Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e203238323230.roa
File:                     34352e3136352e32302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          sl2TARF+o3f06XMvFpUrd0mU6p6Ae/C+KgsVvikKA64=
Subject key identifier:   81:B4:1D:4F:2B:FE:69:CC:B2:3D:A5:EA:28:51:3F:8A:AC:7D:5C:E1
Certificate issuer:       /CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
Certificate serial:       6B918CFDD2461A499DC3EDCF3AF617CA0186F53E
Authority key identifier: 8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e203238323230.roa
Signing time:             Fri 16 Dec 2022 20:00:07 +0000
ROA not before:           Fri 16 Dec 2022 19:55:07 +0000
ROA not after:            Fri 15 Dec 2023 20:00:07 +0000
asID:                     28220
IP address blocks:        45.165.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:91:8c:fd:d2:46:1a:49:9d:c3:ed:cf:3a:f6:17:ca:01:86:f5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE54D1497321C365F28D539F6F4F85D28F2B8A6
        Validity
            Not Before: Dec 16 19:55:07 2022 GMT
            Not After : Dec 15 20:00:07 2023 GMT
        Subject: CN=81B41D4F2BFE69CCB23DA5EA28513F8AAC7D5CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:65:03:65:df:bf:10:ea:7e:6a:b2:69:e0:15:
                    1c:04:f0:1c:f0:f0:97:70:6d:e5:ce:20:92:55:50:
                    34:0a:91:25:8c:13:3e:e8:a8:7c:39:09:3c:8f:5b:
                    84:ba:84:96:a2:b6:22:83:d6:ab:a6:5f:9f:18:29:
                    57:60:30:bb:fd:a0:02:0a:45:e8:59:10:2e:11:ae:
                    9a:06:57:de:d5:ac:2c:a2:3e:87:40:3e:be:80:5a:
                    ca:48:c7:97:b5:50:f3:e5:a4:c3:c4:27:28:55:96:
                    1a:3d:46:96:c7:9f:6e:49:97:c7:ef:0b:77:e3:bc:
                    aa:68:ce:44:a7:ed:b0:27:67:32:d4:13:b0:03:8f:
                    2c:11:38:d3:51:2a:4e:ec:9b:a8:63:71:38:a3:6e:
                    0d:8b:18:78:da:24:87:0a:3e:93:8c:f7:c9:23:9b:
                    6b:7b:7e:09:6c:e6:0f:02:ec:e5:26:2f:10:f0:f9:
                    c4:b6:d3:12:c9:35:f3:11:74:c8:2d:51:2b:fe:7e:
                    be:93:4b:db:63:87:ea:37:87:65:79:3d:91:c9:d1:
                    eb:12:79:0a:80:68:c4:03:e8:6d:80:92:75:05:26:
                    6a:37:6a:66:4f:4a:82:1d:5b:80:89:e0:6d:74:fc:
                    ca:eb:27:67:3e:a8:58:0f:d6:c7:60:ee:b3:67:c5:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B4:1D:4F:2B:FE:69:CC:B2:3D:A5:EA:28:51:3F:8A:AC:7D:5C:E1
            X509v3 Authority Key Identifier:
                keyid:8E:E5:4D:14:97:32:1C:36:5F:28:D5:39:F6:F4:F8:5D:28:F2:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EE54D1497321C365F28D539F6F4F85D28F2B8A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:22:71:cf:1c:9a:44:08:dc:db:b8:59:bb:c9:73:f9:55:19:
         45:81:94:14:66:3a:b4:fc:98:dc:39:eb:fe:88:6a:df:81:6c:
         f6:5e:74:bd:27:56:14:09:75:1c:cf:62:99:b3:c8:02:7e:04:
         ab:7d:d7:17:dd:4d:c8:bb:22:6e:13:ff:22:d8:56:f4:c8:ed:
         01:f8:e7:39:a4:d9:ec:6e:0c:1e:ff:d3:e3:8d:8a:84:98:94:
         8e:fd:65:58:d8:f6:8a:e2:77:70:8e:fc:44:4c:6c:a1:e0:fd:
         c9:e1:d6:a6:0c:a7:bc:17:12:c4:6e:0f:e9:a8:bd:d3:1c:36:
         3f:36:9f:e9:13:61:b9:3a:7b:32:24:1e:14:a7:13:93:c8:05:
         62:9e:64:21:9b:73:f4:3c:ff:3f:3e:36:50:a8:79:af:21:36:
         2e:5b:ff:52:4f:3e:bf:92:d8:e6:9e:e0:03:c9:54:70:07:9d:
         95:3b:a4:f2:d0:7b:33:f9:fb:89:b0:55:d3:5b:dd:70:9b:bb:
         74:16:10:cf:98:2b:ff:0a:b8:b5:ee:55:f2:94:7b:56:28:06:
         c6:db:3a:ef:5f:f7:fe:d3:c7:94:39:84:9a:db:dd:96:37:44:
         c8:f1:6b:5b:fd:00:1d:23:f5:f9:a5:ee:66:3d:44:6e:b6:c8:
         7a:87:7e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org