Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/34352e3136312e3138342e302f32322d3234203d3e20323638353132.roa
File:                     34352e3136312e3138342e302f32322d3234203d3e20323638353132.roa (raw, json)
Hash identifier:          79JNPiqSnz/1ph12W9NLnq6CwkRFm6XrWeEK585vfOA=
Subject key identifier:   94:F8:4C:0B:17:04:7D:10:CA:E8:BD:F0:D7:1E:06:F8:99:4C:B4:66
Certificate issuer:       /CN=6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3
Certificate serial:       7488C84B20FC4A77ECC0470F9BB069241FF96214
Authority key identifier: 6C:A3:D9:BB:49:D6:D6:6C:52:97:C1:DB:89:7B:FB:BB:35:61:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/34352e3136312e3138342e302f32322d3234203d3e20323638353132.roa
Signing time:             Wed 24 Jan 2024 14:10:11 +0000
ROA not before:           Wed 24 Jan 2024 14:05:11 +0000
ROA not after:            Wed 22 Jan 2025 14:10:11 +0000
asID:                     268512
IP address blocks:        45.161.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:88:c8:4b:20:fc:4a:77:ec:c0:47:0f:9b:b0:69:24:1f:f9:62:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3
        Validity
            Not Before: Jan 24 14:05:11 2024 GMT
            Not After : Jan 22 14:10:11 2025 GMT
        Subject: CN=94F84C0B17047D10CAE8BDF0D71E06F8994CB466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:b0:94:de:c1:f5:99:63:98:4d:a1:3c:90:
                    cf:65:b6:9a:37:18:1d:db:aa:1d:07:a9:ac:39:7f:
                    6a:5c:ae:ec:0f:53:8e:03:19:6f:cb:ab:a7:44:2a:
                    cb:26:cc:49:21:f3:fb:71:b4:c4:aa:8b:e6:91:46:
                    70:51:65:72:85:b1:da:dc:75:83:37:f2:ff:43:f6:
                    81:26:7c:28:13:7d:28:06:c0:dd:92:0f:74:53:1f:
                    30:7f:5c:bc:9d:b0:e1:28:50:76:a2:22:3c:b1:b9:
                    63:97:79:bd:93:53:53:4b:53:85:d5:75:3b:46:bb:
                    67:9b:cd:12:39:6f:61:54:79:35:61:d1:26:ca:53:
                    76:88:c8:07:9f:ec:60:ff:88:23:75:e3:da:07:97:
                    aa:3e:e6:06:a2:b7:4f:b8:3a:21:31:83:af:52:02:
                    f3:9a:93:76:0c:24:15:c8:38:60:3e:47:ee:c4:20:
                    3e:b0:4c:84:56:d0:96:d6:31:3a:c0:7c:93:2f:e5:
                    e6:bf:98:2d:bf:a4:e9:b3:eb:e2:35:82:7d:5f:76:
                    03:42:b5:6e:85:11:85:96:86:8f:b7:68:d8:15:df:
                    07:ca:57:5e:08:58:fe:a6:28:49:51:08:78:45:2f:
                    42:b7:e7:ef:23:e9:12:4e:85:25:44:d8:c1:48:63:
                    8b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:4C:0B:17:04:7D:10:CA:E8:BD:F0:D7:1E:06:F8:99:4C:B4:66
            X509v3 Authority Key Identifier:
                keyid:6C:A3:D9:BB:49:D6:D6:6C:52:97:C1:DB:89:7B:FB:BB:35:61:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6CA3D9BB49D6D66C5297C1DB897BFBBB35615BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/1/34352e3136312e3138342e302f32322d3234203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:3d:5c:8c:b9:47:be:6b:35:22:12:bd:35:4b:2e:0c:90:44:
         fc:bf:1e:32:eb:3d:9f:b7:15:f2:ef:8e:fe:d9:a1:f1:d4:71:
         fe:08:26:00:dc:0f:6b:87:b7:6c:bf:10:32:f3:a8:49:99:ef:
         34:3b:49:c6:66:69:f0:8e:c1:ec:ec:be:b9:12:db:22:5b:2b:
         89:34:47:1e:9e:85:b1:78:8f:31:a9:ff:99:73:07:3f:b9:97:
         12:79:2c:b8:b4:26:65:1a:ee:f9:df:05:a6:58:b8:dd:e1:45:
         5d:58:f3:aa:ee:72:8e:2a:81:6c:bf:1d:23:d8:91:56:79:74:
         4b:98:60:e8:e3:d4:fd:1d:61:61:19:b5:b6:2d:ba:5b:09:62:
         c7:f9:a3:f2:c9:37:0b:c1:4e:19:4e:10:d3:d3:a3:55:37:2f:
         15:6d:27:d2:a7:5e:a2:0b:fa:df:b7:0d:67:a9:96:89:6c:c1:
         9d:18:0d:c7:a4:d3:ca:8a:53:87:fd:a6:d9:b2:f8:ed:d4:20:
         4c:ce:27:32:b0:c9:27:1e:b1:7f:11:26:e4:87:53:ce:68:ca:
         72:e4:d1:95:71:16:80:1e:93:3b:ee:2a:9e:e7:6f:a6:7e:51:
         8c:42:5b:ed:1e:0b:93:9a:05:a6:16:7a:60:ff:08:bf:2f:8a:
         d4:a7:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org