Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230322e302f32332d3233203d3e20323636363134.roa
File:                     34352e372e3230322e302f32332d3233203d3e20323636363134.roa (raw, json)
Hash identifier:          PwadMxGl8yQXCr2kF0fL4ArV/RTOjAbj8g0z6x8jEQM=
Subject key identifier:   CC:1F:42:41:8E:4E:B1:43:7B:73:F6:56:82:A5:70:1F:05:C1:AD:5F
Certificate issuer:       /CN=FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6
Certificate serial:       68115C54C0D59384748F19B0982DC1608FD10A8B
Authority key identifier: FF:6C:64:0C:10:EC:7C:1F:DC:4E:06:DF:E3:D3:69:E6:8D:B2:63:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230322e302f32332d3233203d3e20323636363134.roa
Signing time:             Wed 22 Mar 2023 14:26:28 +0000
ROA not before:           Wed 22 Mar 2023 14:21:28 +0000
ROA not after:            Wed 20 Mar 2024 14:26:28 +0000
asID:                     266614
IP address blocks:        45.7.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:11:5c:54:c0:d5:93:84:74:8f:19:b0:98:2d:c1:60:8f:d1:0a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6
        Validity
            Not Before: Mar 22 14:21:28 2023 GMT
            Not After : Mar 20 14:26:28 2024 GMT
        Subject: CN=CC1F42418E4EB1437B73F65682A5701F05C1AD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:05:2c:76:37:94:c9:4f:23:f4:4b:8a:75:
                    c0:66:8c:1b:58:e7:a6:bf:0a:00:bd:39:9c:cb:83:
                    87:6d:87:47:03:ee:94:b1:50:65:5b:8e:60:f2:cf:
                    90:66:58:10:2f:d0:62:58:58:32:a2:71:5b:9f:82:
                    f2:a8:bd:b2:b8:e1:29:b2:8f:70:70:ff:1c:45:6f:
                    2b:42:d8:cc:22:44:2c:4a:28:ad:81:a3:d6:bb:8e:
                    d5:52:eb:45:ef:86:0b:66:48:7f:6f:88:d6:19:eb:
                    7a:72:a5:0d:65:08:27:9c:27:1b:7e:ff:c3:83:14:
                    72:89:5c:df:b5:56:3e:42:81:7e:ab:1e:30:80:7e:
                    d1:0d:0e:19:ed:5c:de:98:34:18:a9:48:b1:02:a8:
                    16:0e:27:f4:cf:a6:9a:cd:d7:c1:52:d8:dc:fa:87:
                    bd:18:4b:64:f8:77:ec:83:4b:86:a3:7c:03:a5:4d:
                    2e:72:24:03:b5:15:59:89:fe:b8:d2:27:df:30:de:
                    f3:03:5d:fa:19:9a:01:4c:e5:f0:ad:fd:b1:70:a0:
                    91:88:48:ba:11:98:95:11:12:80:9c:08:0c:df:7a:
                    b1:9c:09:cd:6d:9f:38:ce:83:22:fa:55:b5:e8:88:
                    f3:d1:13:0e:83:b8:ea:4e:c8:0d:71:83:e8:80:6e:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1F:42:41:8E:4E:B1:43:7B:73:F6:56:82:A5:70:1F:05:C1:AD:5F
            X509v3 Authority Key Identifier:
                keyid:FF:6C:64:0C:10:EC:7C:1F:DC:4E:06:DF:E3:D3:69:E6:8D:B2:63:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF6C640C10EC7C1FDC4E06DFE3D369E68DB263B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cZicSgivp4RVZoVorTSM1mernKrYx1Y18QyZ9RpKn2Y/0/34352e372e3230322e302f32332d3233203d3e20323636363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:31:dc:ce:86:a5:fa:07:b8:09:e7:47:54:cc:8e:12:5f:
         2f:86:c0:1d:b1:ba:67:72:be:cc:60:f8:a8:bf:45:86:73:e0:
         8e:b9:ad:6e:de:3d:54:19:f3:a9:be:52:b4:6d:84:07:4c:a5:
         5c:93:f2:0d:67:0e:fd:e3:60:48:fe:24:f1:9e:ab:88:f0:f8:
         51:db:12:e6:a3:f7:de:99:c4:1e:eb:6f:fc:9a:09:61:7c:32:
         6e:42:4b:0e:e7:5b:4f:1c:b0:d9:c6:c9:07:c8:00:65:a7:68:
         95:3f:f4:60:ca:73:65:e7:f7:44:ea:44:59:05:c2:72:45:bf:
         f0:a3:25:c1:87:0c:6a:9e:5d:70:cc:e4:da:cd:d0:ec:51:73:
         1f:b7:9c:28:b8:34:5f:55:b9:05:cc:02:a6:93:33:89:9a:76:
         c6:04:15:aa:15:8c:46:48:86:63:a5:a8:12:69:ea:66:22:63:
         03:40:b2:d4:0f:7f:44:3d:e9:65:a2:a2:75:64:1f:66:f4:75:
         d7:90:a1:fd:6b:a1:75:b2:b5:c9:30:30:5c:39:b2:24:8f:af:
         2d:7c:77:9c:05:77:b3:05:cc:28:ea:f1:23:92:62:c3:9d:8e:
         57:11:27:37:c5:86:99:e4:f1:ea:f3:0f:b1:c1:e5:17:6a:70:
         27:ce:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org