Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3136362e3230342e302f32322d3232203d3e20323632343831.roa
File:                     34352e3136362e3230342e302f32322d3232203d3e20323632343831.roa (raw, json)
Hash identifier:          hdDrykdkBg67bWAxDIvbhz10HoIB8nAU6xkt36hMtec=
Subject key identifier:   11:4C:F0:17:FD:75:7F:84:32:63:42:33:02:AD:27:4B:41:BF:1E:76
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       58FA44EDAB84F68CEE8500B7CD807D943609CBB5
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3136362e3230342e302f32322d3232203d3e20323632343831.roa
Signing time:             Tue 21 Jun 2022 12:56:00 +0000
ROA not before:           Tue 21 Jun 2022 12:51:00 +0000
ROA not after:            Tue 20 Jun 2023 12:56:00 +0000
asID:                     262481
IP address blocks:        45.166.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fa:44:ed:ab:84:f6:8c:ee:85:00:b7:cd:80:7d:94:36:09:cb:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Jun 21 12:51:00 2022 GMT
            Not After : Jun 20 12:56:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:e6:0a:6a:ca:60:8b:39:8a:07:d8:d9:a0:
                    a9:3c:cc:c7:7e:fd:2b:4d:b1:37:6f:14:46:2d:e1:
                    4c:7f:48:b0:be:38:ce:de:04:76:cd:5e:38:6f:02:
                    42:3a:b5:35:cb:44:30:fa:50:c6:eb:ee:e8:04:42:
                    52:12:8e:46:f6:2c:67:32:79:06:08:c6:c2:f5:73:
                    3e:14:7e:12:f2:02:48:24:c0:79:d1:c5:da:45:2b:
                    70:06:cc:df:b1:45:ac:a4:c6:d5:b9:c7:65:ff:91:
                    dc:68:49:a1:99:95:21:fa:2a:35:f4:74:9f:9f:59:
                    7f:10:93:ae:3b:e8:44:d1:a2:a9:4f:9a:0c:ad:c9:
                    6e:f5:ac:6c:5c:ca:ef:16:50:18:3c:64:1b:34:28:
                    68:3f:58:e1:5e:98:56:2a:8a:8b:ba:8b:33:75:f9:
                    2a:3d:c4:07:d0:0f:46:fa:3d:dd:f9:bc:ea:f3:15:
                    2d:47:2a:bc:7e:ca:25:42:8e:e8:cd:c6:21:fb:99:
                    87:78:4b:15:93:fe:0f:5a:93:21:d0:e5:fd:e7:3f:
                    ca:84:34:09:22:db:39:3d:6f:1f:56:6c:fc:1e:ef:
                    f0:9d:b8:62:ea:75:6b:c1:0f:d8:41:d7:4e:9d:b0:
                    6d:65:02:35:c0:f3:3b:61:5b:4c:8b:97:5e:c7:d3:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4C:F0:17:FD:75:7F:84:32:63:42:33:02:AD:27:4B:41:BF:1E:76
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3136362e3230342e302f32322d3232203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:2b:f9:cf:ef:68:36:34:12:a2:16:bd:7a:93:d6:68:36:de:
         47:79:9a:1e:b4:4c:6d:cd:b1:a4:83:82:d9:a0:ae:b9:c1:ae:
         87:49:df:57:4b:30:7a:e2:f2:f6:eb:c3:b2:7a:27:97:70:11:
         c0:60:81:ce:7c:9f:bc:4c:75:ab:78:4d:19:a3:1c:2a:20:ec:
         c4:6f:b0:e9:f6:09:6d:4d:67:ce:51:d1:74:17:02:f6:c9:93:
         e9:bb:87:8f:84:91:08:aa:ce:e8:35:ce:5e:82:6c:94:3a:4f:
         ec:ac:2f:f8:0a:b0:a9:7d:5a:98:ae:71:7e:47:47:cb:75:c7:
         59:7b:e5:61:c4:15:67:b5:5d:77:84:f0:61:b5:17:b6:a9:97:
         4c:28:f2:d9:dc:66:7b:fd:5d:ec:1a:11:53:d0:73:67:17:b5:
         31:36:38:68:3e:54:53:13:18:50:b0:e4:bf:0b:e9:54:02:a4:
         7d:a9:7a:17:ef:10:b2:7c:e7:ea:90:24:06:39:b6:ae:ac:e8:
         f6:7b:9d:4d:0f:c9:5d:ae:69:c7:16:04:ec:ad:30:3b:37:b7:
         7c:31:72:bc:d9:0f:c2:ba:44:0a:a1:20:5f:91:a5:46:d6:8f:
         d4:80:52:51:25:7c:70:17:7d:11:d5:d2:3b:79:37:18:b0:4b:
         ea:1c:16:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org