Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/34352e362e36382e302f32322d3234203d3e20323730393835.roa
File:                     34352e362e36382e302f32322d3234203d3e20323730393835.roa (raw, json)
Hash identifier:          hXyiq2zxGnk7JnYWSKbOS5MsR1frkonmriZd3FSgxSM=
Subject key identifier:   FE:CD:82:24:3F:09:B7:71:0D:94:16:F9:A7:59:EE:3C:CD:B3:ED:5F
Certificate issuer:       /CN=9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D
Certificate serial:       7159E6145AC2F549A12E583C9B86C07D671321F9
Authority key identifier: 9A:C4:31:98:A2:CE:4D:BB:19:BD:A8:C7:E8:35:E6:C5:6F:D7:1F:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/34352e362e36382e302f32322d3234203d3e20323730393835.roa
Signing time:             Fri 17 Nov 2023 19:15:03 +0000
ROA not before:           Fri 17 Nov 2023 19:10:03 +0000
ROA not after:            Fri 15 Nov 2024 19:15:03 +0000
asID:                     270985
IP address blocks:        45.6.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:59:e6:14:5a:c2:f5:49:a1:2e:58:3c:9b:86:c0:7d:67:13:21:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D
        Validity
            Not Before: Nov 17 19:10:03 2023 GMT
            Not After : Nov 15 19:15:03 2024 GMT
        Subject: CN=FECD82243F09B7710D9416F9A759EE3CCDB3ED5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:da:1d:2c:75:86:ba:52:2f:ea:b5:14:07:
                    6d:21:40:0c:ef:4f:65:8a:b7:c4:a8:5f:62:79:64:
                    86:a9:88:1b:d5:93:e0:f4:c9:03:e3:2d:62:8d:f0:
                    ce:9c:bd:52:f6:1e:d0:ca:33:76:5d:28:fd:17:0d:
                    4b:08:f4:0c:2c:fa:d0:73:38:f7:db:d5:80:bc:2d:
                    8a:74:ae:f6:0f:0b:19:61:27:c4:88:86:b9:4f:11:
                    cc:22:eb:4b:f7:63:2b:e0:1c:cc:06:64:17:c1:ca:
                    a5:5d:51:dc:d3:87:f5:c9:84:1a:8e:7d:3b:30:b9:
                    34:c4:09:a8:88:36:60:c4:24:be:c7:30:e4:9e:d6:
                    61:bd:4f:ff:6d:2e:94:22:7e:07:f6:03:fb:11:d1:
                    a2:e2:d8:88:5f:6f:bd:b3:06:b1:3c:6f:d6:ee:e0:
                    91:5f:a7:94:13:3e:e4:51:b7:fa:f9:6e:7f:53:7e:
                    b0:39:fd:80:81:a4:c5:e6:cc:c2:91:d0:0e:9c:92:
                    f7:4c:b9:89:71:98:06:66:32:02:dd:b1:b2:70:f2:
                    9f:e2:eb:90:60:01:20:2f:7f:e9:91:5c:d8:69:75:
                    fb:51:7d:2f:a1:a5:db:a5:18:c8:50:bc:04:e7:2b:
                    0d:8a:51:66:3e:95:ee:ad:01:2d:28:4a:d5:8a:bd:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CD:82:24:3F:09:B7:71:0D:94:16:F9:A7:59:EE:3C:CD:B3:ED:5F
            X509v3 Authority Key Identifier:
                keyid:9A:C4:31:98:A2:CE:4D:BB:19:BD:A8:C7:E8:35:E6:C5:6F:D7:1F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AC43198A2CE4DBB19BDA8C7E835E6C56FD71F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84aHvkSu5tbRYwPpwesUyMqncsmkRYNJ5XVZ2WuYGYTk/0/34352e362e36382e302f32322d3234203d3e20323730393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:da:30:2b:82:cf:3d:b9:94:5c:39:bb:11:6e:3c:19:e5:de:
         5a:56:98:e0:fb:14:6f:09:61:b6:3f:d1:7f:e7:c1:08:03:9c:
         5c:95:3b:d0:59:ea:f1:1f:5f:b1:f9:ab:d8:3b:b5:e7:05:fd:
         f8:93:04:5c:3a:d1:d7:b2:05:ff:9d:b8:65:30:fe:ae:19:ba:
         6f:ba:87:13:7b:fe:56:47:be:9b:bb:dc:ba:ea:b5:24:cd:3f:
         4d:d4:00:4a:5b:86:4b:33:40:6e:03:30:ca:9f:7d:52:0f:32:
         61:3e:6e:05:b4:c4:9a:21:ef:62:bf:98:f6:a8:00:a3:4f:5b:
         d6:a9:3e:75:06:0c:8b:96:d8:14:28:60:da:af:78:a6:38:74:
         46:5f:ea:24:af:b0:27:7c:90:fa:9d:5d:77:34:f6:c3:d3:ed:
         d3:d7:d9:96:d1:b6:f6:ba:75:15:07:f2:dc:2c:22:f4:b1:a8:
         6a:24:b9:01:bd:cc:2b:bb:12:25:fd:33:75:8e:58:11:30:6c:
         d2:ac:0d:ad:d5:09:e6:65:02:a6:13:dc:9d:4a:cb:f3:78:53:
         3e:4b:28:7a:45:9f:0d:b5:4b:32:86:a5:f8:1d:01:79:ec:b3:
         25:bd:11:51:79:87:47:29:84:3e:c7:41:6c:d9:e6:43:ac:cb:
         b0:bf:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org