Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33372e302f32342d3234203d3e20323636313532.roa
File:                     34352e362e33372e302f32342d3234203d3e20323636313532.roa (raw, json)
Hash identifier:          LJIYHx68HDMMVq/PzrMIBfi7T6Xw/E7qVVQedxGEgM4=
Subject key identifier:   D5:2F:2B:0C:BD:CF:7E:B3:DF:76:3A:6D:9D:61:1E:17:3A:09:0D:49
Certificate issuer:       /CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
Certificate serial:       678BD2B584B482F29C485A102D966E7F688DD608
Authority key identifier: 43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33372e302f32342d3234203d3e20323636313532.roa
Signing time:             Mon 14 Nov 2022 21:42:59 +0000
ROA not before:           Mon 14 Nov 2022 21:37:59 +0000
ROA not after:            Mon 13 Nov 2023 21:42:59 +0000
asID:                     266152
IP address blocks:        45.6.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8b:d2:b5:84:b4:82:f2:9c:48:5a:10:2d:96:6e:7f:68:8d:d6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
        Validity
            Not Before: Nov 14 21:37:59 2022 GMT
            Not After : Nov 13 21:42:59 2023 GMT
        Subject: CN=D52F2B0CBDCF7EB3DF763A6D9D611E173A090D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:2c:9b:eb:12:e0:1f:3e:8a:cf:29:5d:d0:
                    e7:78:21:09:2c:3d:bf:60:15:0d:20:03:48:85:b7:
                    0a:fa:57:46:95:8a:ed:b9:c2:ca:fb:ab:77:b2:5a:
                    c6:ff:de:fc:cf:c5:e6:95:e6:db:d8:69:e0:54:7e:
                    23:78:31:dc:7b:03:33:8c:a6:eb:3b:e6:b0:47:05:
                    0c:af:f7:c5:5d:00:11:e2:8e:52:ba:e5:4e:9c:17:
                    3d:29:bc:e7:8a:d4:75:ad:c1:32:db:08:a6:19:2a:
                    db:7d:4d:14:47:96:dd:b9:3c:bd:3f:ad:a4:e6:f1:
                    00:35:18:65:65:3e:dd:81:43:41:6d:3a:33:e3:65:
                    59:03:73:e5:02:15:81:3e:82:26:13:72:1d:83:28:
                    52:30:37:39:14:bd:77:a9:74:a4:de:3e:89:5a:7e:
                    4b:ea:44:02:06:df:c5:b0:dc:1c:f4:42:94:ce:65:
                    b2:fe:ba:76:1b:40:31:b3:d0:26:20:cd:79:84:0d:
                    24:f8:9d:bb:9f:d0:5e:42:b6:38:be:4f:04:4b:f7:
                    44:73:a9:e4:0a:5e:4a:a9:82:77:90:81:e0:a1:c4:
                    2e:a4:09:e1:a1:0d:44:49:43:36:e1:e9:be:85:01:
                    62:58:93:10:e5:f6:36:f0:9d:81:b7:e2:51:38:2e:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2F:2B:0C:BD:CF:7E:B3:DF:76:3A:6D:9D:61:1E:17:3A:09:0D:49
            X509v3 Authority Key Identifier:
                keyid:43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33372e302f32342d3234203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:72:77:b8:99:3e:d4:31:3d:32:be:4d:47:b1:34:0b:11:
         41:de:f1:f8:0f:f6:55:4d:cb:ca:7f:13:08:c9:e0:8c:34:d4:
         f7:06:97:79:6b:07:28:f6:b0:a2:1a:2a:e7:35:0e:10:9f:87:
         51:ca:68:7e:3a:6f:76:d4:39:2f:e5:b7:0c:df:1e:9a:b0:b4:
         c9:dd:eb:28:6e:25:ec:7b:38:47:1f:ea:e7:35:4c:3f:1f:f4:
         62:aa:fa:60:8d:d7:58:87:8b:02:39:b1:a0:47:bd:f4:c0:b9:
         1d:e9:ed:a2:66:e9:fe:60:8b:11:5c:04:37:ca:fd:bb:31:57:
         d7:c2:48:3d:cc:a0:68:80:eb:a7:d6:7d:98:2b:b1:14:b7:e2:
         b2:5e:89:7e:c1:76:3a:05:0d:3f:5c:38:17:fa:ff:d0:dc:a6:
         ee:d8:ca:19:2c:38:d8:46:5b:b7:65:68:e4:41:ca:a2:89:c5:
         26:bd:9b:1d:9a:e2:bf:03:d5:38:0a:25:02:c4:51:ba:85:8a:
         1e:ee:ab:99:78:ed:3e:aa:e9:28:b5:6c:40:7c:10:26:f3:8d:
         4d:f7:c5:7c:34:3c:a7:6a:70:74:1b:11:b8:86:f6:59:c9:fa:
         bc:b7:b8:13:f0:78:ac:da:9a:18:76:47:91:f7:79:b3:e3:ab:
         9d:75:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org