Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/34352e3136322e32382e302f32322d3234203d3e20323638353236.roa
File:                     34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (raw, json)
Hash identifier:          W57An6zRRvy5aV4NnrOQwQSBnXSLKgwVW+SEk+3uNdU=
Subject key identifier:   CB:C2:CA:FF:60:19:52:3C:A2:62:CF:E1:25:D9:D7:BB:F8:32:D2:5B
Certificate issuer:       /CN=6AA653327DB763726AB6E1EA9F8796C258231F94
Certificate serial:       52608E6E7BA9749849C9162DD10955FB33DC3B5E
Authority key identifier: 6A:A6:53:32:7D:B7:63:72:6A:B6:E1:EA:9F:87:96:C2:58:23:1F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AA653327DB763726AB6E1EA9F8796C258231F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/34352e3136322e32382e302f32322d3234203d3e20323638353236.roa
Signing time:             Tue 08 Aug 2023 15:36:52 +0000
ROA not before:           Tue 08 Aug 2023 15:31:52 +0000
ROA not after:            Tue 06 Aug 2024 15:36:52 +0000
asID:                     268526
IP address blocks:        45.162.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:60:8e:6e:7b:a9:74:98:49:c9:16:2d:d1:09:55:fb:33:dc:3b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AA653327DB763726AB6E1EA9F8796C258231F94
        Validity
            Not Before: Aug  8 15:31:52 2023 GMT
            Not After : Aug  6 15:36:52 2024 GMT
        Subject: CN=CBC2CAFF6019523CA262CFE125D9D7BBF832D25B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:04:64:0a:e5:29:a8:66:0b:ba:92:37:99:
                    b3:f2:dd:1b:21:d0:43:8d:95:7d:56:68:a9:28:93:
                    76:12:d8:73:24:a5:86:dd:f0:6e:30:92:53:bd:c3:
                    88:ca:5c:04:f5:27:ab:71:b3:e1:40:79:5b:dd:76:
                    be:f3:6c:4b:c8:e5:f2:b9:e8:0c:03:a9:5f:c9:2f:
                    ec:0e:1a:fa:c5:16:bd:12:69:4a:b2:16:14:4d:03:
                    de:b8:d4:b8:3e:4c:c1:7d:34:f9:c8:93:66:55:9f:
                    18:3b:2c:bc:c2:61:83:9c:7e:a8:d7:0a:d5:70:8e:
                    d8:56:b0:f2:bd:93:29:47:4c:4e:9f:bb:32:7c:7b:
                    b7:85:f0:1e:68:16:25:5b:b9:75:dc:cd:26:50:6b:
                    d1:b7:a8:b8:3e:f3:bb:7c:9c:a7:30:3c:98:e1:9f:
                    d2:06:ba:9c:6a:d0:19:a0:64:1e:3e:e9:cb:ab:7b:
                    ef:f5:ea:07:fa:ce:84:8e:38:03:c7:6c:d2:b4:11:
                    55:0c:03:a3:09:a4:d6:55:5a:aa:0b:9b:e1:90:1f:
                    cb:43:5f:87:eb:0a:05:4a:53:4a:10:71:16:85:da:
                    07:e1:2e:2d:39:04:24:64:7c:0a:bd:bb:09:24:95:
                    18:1a:52:d5:aa:4e:58:f0:2a:32:aa:81:81:5d:0a:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C2:CA:FF:60:19:52:3C:A2:62:CF:E1:25:D9:D7:BB:F8:32:D2:5B
            X509v3 Authority Key Identifier:
                keyid:6A:A6:53:32:7D:B7:63:72:6A:B6:E1:EA:9F:87:96:C2:58:23:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/6AA653327DB763726AB6E1EA9F8796C258231F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AA653327DB763726AB6E1EA9F8796C258231F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/0/34352e3136322e32382e302f32322d3234203d3e20323638353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:cf:44:3b:09:4a:0a:0d:89:5b:98:58:71:f9:28:0a:e3:1b:
         62:6d:2d:29:f9:d7:72:1f:60:a4:3e:64:dd:bb:01:14:73:da:
         6c:b0:3f:70:a8:43:8d:9f:9e:83:48:16:42:3e:09:1d:44:75:
         74:28:7f:25:d6:d0:cd:63:28:26:8b:b2:e3:de:07:77:f1:30:
         8d:04:a8:5e:d8:3f:a9:30:f0:39:b6:30:98:c8:bb:25:88:a5:
         49:c9:17:19:77:36:da:73:34:76:18:f8:b2:5b:ce:ed:ff:8b:
         7b:ca:14:a7:48:bc:74:44:1d:a3:34:4b:40:8f:ec:3f:c4:ea:
         b8:3a:8c:51:ff:c7:e3:09:58:1f:76:45:e0:2e:92:b5:67:34:
         17:d0:a0:73:e1:69:27:28:e1:d8:32:38:81:53:28:26:44:1e:
         c8:2e:30:d6:6d:a4:e3:48:b6:62:9f:97:60:a8:e8:25:2b:cc:
         d0:c4:e3:c7:41:f8:51:9f:b9:a8:c8:c7:df:51:46:58:08:13:
         0d:21:84:c4:d9:6e:28:fa:cf:86:00:6a:96:5d:ad:bb:ae:47:
         40:9b:67:4f:89:96:a3:a5:fd:b4:1d:87:5e:fb:2c:86:b2:a4:
         68:e4:ab:c0:d9:7f:fe:e7:2c:76:33:df:af:c3:b5:90:8e:32:
         92:b5:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org