352e3136342e3233322e302f32322d3332203d3e20323638363433.roa
File:                     34352e3136342e3233322e302f32322d3332203d3e20323638363433.roa (raw, json)
Hash identifier:          jN8msLdIQw6w4dYc03u6ADeawNP/E0r6Q6xbl4hBdxc=
Subject key identifier:   F5:93:0B:43:59:4C:6A:C6:67:24:32:E1:7A:9F:5D:9B:C8:4E:E3:6B
Certificate issuer:       /CN=9252F863D5BC12B6887E094E6F1859649B803103
Certificate serial:       412DB9181DFB52F6A1DFF34CF1428E0FFA6AEA9C
Authority key identifier: 92:52:F8:63:D5:BC:12:B6:88:7E:09:4E:6F:18:59:64:9B:80:31:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9252F863D5BC12B6887E094E6F1859649B803103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ocknxkAtgsgH7Ah46D3v14XgXRcmAR2KjpPZLNX37uM/0/34352e3136342e3233322e302f32322d3332203d3e20323638363433.roa
Signing time:             Mon 06 Feb 2023 18:09:33 +0000
ROA not before:           Mon 06 Feb 2023 18:04:33 +0000
ROA not after:            Mon 05 Feb 2024 18:09:33 +0000
asID:                     268643
IP address blocks:        45.164.232.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2d:b9:18:1d:fb:52:f6:a1:df:f3:4c:f1:42:8e:0f:fa:6a:ea:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9252F863D5BC12B6887E094E6F1859649B803103
        Validity
            Not Before: Feb  6 18:04:33 2023 GMT
            Not After : Feb  5 18:09:33 2024 GMT
        Subject: CN=F5930B43594C6AC6672432E17A9F5D9BC84EE36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:61:e9:30:a6:c3:d0:03:17:20:1a:73:de:
                    7c:60:36:b5:ef:1b:0a:de:07:b5:90:ef:67:ad:05:
                    e6:5c:14:91:8b:eb:13:e6:fa:4a:dd:65:d5:1c:ad:
                    3a:e2:3b:e3:cf:87:a0:7a:2b:dc:3e:c6:31:40:1a:
                    d1:44:14:bd:02:bc:2e:22:a2:81:15:c4:7d:a2:21:
                    e9:25:de:0d:ff:8e:39:e4:e6:ed:ba:3f:c4:21:03:
                    dc:a2:c0:8a:3d:bf:66:fc:ca:4b:4b:e7:27:98:fc:
                    0f:ff:34:91:28:54:e6:e8:f3:7b:67:51:db:ac:31:
                    0b:0e:58:98:3a:0c:46:08:b0:d8:f3:88:2e:08:5b:
                    d6:57:3c:36:e6:ff:cf:21:03:34:fe:e7:c3:b8:10:
                    29:ec:a2:45:d7:f9:32:dd:c4:9f:a1:09:ca:c4:de:
                    b7:96:bc:58:ff:7d:df:fc:fe:d4:96:bf:04:fb:52:
                    d5:ec:35:29:fb:3a:08:0c:86:75:13:f6:4a:c2:a3:
                    99:d6:02:a8:47:b0:5c:a1:9c:ab:1e:d0:5c:95:1d:
                    98:57:75:2c:11:ca:73:d1:1e:a1:07:45:27:10:3b:
                    e8:2f:0a:7b:64:13:7b:a9:04:66:78:6a:ca:bf:da:
                    c1:77:d1:4a:35:c8:96:3a:b9:e1:e2:23:9a:17:6b:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:93:0B:43:59:4C:6A:C6:67:24:32:E1:7A:9F:5D:9B:C8:4E:E3:6B
            X509v3 Authority Key Identifier:
                keyid:92:52:F8:63:D5:BC:12:B6:88:7E:09:4E:6F:18:59:64:9B:80:31:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ocknxkAtgsgH7Ah46D3v14XgXRcmAR2KjpPZLNX37uM/0/9252F863D5BC12B6887E094E6F1859649B803103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9252F863D5BC12B6887E094E6F1859649B803103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ocknxkAtgsgH7Ah46D3v14XgXRcmAR2KjpPZLNX37uM/0/34352e3136342e3233322e302f32322d3332203d3e20323638363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:29:b0:d0:f9:32:48:0e:78:f4:92:f5:76:30:b1:84:ff:a0:
         f3:90:08:a2:e3:dd:ac:25:21:0f:81:9d:16:a1:75:93:1b:b3:
         34:26:87:d4:23:40:93:d4:b9:40:34:ce:3c:07:f9:8e:af:d4:
         b0:57:a5:d7:61:02:49:8c:29:d9:b5:0f:8c:b2:fa:df:e3:2c:
         d5:fe:f4:45:0b:07:00:9f:87:d2:a0:24:36:20:d3:0b:25:66:
         ce:ef:fc:e7:37:e9:a3:4e:2a:51:b4:b1:4b:69:98:8b:69:7d:
         da:25:e1:f7:1a:2f:e5:84:b3:62:c4:1d:8d:4d:21:63:35:e1:
         dd:97:1d:a9:8b:f1:75:9e:59:3f:c9:b8:0e:c2:05:3c:ba:53:
         b1:8b:3c:ba:1c:8f:3a:fa:6e:fa:07:37:9e:30:91:49:61:9d:
         38:29:06:c2:ba:f5:68:0f:cb:7c:fa:6b:48:dc:52:39:c3:be:
         b4:41:3e:f0:9d:19:1c:48:a7:24:13:f9:c4:4d:8d:75:38:0d:
         0a:65:ee:b4:52:fd:f3:18:ce:55:cb:1a:bc:59:49:df:ac:6c:
         6a:52:7d:8f:0f:31:18:81:78:77:89:63:b9:3a:9c:63:77:77:
         bb:08:af:be:26:3a:27:5a:a3:f7:2c:a1:27:97:1d:7d:ac:20:
         35:c3:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org