Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/34352e3137332e3138382e302f32322d3332203d3e20323638383836.roa
File:                     34352e3137332e3138382e302f32322d3332203d3e20323638383836.roa (raw, json)
Hash identifier:          NzxcpifmH/tYNsdatzgnkcPVUZQ9aWo++q6L0X5ORDg=
Subject key identifier:   86:71:8D:DD:F5:B5:D7:5F:67:7D:A3:7E:B3:DE:8A:7B:CD:F0:FC:C6
Certificate issuer:       /CN=BE253B1D2A29537AA15E656F80DD5C74AB78B69D
Certificate serial:       1F4A7801E44A004041400FB2339E935F3783DD4F
Authority key identifier: BE:25:3B:1D:2A:29:53:7A:A1:5E:65:6F:80:DD:5C:74:AB:78:B6:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/34352e3137332e3138382e302f32322d3332203d3e20323638383836.roa
Signing time:             Mon 24 Jul 2023 13:07:11 +0000
ROA not before:           Mon 24 Jul 2023 13:02:11 +0000
ROA not after:            Mon 22 Jul 2024 13:07:11 +0000
asID:                     268886
IP address blocks:        45.173.188.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4a:78:01:e4:4a:00:40:41:40:0f:b2:33:9e:93:5f:37:83:dd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE253B1D2A29537AA15E656F80DD5C74AB78B69D
        Validity
            Not Before: Jul 24 13:02:11 2023 GMT
            Not After : Jul 22 13:07:11 2024 GMT
        Subject: CN=86718DDDF5B5D75F677DA37EB3DE8A7BCDF0FCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:38:66:ee:ea:c8:97:49:c9:af:37:35:09:d0:
                    56:9b:19:ca:5c:e3:85:c1:2b:ad:bb:16:69:94:ff:
                    72:54:e2:da:e9:a9:7f:f9:59:c4:be:f2:27:c2:5a:
                    4c:2b:8c:f0:24:1e:4c:9d:dc:4b:69:92:87:a9:34:
                    3c:96:c6:8e:6e:35:48:75:c7:8b:81:79:cf:68:cc:
                    9f:84:eb:04:0e:66:a4:1a:19:68:24:6f:f9:4c:b4:
                    26:27:ff:93:b8:c9:c3:02:d5:9e:54:cb:68:a6:43:
                    32:7e:cd:94:cc:df:51:f2:b9:7b:a7:21:03:77:a2:
                    b1:03:b1:39:3b:97:f2:ea:ff:07:32:2b:df:59:fa:
                    f6:58:3f:b9:bc:7d:0b:89:f4:7e:35:79:0f:23:85:
                    15:b5:99:1c:7b:04:fd:b9:3d:50:40:32:85:b6:d3:
                    bf:63:6f:14:65:85:1a:08:f6:45:1b:73:19:fc:06:
                    ab:bf:45:99:df:fa:86:57:83:55:01:bf:3a:c6:ef:
                    9e:c1:a9:6d:13:b7:ef:1e:8b:d1:52:67:58:9a:fa:
                    b7:6d:98:9e:6e:f7:ef:d9:bc:9a:99:43:f4:06:f7:
                    af:a9:49:1a:78:65:c3:ec:aa:2b:86:b3:ce:f5:8a:
                    49:2e:20:17:be:88:aa:8b:cb:22:6a:3c:7a:b0:32:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:71:8D:DD:F5:B5:D7:5F:67:7D:A3:7E:B3:DE:8A:7B:CD:F0:FC:C6
            X509v3 Authority Key Identifier:
                keyid:BE:25:3B:1D:2A:29:53:7A:A1:5E:65:6F:80:DD:5C:74:AB:78:B6:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/34352e3137332e3138382e302f32322d3332203d3e20323638383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:ae:25:45:3d:ec:70:84:ef:73:67:19:05:5c:ef:f4:f4:e5:
         a2:33:ba:72:59:65:4a:41:a7:d2:a5:9b:e7:0b:8b:21:0c:95:
         9b:f7:e7:16:0d:12:9d:d8:cd:c0:cb:c7:22:9b:95:5a:b3:4a:
         34:1f:7f:09:98:8b:c2:a1:29:76:99:02:63:7c:b6:7a:1e:6f:
         6f:14:a9:f8:31:b0:b8:ae:58:b1:b9:53:df:9c:d1:12:96:c3:
         a4:8d:a4:93:04:fd:3b:dc:8c:7f:ff:ce:76:ef:57:c3:57:43:
         89:c0:5b:06:aa:05:6b:f5:9e:2b:02:55:41:ba:e6:1a:72:ce:
         d9:42:3f:d2:7e:70:49:55:d3:87:dd:54:9a:ea:33:d6:fa:a2:
         8f:dd:87:3c:da:ed:2e:22:c5:e5:57:bc:ce:38:bc:f7:51:9d:
         b7:95:74:18:97:b1:a8:e1:21:1a:34:73:d0:f9:55:8e:85:55:
         0d:66:43:3e:99:fe:f7:62:a9:ec:57:b1:3a:0a:90:e3:44:42:
         40:2c:99:44:07:9b:02:28:91:1f:ef:98:36:33:a3:b8:f0:28:
         6a:8e:8d:f1:6a:51:46:ca:9e:5a:44:3d:a6:ad:91:6b:aa:46:
         4a:52:f8:23:c1:29:2a:e3:80:1c:a4:f5:1d:d7:3d:67:aa:68:
         29:95:d1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org