Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/34352e362e36342e302f32322d3234203d3e20323636313333.roa
File:                     34352e362e36342e302f32322d3234203d3e20323636313333.roa (raw, json)
Hash identifier:          /WwMUbSnZHlAF3xX/Dne+usNm3/tfncyu7fyKON4vzI=
Subject key identifier:   D3:10:AD:8C:04:D3:C1:9A:DD:72:53:85:E6:C9:52:AE:A2:37:79:F2
Certificate issuer:       /CN=569C1F392EB41C3ED38E49FFC29FAD6330A8F403
Certificate serial:       3A462556ABE5A657696E0E3EDFEDE696AEFD8AEC
Authority key identifier: 56:9C:1F:39:2E:B4:1C:3E:D3:8E:49:FF:C2:9F:AD:63:30:A8:F4:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/34352e362e36342e302f32322d3234203d3e20323636313333.roa
Signing time:             Mon 05 Feb 2024 20:44:29 +0000
ROA not before:           Mon 05 Feb 2024 20:39:29 +0000
ROA not after:            Mon 03 Feb 2025 20:44:29 +0000
asID:                     266133
IP address blocks:        45.6.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:46:25:56:ab:e5:a6:57:69:6e:0e:3e:df:ed:e6:96:ae:fd:8a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569C1F392EB41C3ED38E49FFC29FAD6330A8F403
        Validity
            Not Before: Feb  5 20:39:29 2024 GMT
            Not After : Feb  3 20:44:29 2025 GMT
        Subject: CN=D310AD8C04D3C19ADD725385E6C952AEA23779F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:d3:ec:03:c3:db:a1:8f:18:d9:dc:f2:a6:
                    2b:97:4a:af:8e:b5:19:6d:30:bd:ba:19:3e:ee:1e:
                    a6:91:eb:90:a6:6d:a0:5e:20:fd:28:d4:7b:95:7b:
                    59:9c:c8:8a:fc:1c:e0:83:88:d5:85:d9:18:14:2c:
                    b6:13:52:b7:70:c5:a0:a8:5b:46:d3:70:56:1a:68:
                    f0:5b:ac:ad:de:9a:ab:e7:0b:2a:94:6b:6a:59:7e:
                    fd:d5:45:7a:a0:59:b0:19:56:6a:5d:9c:03:ff:b8:
                    9b:94:02:ab:4e:b3:56:1a:31:57:ce:09:32:40:a1:
                    12:4a:b8:ed:82:2e:81:20:34:e0:72:3f:c2:19:88:
                    89:12:ea:2e:56:85:e3:fb:c8:31:a7:2e:5a:88:75:
                    0f:bd:3e:3e:e4:a3:b3:a9:d3:bd:56:46:29:99:5f:
                    86:d2:56:a2:0f:ac:1b:b5:3f:3d:ce:40:da:83:94:
                    c2:d8:01:60:dd:47:36:62:ad:06:1e:22:89:02:70:
                    ea:04:d8:2b:d4:fa:ce:16:d3:09:e9:0a:97:42:63:
                    30:1c:e1:db:c4:b4:a5:d2:5c:d9:e0:06:d5:a1:74:
                    15:ed:4c:54:c1:48:79:da:db:25:ff:69:0c:a0:e1:
                    1c:c0:1e:68:86:2a:a1:19:e6:6a:7b:76:5b:ef:9f:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:AD:8C:04:D3:C1:9A:DD:72:53:85:E6:C9:52:AE:A2:37:79:F2
            X509v3 Authority Key Identifier:
                keyid:56:9C:1F:39:2E:B4:1C:3E:D3:8E:49:FF:C2:9F:AD:63:30:A8:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/569C1F392EB41C3ED38E49FFC29FAD6330A8F403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/0/34352e362e36342e302f32322d3234203d3e20323636313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:7b:d8:10:d9:ae:57:1f:8b:13:3f:52:1f:72:56:fa:cf:
         b4:61:1a:28:6d:48:59:af:35:a4:63:af:7e:be:b8:02:04:38:
         da:bb:17:e1:98:31:a5:4c:c2:0f:4d:61:ad:40:38:f4:3d:61:
         9e:02:93:93:36:5a:5b:25:dc:f2:32:5f:f5:1b:c0:1b:9c:e2:
         b5:a1:fa:21:84:c3:11:45:b2:a2:cb:dd:c5:62:41:10:df:3e:
         ef:ed:97:fa:1c:01:9b:fc:ce:af:84:49:7c:a8:59:2f:bb:55:
         05:ec:5c:30:6d:4c:df:06:f7:dd:46:5c:d1:92:58:5a:2d:9d:
         e6:bf:ce:4d:06:d3:05:94:a5:da:e1:bc:1e:72:5c:37:58:c3:
         3c:8d:88:87:6c:d7:b6:42:e5:a8:6c:fb:f9:be:ea:8f:98:9a:
         69:dc:9b:fb:48:38:c0:4d:c3:fd:3e:cd:77:c2:e3:9e:f6:f2:
         c8:66:b1:7c:0f:04:14:d1:94:74:41:bf:ba:db:f7:d1:83:a3:
         1a:3e:a7:08:e1:ed:28:ff:5e:3e:24:b5:cf:fe:20:09:ca:1f:
         af:4e:b0:3f:19:c6:ec:9d:8a:6b:44:95:84:bf:16:de:09:38:
         bb:fb:a2:84:79:ae:1d:63:30:f4:7f:12:bc:61:20:ce:2d:b3:
         3a:61:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org