Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32322d3234203d3e20323637303739.roa
File:                     34352e3232372e34342e302f32322d3234203d3e20323637303739.roa (raw, json)
Hash identifier:          37+4qtUQQGuJqNSKL8gKIQF8uYV+8t2+0TcZgwVur+w=
Subject key identifier:   39:D3:60:7E:27:F6:25:8B:F0:D6:61:21:3B:C2:A3:A6:54:A9:E4:3B
Certificate issuer:       /CN=35095E12F171817DDE4EC0B91231CC009AC6496C
Certificate serial:       651AF396F68CEDFA36ABF9FBB34C6F80FCC62FC2
Authority key identifier: 35:09:5E:12:F1:71:81:7D:DE:4E:C0:B9:12:31:CC:00:9A:C6:49:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35095E12F171817DDE4EC0B91231CC009AC6496C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32322d3234203d3e20323637303739.roa
Signing time:             Thu 20 Apr 2023 14:32:38 +0000
ROA not before:           Thu 20 Apr 2023 14:27:38 +0000
ROA not after:            Thu 18 Apr 2024 14:32:38 +0000
asID:                     267079
IP address blocks:        45.227.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1a:f3:96:f6:8c:ed:fa:36:ab:f9:fb:b3:4c:6f:80:fc:c6:2f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35095E12F171817DDE4EC0B91231CC009AC6496C
        Validity
            Not Before: Apr 20 14:27:38 2023 GMT
            Not After : Apr 18 14:32:38 2024 GMT
        Subject: CN=39D3607E27F6258BF0D661213BC2A3A654A9E43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:64:aa:93:03:cc:93:8a:0d:14:90:d4:f6:
                    80:e0:f5:c4:99:07:f2:4a:9b:21:57:b1:8c:87:98:
                    d3:d6:ca:74:f5:9c:fb:fd:44:11:06:a7:10:ef:27:
                    13:4d:da:d4:68:e6:4b:2d:56:c1:e4:7c:02:09:cd:
                    ce:3c:fc:9e:ba:97:19:c7:16:cd:47:ee:a0:59:b6:
                    8f:bd:0a:70:a6:13:c0:d9:4c:a4:0e:15:00:af:fb:
                    40:f9:90:3a:44:bb:3d:3e:26:45:9e:27:fd:24:a7:
                    2f:c3:2d:47:69:11:60:d9:fc:13:cb:86:63:1a:86:
                    1f:d3:8f:b8:03:80:0b:7b:ed:a4:de:ad:bf:b3:fd:
                    a1:13:9d:ea:2f:08:40:19:0c:2e:ba:1a:a3:70:7c:
                    4c:ba:91:61:32:59:c0:e9:a5:e9:d9:35:4e:e0:78:
                    11:5d:d0:f2:02:13:a8:35:8c:d3:ba:c8:bd:a1:4f:
                    40:e2:02:bc:09:7c:69:37:ef:e5:5f:25:9a:77:bf:
                    8e:b1:a0:1c:0b:69:82:9a:36:32:83:ff:d6:0b:9d:
                    87:84:e9:96:91:62:ed:bc:31:bf:68:ac:12:1b:61:
                    27:28:3a:9c:b7:dd:8a:2a:c5:eb:20:4e:d4:f1:a1:
                    2f:ea:ca:af:6b:d9:08:2b:07:31:89:30:ff:75:96:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D3:60:7E:27:F6:25:8B:F0:D6:61:21:3B:C2:A3:A6:54:A9:E4:3B
            X509v3 Authority Key Identifier:
                keyid:35:09:5E:12:F1:71:81:7D:DE:4E:C0:B9:12:31:CC:00:9A:C6:49:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/35095E12F171817DDE4EC0B91231CC009AC6496C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35095E12F171817DDE4EC0B91231CC009AC6496C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32322d3234203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:b9:54:a3:2c:c7:69:4a:b8:0a:5a:87:ef:51:b6:a6:89:dc:
         43:ea:e4:d6:db:62:48:82:f2:78:93:8d:bd:fc:4d:5b:5b:20:
         30:a5:04:91:43:ea:5e:7c:f1:ae:8a:5a:38:10:df:5b:8f:5e:
         97:3f:21:c8:63:57:49:bd:a4:3e:8d:90:b6:c9:c7:09:33:70:
         f0:f1:df:66:18:d0:7e:31:d3:82:d6:67:82:22:9c:77:0b:78:
         e0:b8:c4:60:64:19:e1:46:a4:c3:4f:fd:9f:25:66:00:bd:94:
         76:63:66:06:5c:94:d8:ed:ab:7f:90:9a:9b:e7:ea:19:bd:2d:
         01:93:12:fe:09:10:69:9f:b6:b7:db:ca:78:5a:19:1c:c6:8f:
         b4:56:c2:be:2a:82:59:98:3b:3a:be:a2:63:4f:d9:b0:5d:73:
         bd:2c:23:72:6a:0c:28:77:29:70:8c:b5:a6:2f:ba:ba:4b:9e:
         fb:70:8e:4f:bb:bb:19:b0:ca:0f:c1:f0:b8:5d:5b:97:1d:bd:
         44:c0:72:8f:c7:ee:99:21:0a:cd:d2:ad:61:6b:bf:09:45:99:
         ad:fa:b3:78:e0:73:eb:e0:dd:18:2e:b6:96:a5:a6:25:d2:fe:
         f7:87:85:01:90:28:72:dc:2b:5b:24:68:61:3e:c2:9c:cf:6f:
         f6:18:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org