Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231382e302f32332d3233203d3e20323636323437.roa
File:                     34352e362e3231382e302f32332d3233203d3e20323636323437.roa (raw, json)
Hash identifier:          a4SKTdDGi1ZDFoqseNxdAeMC3FzslIOJY1ix7EUUoPQ=
Subject key identifier:   D7:9B:D4:2D:B2:AF:DC:B5:CA:0C:E8:3E:46:0A:45:E7:6E:16:72:31
Certificate issuer:       /CN=0FF897150A721E543538D1FB1C6A7C5017A68480
Certificate serial:       34574E3EEDC00FB5F866D20D8A15E04CDE64A4E4
Authority key identifier: 0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231382e302f32332d3233203d3e20323636323437.roa
Signing time:             Sun 14 May 2023 17:10:45 +0000
ROA not before:           Sun 14 May 2023 17:05:45 +0000
ROA not after:            Sun 12 May 2024 17:10:45 +0000
asID:                     266247
IP address blocks:        45.6.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:4e:3e:ed:c0:0f:b5:f8:66:d2:0d:8a:15:e0:4c:de:64:a4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF897150A721E543538D1FB1C6A7C5017A68480
        Validity
            Not Before: May 14 17:05:45 2023 GMT
            Not After : May 12 17:10:45 2024 GMT
        Subject: CN=D79BD42DB2AFDCB5CA0CE83E460A45E76E167231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:db:d1:ae:e6:88:51:d5:65:54:72:99:89:
                    e2:55:60:71:ec:17:68:c8:a7:af:a2:6d:cd:cf:d9:
                    7d:5b:48:44:62:32:46:0c:5e:e0:f7:c4:05:61:ef:
                    38:d6:e4:8e:61:83:34:b6:67:85:c2:26:0f:91:d6:
                    1e:99:4c:2b:2b:8d:68:06:3f:c4:8d:9c:e7:b9:3a:
                    a8:fb:88:fe:56:46:a3:1e:ba:33:b3:06:d2:bd:c3:
                    9f:a2:02:dd:14:f7:80:89:a5:fe:35:4b:01:d9:62:
                    fd:f1:a7:a6:2d:46:f0:fc:14:ef:7a:b3:a8:e9:e6:
                    d6:70:e3:a8:b8:4c:5a:fb:7f:89:0a:fd:7f:ec:22:
                    51:f8:f6:94:9c:27:73:89:15:ee:84:46:a8:af:af:
                    1e:cc:e3:17:73:4f:c6:16:d6:5d:80:6a:27:ca:fd:
                    ea:26:f6:38:02:6a:1c:61:56:1a:c0:63:4a:96:5a:
                    b9:95:d8:9e:49:71:69:ea:15:9b:ab:ef:3e:23:f2:
                    bd:da:64:01:43:5c:02:7e:07:31:26:62:52:6a:dd:
                    01:0a:d9:fb:a1:65:1f:e7:c2:bc:4b:19:8c:5c:5e:
                    ce:9f:91:24:b5:e7:e7:28:14:d0:f9:df:12:dc:48:
                    1e:87:59:d8:2c:e3:37:14:bf:a9:be:25:23:d1:54:
                    8c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9B:D4:2D:B2:AF:DC:B5:CA:0C:E8:3E:46:0A:45:E7:6E:16:72:31
            X509v3 Authority Key Identifier:
                keyid:0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/0FF897150A721E543538D1FB1C6A7C5017A68480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231382e302f32332d3233203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:0a:51:0a:ac:12:54:f6:a6:e5:6e:db:12:0a:c7:54:db:a0:
         71:fe:b1:1c:c9:27:2c:9b:e8:33:99:f0:55:13:67:2d:1e:26:
         82:77:8e:29:d7:27:79:28:dc:74:86:3a:39:fa:81:ee:b0:fb:
         10:45:7a:78:0a:5a:70:73:44:c2:a2:46:8a:84:b7:5d:5b:40:
         d8:89:4f:52:06:3f:b6:4e:40:f2:45:27:eb:1b:10:a3:56:b0:
         10:7c:62:ed:a3:98:c8:73:bb:cc:e5:4f:75:9b:5f:a3:39:fc:
         63:96:b7:92:bb:a3:79:97:b6:40:9a:59:c4:d7:f1:f8:96:ac:
         2b:3f:ab:63:e9:2a:22:b1:a6:d5:2a:67:3d:f7:2f:1d:7e:21:
         b8:7c:19:ef:16:46:7e:45:50:e1:e3:88:75:02:34:b6:14:22:
         8a:cd:e4:6d:88:f3:db:d5:75:19:a7:9f:ff:98:25:22:33:2e:
         e7:07:65:5f:10:fb:8c:a8:9d:39:07:63:12:96:f6:60:fb:17:
         9c:44:fe:de:9d:2c:10:db:9a:71:63:15:eb:55:72:34:4d:85:
         db:e5:61:62:ab:aa:46:f8:e4:53:29:99:a1:e1:87:c0:6f:db:
         02:d3:57:89:70:a2:e8:71:70:d7:66:73:c5:fd:b7:0b:9c:e8:
         9a:bc:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org