Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38362e302f32342d3234203d3e20323637313839.roa
File:                     34352e3233312e38362e302f32342d3234203d3e20323637313839.roa (raw, json)
Hash identifier:          40ZmER0eqfqFfM5V+1sral2KtjmGTKaDWzEmXIcvfiQ=
Subject key identifier:   1D:40:A9:12:C5:B6:00:3F:AA:EA:91:D4:BB:29:84:F0:81:CF:AC:0E
Certificate issuer:       /CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
Certificate serial:       09DA7686D115390BCCF7BB4826D7E1ACC008E3EA
Authority key identifier: C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38362e302f32342d3234203d3e20323637313839.roa
Signing time:             Mon 07 Feb 2022 12:09:24 +0000
ROA not before:           Mon 07 Feb 2022 12:04:24 +0000
ROA not after:            Mon 06 Feb 2023 12:09:24 +0000
asID:                     267189
IP address blocks:        45.231.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:da:76:86:d1:15:39:0b:cc:f7:bb:48:26:d7:e1:ac:c0:08:e3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D220159E081BD89DCE356728E04C7EC1441DFB
        Validity
            Not Before: Feb  7 12:04:24 2022 GMT
            Not After : Feb  6 12:09:24 2023 GMT
        Subject: CN=1D40A912C5B6003FAAEA91D4BB2984F081CFAC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4f:f6:35:5e:23:f7:dc:54:bd:c7:95:1e:61:
                    03:86:97:44:0d:c1:fa:1b:d3:c1:90:16:01:07:37:
                    ba:4c:a0:be:b6:0e:95:9c:e7:6b:50:44:0d:ff:21:
                    4d:27:20:11:f7:c3:2c:25:2d:78:09:db:b7:88:50:
                    94:b1:ff:5d:df:ab:52:ef:d3:7f:b8:69:0e:50:0f:
                    50:48:ab:68:20:f5:21:63:97:1f:c8:01:9e:12:94:
                    9e:c4:75:1a:fb:b4:1d:f8:05:53:08:3c:a8:49:86:
                    d5:c0:ee:5b:86:1c:a5:58:8a:9f:1e:d0:59:fe:e5:
                    4d:e6:80:00:95:35:5a:88:4a:46:ff:fa:4e:22:b8:
                    86:1a:a4:2f:e9:ff:3c:e0:4b:5e:67:51:89:e0:b3:
                    1b:ca:4c:ff:a4:7e:88:d6:62:88:cb:04:13:22:9c:
                    01:f1:c8:1e:72:a7:d5:2c:df:23:02:2b:9b:90:63:
                    7d:18:82:00:2c:4c:01:8d:47:fd:b4:0d:36:fb:f7:
                    79:8e:bb:44:c5:15:2d:8c:21:1b:ca:33:4a:d5:22:
                    d9:2a:13:86:e0:48:49:40:be:e4:0e:c0:18:51:43:
                    10:a2:95:58:2d:c4:18:a9:99:ef:4f:7b:a0:24:6e:
                    6d:d4:22:fa:21:e4:03:be:9a:d2:37:e8:12:b6:51:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:40:A9:12:C5:B6:00:3F:AA:EA:91:D4:BB:29:84:F0:81:CF:AC:0E
            X509v3 Authority Key Identifier:
                keyid:C6:D2:20:15:9E:08:1B:D8:9D:CE:35:67:28:E0:4C:7E:C1:44:1D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6D220159E081BD89DCE356728E04C7EC1441DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEPKxBYSYShNwQxNJW6V5pKH1kW3JPoAaGwrsaK5CyxJ/0/34352e3233312e38362e302f32342d3234203d3e20323637313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:51:f7:30:ad:82:a7:8c:51:1c:d0:af:88:ed:5b:d8:9d:
         15:be:b2:3d:90:28:83:ea:70:51:e3:a2:f6:43:3d:3b:fe:07:
         c8:b3:03:1b:46:c3:ae:a5:1f:b3:01:ce:90:c6:de:04:d0:83:
         8d:f8:bd:03:94:2b:41:17:d3:e2:26:64:64:7c:6b:6a:f9:0e:
         07:83:41:2c:23:e5:70:70:20:a8:c9:3c:61:81:71:5f:04:82:
         35:2a:18:c6:58:20:ca:fb:f4:30:8d:55:f5:a6:6b:3f:38:95:
         67:2b:41:19:24:93:6b:41:64:95:1b:b0:66:ee:75:9d:63:ee:
         0c:6f:cd:f8:07:f9:c7:5b:44:28:e8:9e:1c:01:60:16:8e:12:
         72:a6:ad:c7:6c:6e:11:7b:52:3a:82:54:ec:b4:12:d9:39:fb:
         e7:64:fc:63:c7:c9:18:14:67:f7:54:44:9a:42:0e:f7:2f:2b:
         aa:27:b1:f6:d1:d3:7c:84:36:83:11:c7:c5:17:6a:a1:9d:e3:
         4b:c9:4a:a4:50:3a:61:3d:0b:8f:b7:1e:69:55:51:e5:7f:31:
         43:9b:46:fd:24:a7:f8:0a:55:8c:f6:ba:dc:f2:63:29:a3:e4:
         e7:04:47:b8:bd:9c:99:eb:44:78:d1:90:23:e9:0f:b1:51:63:
         20:ec:ae:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org