Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/34352e3136392e3137322e302f32322d3234203d3e20323638373031.roa
File:                     34352e3136392e3137322e302f32322d3234203d3e20323638373031.roa (raw, json)
Hash identifier:          6CGy0h6z0EJaNqH5LLoPxd1qPDTj/3JLhPVC03wIVmk=
Subject key identifier:   8E:DA:94:F0:BF:BB:08:E9:F8:E9:B2:2D:44:35:37:9E:13:40:D8:9D
Certificate issuer:       /CN=3DD549F23D2BB009A1484217ADA075AADCB1028D
Certificate serial:       679E03F45E8A82D3BC6DF0DF927C02C73051A1A6
Authority key identifier: 3D:D5:49:F2:3D:2B:B0:09:A1:48:42:17:AD:A0:75:AA:DC:B1:02:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DD549F23D2BB009A1484217ADA075AADCB1028D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/34352e3136392e3137322e302f32322d3234203d3e20323638373031.roa
Signing time:             Tue 22 Aug 2023 15:25:30 +0000
ROA not before:           Tue 22 Aug 2023 15:20:30 +0000
ROA not after:            Tue 20 Aug 2024 15:25:30 +0000
asID:                     268701
IP address blocks:        45.169.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9e:03:f4:5e:8a:82:d3:bc:6d:f0:df:92:7c:02:c7:30:51:a1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DD549F23D2BB009A1484217ADA075AADCB1028D
        Validity
            Not Before: Aug 22 15:20:30 2023 GMT
            Not After : Aug 20 15:25:30 2024 GMT
        Subject: CN=8EDA94F0BFBB08E9F8E9B22D4435379E1340D89D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:6e:f8:f2:08:29:f3:39:c1:50:11:9d:04:
                    67:9f:ed:b9:65:33:88:8b:0e:8e:8b:fd:67:6d:12:
                    15:95:b3:3e:74:49:09:f2:36:1a:b0:0b:dd:a9:b6:
                    c2:04:03:25:11:59:ca:98:a3:50:47:b2:3b:aa:8c:
                    a0:d8:93:35:65:d6:78:d3:2f:6a:9b:18:b9:08:c5:
                    8a:94:26:e0:97:31:58:7a:bc:7f:10:e4:6f:6d:9e:
                    73:f0:30:7c:b2:b7:68:d2:c6:d7:29:3c:c0:fd:96:
                    0b:29:a5:29:e3:2e:8b:a1:cd:67:c7:3a:71:93:37:
                    74:28:16:01:71:ad:64:ea:db:be:e0:62:c5:f3:ad:
                    76:bb:39:b8:82:4e:34:9e:7b:86:6a:58:83:25:bb:
                    e6:86:43:30:cd:4c:4f:aa:84:7a:38:d1:8c:75:94:
                    60:f5:7b:fe:92:87:ca:05:b0:66:f2:a0:d1:8f:96:
                    f3:43:75:bc:a0:b6:6f:ca:5f:92:21:70:e3:c5:b1:
                    f3:75:d4:dc:61:7c:b7:65:57:92:44:84:fd:0a:da:
                    3b:ae:e5:e8:b3:3c:3d:b7:3c:ac:fc:58:4c:35:c9:
                    9a:6f:91:ce:ff:57:95:fc:b7:87:4a:93:95:8e:f4:
                    a6:95:2c:63:a6:fd:22:ed:ce:e2:07:e0:96:25:f1:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DA:94:F0:BF:BB:08:E9:F8:E9:B2:2D:44:35:37:9E:13:40:D8:9D
            X509v3 Authority Key Identifier:
                keyid:3D:D5:49:F2:3D:2B:B0:09:A1:48:42:17:AD:A0:75:AA:DC:B1:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/3DD549F23D2BB009A1484217ADA075AADCB1028D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DD549F23D2BB009A1484217ADA075AADCB1028D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/34352e3136392e3137322e302f32322d3234203d3e20323638373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:55:73:b1:ba:5b:2a:91:49:95:6e:30:73:d2:a5:48:77:75:
         0c:66:a0:c7:fe:b1:43:37:21:b9:f6:49:ab:f1:c1:c4:6d:1d:
         bc:6c:c2:d7:d2:82:75:58:2f:32:9a:ef:44:b7:9d:8b:0e:18:
         cf:14:a9:f9:bb:06:5a:cb:48:28:ad:a5:54:6b:3e:a8:90:24:
         16:c3:d6:da:b5:88:5b:60:90:8a:1b:d6:af:10:0b:80:41:34:
         ac:ea:bd:f9:c4:dc:7a:e1:c9:60:8a:67:dc:28:e7:3f:80:f5:
         3a:88:5e:4a:68:13:dc:45:78:94:d1:5c:b8:18:31:22:96:d8:
         b3:bd:3d:5d:63:fa:4d:d1:2b:65:da:50:6e:18:95:92:8f:27:
         d1:f0:d6:42:34:c4:35:e8:0a:de:a7:45:87:f9:bb:07:34:cf:
         69:e9:27:15:8d:b6:63:06:33:5b:c5:62:04:93:12:0c:1b:09:
         3c:0a:7c:cb:90:bb:03:53:ae:0b:fb:6c:2a:4a:2d:fb:52:56:
         0e:fb:79:b5:52:4e:a6:4e:21:ea:1c:d9:b4:60:c6:1c:c9:dc:
         e4:a1:52:ee:d4:89:2e:97:1a:a9:e4:1e:38:7d:f3:6a:ae:4d:
         28:21:dc:b5:6e:19:27:1b:ce:46:fc:61:ce:e1:eb:d7:dc:90:
         6b:30:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org