Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38342e302f32322d3232203d3e20323637313839.roa
File:                     34352e3233312e38342e302f32322d3232203d3e20323637313839.roa (raw, json)
Hash identifier:          1UKN9Cna8nwkVHG/Y31771tm1nXdSvaEftkSv9CTzAk=
Subject key identifier:   6F:FC:80:A1:38:04:17:15:83:76:21:C5:BF:AD:F7:FC:A7:22:B5:88
Certificate issuer:       /CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
Certificate serial:       43DDF3DF678127E5B9F284EAA2FA055E5A851242
Authority key identifier: C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38342e302f32322d3232203d3e20323637313839.roa
Signing time:             Mon 07 Feb 2022 12:09:24 +0000
ROA not before:           Mon 07 Feb 2022 12:04:24 +0000
ROA not after:            Mon 06 Feb 2023 12:09:24 +0000
asID:                     267189
IP address blocks:        45.231.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:f3:df:67:81:27:e5:b9:f2:84:ea:a2:fa:05:5e:5a:85:12:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
        Validity
            Not Before: Feb  7 12:04:24 2022 GMT
            Not After : Feb  6 12:09:24 2023 GMT
        Subject: CN=6FFC80A138041715837621C5BFADF7FCA722B588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:ba:f2:55:78:38:93:6e:16:05:3b:7d:30:
                    a7:87:6d:30:c1:b8:34:78:88:1e:c0:3d:ef:1f:2f:
                    b8:c2:9d:45:46:a9:d6:82:69:a8:8b:74:31:f4:8e:
                    24:d6:ce:67:6f:be:79:04:56:ae:aa:a7:18:e0:16:
                    d5:d2:33:53:85:b6:2c:9a:e9:0a:ae:4e:04:2b:c6:
                    de:9d:22:cd:aa:7d:d3:9c:54:ee:ba:bd:ba:a7:7e:
                    37:74:c4:22:81:cb:b1:47:43:7e:e8:5c:a7:6a:bf:
                    ab:3c:95:11:11:73:50:47:a5:57:1d:45:aa:04:c8:
                    39:5f:d5:da:a8:48:33:ef:95:54:1f:bb:5a:49:05:
                    86:1a:98:ab:a2:89:38:13:2d:f4:9f:54:48:da:06:
                    a9:10:b3:a0:65:4f:48:d0:13:12:f6:16:ec:b9:70:
                    f3:59:f1:a3:71:b5:1d:bf:39:c9:65:33:22:90:6d:
                    b9:f6:1c:09:b8:8a:f1:73:cf:c3:63:23:a6:fa:34:
                    d0:a1:39:52:90:e1:f6:b8:b2:69:55:ce:cb:11:fd:
                    13:c8:55:a2:fd:5f:14:03:04:1d:34:80:57:40:73:
                    75:9f:a9:85:60:73:89:b5:5b:0a:ee:4e:f9:b0:43:
                    ed:40:4f:64:a8:c5:e6:fa:92:ad:72:5c:bc:60:00:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FC:80:A1:38:04:17:15:83:76:21:C5:BF:AD:F7:FC:A7:22:B5:88
            X509v3 Authority Key Identifier:
                keyid:C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38342e302f32322d3232203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:25:19:32:b3:c0:0a:5b:22:64:10:76:89:ae:01:57:37:d0:
         73:8e:22:72:ca:9e:33:df:eb:79:df:ca:ea:42:24:47:18:25:
         4f:d1:2d:eb:ac:c3:6d:b2:c7:95:da:dc:38:64:a4:db:79:06:
         44:24:b2:0e:9c:74:83:88:fb:f3:57:1c:e3:5d:24:cf:37:58:
         ff:eb:64:9a:ec:7c:56:f7:d1:07:c9:c9:13:c0:c2:d4:f3:24:
         ca:7e:32:5b:84:ff:71:7d:d0:90:17:ae:0d:b3:b0:f1:cb:8d:
         9c:82:fa:ad:32:a8:5e:22:f8:ae:b8:31:ea:38:ff:9d:59:56:
         50:87:3e:82:40:8c:f1:60:81:2c:7d:1a:cb:99:78:7e:0a:1c:
         b5:9a:cc:15:e3:57:9f:0d:c9:41:e4:69:d6:06:46:8c:0d:1f:
         bb:71:f2:02:75:7e:5a:68:31:2e:07:5a:ef:e2:71:bf:94:df:
         f9:e1:c4:af:93:49:47:1b:a6:49:23:c5:a3:a4:84:cd:64:de:
         4f:38:14:a3:7a:fe:0b:6e:4c:33:e4:37:8e:26:23:0b:96:f0:
         09:54:8b:fe:5a:61:6c:7c:a9:6b:26:ff:b1:de:d1:08:38:d9:
         cd:dc:b5:95:e9:7c:60:5c:fa:5b:03:cb:7d:f1:b5:5e:7e:96:
         fb:be:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:39 2023 by rpki-client on console-fra.rpki-client.org