Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230302e302f32332d3233203d3e20323636363134.roa
File:                     34352e372e3230302e302f32332d3233203d3e20323636363134.roa (raw, json)
Hash identifier:          o+3RcMb4iYDjCZyYdVKGZ2xk4GoW/Rw+QMlk31CzO4k=
Subject key identifier:   54:DE:F2:CB:20:C1:3E:82:FA:CD:90:E6:3D:39:DF:CE:01:74:B2:76
Certificate issuer:       /CN=FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6
Certificate serial:       018C7B0ACBD486AFDECC2DA52FB848CAB161A567
Authority key identifier: FF:6C:64:0C:10:EC:7C:1F:DC:4E:06:DF:E3:D3:69:E6:8D:B2:63:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230302e302f32332d3233203d3e20323636363134.roa
Signing time:             Wed 22 Mar 2023 14:26:17 +0000
ROA not before:           Wed 22 Mar 2023 14:21:17 +0000
ROA not after:            Wed 20 Mar 2024 14:26:17 +0000
asID:                     266614
IP address blocks:        45.7.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7b:0a:cb:d4:86:af:de:cc:2d:a5:2f:b8:48:ca:b1:61:a5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6
        Validity
            Not Before: Mar 22 14:21:17 2023 GMT
            Not After : Mar 20 14:26:17 2024 GMT
        Subject: CN=54DEF2CB20C13E82FACD90E63D39DFCE0174B276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9f:d5:00:69:3e:61:14:c9:4c:79:73:55:73:
                    27:d1:82:ec:b4:8f:53:30:74:ef:24:1e:ff:b6:02:
                    8c:95:cc:d8:4c:e7:91:27:68:e9:5d:3c:54:f7:25:
                    da:dd:b5:bb:31:0c:98:a2:e5:26:a3:aa:fc:43:58:
                    2c:d8:7f:3a:58:6e:6d:2c:ef:68:3e:6c:c1:10:5b:
                    51:d3:57:30:c1:85:2b:11:7f:cc:91:e1:10:4b:75:
                    21:ab:b8:49:36:29:27:df:ba:f1:e2:c1:7d:a3:ca:
                    33:53:2d:7c:26:aa:0f:e4:17:c6:16:fa:96:ac:3c:
                    33:73:93:64:fc:2c:63:a8:5a:e9:41:90:c1:68:18:
                    32:8d:8a:58:df:2c:e5:03:fd:08:de:cb:b4:f1:b5:
                    a0:d4:22:8b:89:87:84:c7:b5:7e:3a:62:03:fb:5d:
                    46:c1:dc:0b:b1:50:fc:f2:25:e0:74:00:70:7f:d7:
                    d3:48:8d:dd:10:72:ed:48:66:b7:68:fc:63:f1:16:
                    d5:fd:b7:2c:63:91:7f:0b:f2:54:0a:36:d1:5a:28:
                    8e:59:89:5b:1e:d9:e9:e8:b5:a7:bd:f3:41:fe:7b:
                    32:cf:f5:4f:eb:03:18:75:2a:89:2a:c3:d0:f2:4f:
                    f4:e0:ec:c0:49:59:2c:f2:28:2e:b7:e2:f8:0a:a7:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DE:F2:CB:20:C1:3E:82:FA:CD:90:E6:3D:39:DF:CE:01:74:B2:76
            X509v3 Authority Key Identifier:
                keyid:FF:6C:64:0C:10:EC:7C:1F:DC:4E:06:DF:E3:D3:69:E6:8D:B2:63:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230302e302f32332d3233203d3e20323636363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:b6:5d:9d:76:76:4d:d2:50:56:06:52:d4:30:e4:89:49:3d:
         06:84:fb:38:14:37:1c:f3:0e:e2:61:2f:88:a9:83:2a:5c:ad:
         2e:71:63:c1:95:a6:e0:e6:43:5e:85:02:c5:15:e8:34:1c:1a:
         58:f3:da:81:6a:af:0a:cb:e9:7a:a5:ba:99:ca:99:3b:dc:22:
         b5:08:f9:5b:dc:c9:0c:b9:5f:c6:3f:af:a4:2a:71:ae:2a:2c:
         91:7d:13:19:01:0d:00:85:9b:7e:e3:81:29:47:61:94:c5:74:
         0b:62:85:7b:9b:f0:92:e7:38:fa:c2:a3:ae:17:2b:d4:74:ce:
         a2:4f:f6:9b:3b:8e:77:8e:6f:12:c4:f4:01:c1:eb:bd:0c:2c:
         ac:78:9e:9d:f4:98:28:86:23:f1:4d:c8:36:f9:25:0c:01:e0:
         52:0d:59:b3:f7:e5:10:7a:38:99:b2:fe:0d:82:cc:bb:de:c3:
         cf:b2:e4:d6:59:82:c5:4e:16:39:11:9c:ad:37:8d:cb:e8:6b:
         65:b2:80:11:45:9b:ab:d9:9e:ad:bf:0c:ea:b8:56:4c:af:a9:
         87:d6:bb:fd:10:ab:32:0d:a2:1d:9a:15:10:d7:7b:cd:a0:bc:
         81:d1:db:f2:6c:7a:a5:a1:37:b7:77:61:a3:26:1e:17:de:f3:
         26:63:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org