Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa
File:                     34352e3137302e37362e302f32322d3234203d3e20323638313531.roa (raw, json)
Hash identifier:          ya0oY+z0/Nof2AFjm7TE/vmwsbEsZyipUqUykYAWbB0=
Subject key identifier:   88:60:4E:38:CE:EF:39:D1:B1:69:4D:47:FD:46:A7:EF:7D:3E:8C:61
Certificate issuer:       /CN=A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE
Certificate serial:       2CC68CF6BDF7F5E916628631A3AAD55012973988
Authority key identifier: A6:F2:42:08:45:A6:DE:64:6D:E9:5F:4F:23:DF:21:A1:8A:4E:D0:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa
Signing time:             Wed 10 Aug 2022 19:56:41 +0000
ROA not before:           Wed 10 Aug 2022 19:51:41 +0000
ROA not after:            Wed 09 Aug 2023 19:56:41 +0000
asID:                     268151
IP address blocks:        45.170.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c6:8c:f6:bd:f7:f5:e9:16:62:86:31:a3:aa:d5:50:12:97:39:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE
        Validity
            Not Before: Aug 10 19:51:41 2022 GMT
            Not After : Aug  9 19:56:41 2023 GMT
        Subject: CN=88604E38CEEF39D1B1694D47FD46A7EF7D3E8C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:d8:18:b0:f7:bf:ee:96:54:08:ce:87:c9:
                    ec:a5:33:21:9d:9a:e0:0a:3a:c4:26:33:21:f3:40:
                    0c:26:1e:23:c7:c1:78:27:51:6e:2b:c7:3a:b3:ab:
                    44:3d:30:62:3e:6f:d8:2c:ff:15:02:fa:b8:9e:fb:
                    33:30:05:64:33:10:14:fa:78:6c:f6:d7:fe:0b:5f:
                    4c:c1:af:d6:2d:1b:53:b5:00:38:2e:36:aa:2d:28:
                    95:54:f0:c7:96:72:9f:d0:f6:17:3e:85:c5:db:7e:
                    eb:8b:b5:e7:28:13:53:59:cd:ff:7d:18:6d:9a:75:
                    0e:85:53:9a:7a:ee:ee:1c:6f:c9:7b:e3:5c:96:19:
                    c0:ff:5f:72:bd:32:e3:91:74:f7:b4:56:50:ce:e8:
                    38:75:3e:96:13:22:54:ff:c0:81:6d:e8:44:90:2f:
                    67:85:39:e9:ff:20:d7:b0:54:f5:19:80:e3:35:1d:
                    47:8b:22:ac:c6:74:89:62:dc:7d:f1:78:5f:dd:3c:
                    33:4f:98:d8:a9:e1:e1:a2:e7:42:b2:a2:21:c8:f4:
                    f2:87:51:5f:bd:b2:df:2d:bd:20:e8:32:4e:56:e1:
                    f7:8a:b8:30:d6:8b:0f:69:c9:51:63:5c:a1:16:d5:
                    ce:e8:63:4f:c3:de:aa:eb:8b:b2:92:ae:fe:29:89:
                    a2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:60:4E:38:CE:EF:39:D1:B1:69:4D:47:FD:46:A7:EF:7D:3E:8C:61
            X509v3 Authority Key Identifier:
                keyid:A6:F2:42:08:45:A6:DE:64:6D:E9:5F:4F:23:DF:21:A1:8A:4E:D0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6F2420845A6DE646DE95F4F23DF21A18A4ED0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:5a:1c:15:62:bc:cc:4d:9f:d2:c8:a9:43:12:3f:fd:31:
         52:f7:2a:fc:b5:cb:3b:38:bb:01:89:f6:d2:42:54:af:b9:8a:
         c0:2f:6f:14:bb:a6:d7:d1:ab:79:de:92:bb:f3:6e:b3:27:cd:
         f3:d1:6a:30:bd:0c:2d:32:23:71:95:b9:de:00:27:c4:48:18:
         17:87:ca:d3:47:41:c0:95:8e:96:d6:cf:44:f1:ed:e1:4b:ce:
         72:7c:23:41:b0:5c:84:97:40:2a:d3:0e:ea:a7:12:33:f3:ea:
         70:12:91:08:04:2c:e8:de:16:33:74:25:0d:e5:f8:30:c9:09:
         f0:e9:93:61:96:b9:0a:2c:04:e6:43:95:83:9b:bc:4b:21:2c:
         47:d1:8a:de:02:88:b2:a2:0f:c7:56:9f:aa:40:cb:b7:4c:b1:
         17:44:0c:c8:f5:a1:9b:38:80:b2:b1:1a:29:7a:d8:2c:ae:58:
         83:19:ee:7e:ef:ef:61:96:e1:29:a6:60:f2:49:63:e5:8e:d4:
         c0:07:cb:10:f2:cd:bb:dd:f2:32:b0:e9:9d:6e:af:1d:53:e0:
         20:ef:eb:14:61:c2:dc:48:e3:fe:ee:a7:7d:c8:7d:d6:9f:0b:
         e6:ce:3c:9a:30:5a:c3:a5:a3:7d:c9:c3:11:c8:f1:57:df:28:
         c9:2e:dd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org