Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38362e302f32332d3233203d3e20323637313839.roa
File:                     34352e3233312e38362e302f32332d3233203d3e20323637313839.roa (raw, json)
Hash identifier:          NMm1aIAecauGZbHJ685P/MSs6udtsSOjElBDob4MHak=
Subject key identifier:   F6:04:EF:16:9C:7E:B4:6D:29:0B:65:C6:40:CD:7F:EA:FC:37:0C:77
Certificate issuer:       /CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
Certificate serial:       5533103D47DF225D629FBF27E51329DB2BF165BA
Authority key identifier: C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38362e302f32332d3233203d3e20323637313839.roa
Signing time:             Mon 07 Feb 2022 12:09:24 +0000
ROA not before:           Mon 07 Feb 2022 12:04:24 +0000
ROA not after:            Mon 06 Feb 2023 12:09:24 +0000
asID:                     267189
IP address blocks:        45.231.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:33:10:3d:47:df:22:5d:62:9f:bf:27:e5:13:29:db:2b:f1:65:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
        Validity
            Not Before: Feb  7 12:04:24 2022 GMT
            Not After : Feb  6 12:09:24 2023 GMT
        Subject: CN=F604EF169C7EB46D290B65C640CD7FEAFC370C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:6a:0a:c8:52:dc:58:d0:05:72:14:fe:8a:
                    85:f8:e5:fa:b4:08:a0:ea:5e:de:ae:0c:70:1d:12:
                    17:e9:54:57:5b:69:7d:94:60:52:b8:b0:c8:a2:91:
                    20:21:0b:c9:88:88:d7:a3:5e:c4:55:0f:31:d3:6d:
                    a7:c1:f9:05:5e:fc:6f:e6:15:b8:ef:ec:84:19:d9:
                    fb:f0:f3:45:48:56:a8:04:f8:c4:03:86:42:d7:72:
                    48:84:45:3f:d1:67:2a:49:da:9f:62:a4:62:ad:a3:
                    5d:e8:7f:e0:2c:89:ad:35:e2:29:c2:1d:2a:ff:6c:
                    b3:32:4f:92:08:f2:ec:0b:75:89:f6:87:d4:e7:87:
                    e7:fe:c7:68:4a:c4:38:33:0b:c8:16:b2:f5:bc:71:
                    ee:ca:91:13:2e:cd:fb:3b:0d:a8:b1:0f:ed:e7:4e:
                    79:2b:1d:10:a2:75:8a:d6:d1:b8:07:15:36:f5:12:
                    3a:f8:3a:46:2f:60:d5:33:4c:99:b9:f2:d4:d5:e1:
                    25:0b:64:ae:c9:fd:dd:7a:55:69:d5:89:54:50:00:
                    42:f3:60:6b:66:6a:9f:68:0e:38:01:f7:6f:0a:27:
                    9d:94:f4:2d:3b:38:4a:f3:87:2a:ec:81:97:cf:71:
                    97:c4:15:57:cf:a3:93:33:71:9f:0a:dc:ab:17:20:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:EF:16:9C:7E:B4:6D:29:0B:65:C6:40:CD:7F:EA:FC:37:0C:77
            X509v3 Authority Key Identifier:
                keyid:C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38362e302f32332d3233203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:56:10:0d:ee:17:bc:18:7a:67:1c:4e:f3:fb:56:65:22:f2:
         fd:6a:c8:2b:e0:dd:2f:54:91:a2:c9:d9:b0:6e:07:0a:8c:0a:
         e4:11:47:05:b7:c7:ce:dd:85:4d:cf:5a:37:09:b1:3c:5e:20:
         bc:c6:7f:aa:65:9d:00:4f:4a:1b:0b:6c:04:ca:66:83:bd:ce:
         b4:3e:1e:3e:ce:62:ae:08:a6:19:e2:d0:35:12:3e:b5:53:f0:
         f2:10:d7:94:da:3b:30:b8:12:0d:23:05:29:a8:c7:47:f1:07:
         6d:31:21:84:b9:d6:bc:14:bd:0a:6e:35:65:c6:8c:69:69:86:
         88:c6:a8:c4:bc:1d:3b:6b:44:45:14:09:49:1f:08:c7:d5:c7:
         19:51:4a:ba:ec:5d:db:5f:5c:27:5b:bc:e6:fb:a6:23:eb:74:
         12:5b:3c:87:ee:61:b3:21:23:b5:05:3e:13:7c:3a:48:ae:42:
         6e:1c:38:e7:1b:12:04:ca:d2:c4:8d:e7:9c:87:91:be:5f:e8:
         43:0c:6f:c8:18:f4:38:81:82:4a:af:b4:1b:90:de:c4:db:b6:
         98:c3:48:85:83:34:b6:5a:8e:e9:8a:da:96:79:07:16:be:bc:
         8d:c4:0f:87:f4:59:3e:b6:38:bf:b0:ea:38:8d:a4:68:8e:7a:
         c4:90:86:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org