Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32342d3332203d3e20323638373037.roa
File:                     34352e3136392e3136302e302f32342d3332203d3e20323638373037.roa (raw, json)
Hash identifier:          hH/ugbDwOB1IjrBTyIz1eJUiOzaVX3DnXUwJXUt8gPo=
Subject key identifier:   63:0F:4F:C1:E3:A0:AA:98:25:E4:1E:CE:B8:89:D9:F0:6E:01:02:8B
Certificate issuer:       /CN=E20F939CD14A803A7EFD9EA9640E79525FAEE9C2
Certificate serial:       0D59165F8FB94A25023BDE71000F194E469FF9B6
Authority key identifier: E2:0F:93:9C:D1:4A:80:3A:7E:FD:9E:A9:64:0E:79:52:5F:AE:E9:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32342d3332203d3e20323638373037.roa
Signing time:             Thu 29 Dec 2022 20:42:55 +0000
ROA not before:           Thu 29 Dec 2022 20:37:55 +0000
ROA not after:            Thu 28 Dec 2023 20:42:55 +0000
asID:                     268707
IP address blocks:        45.169.160.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:59:16:5f:8f:b9:4a:25:02:3b:de:71:00:0f:19:4e:46:9f:f9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20F939CD14A803A7EFD9EA9640E79525FAEE9C2
        Validity
            Not Before: Dec 29 20:37:55 2022 GMT
            Not After : Dec 28 20:42:55 2023 GMT
        Subject: CN=630F4FC1E3A0AA9825E41ECEB889D9F06E01028B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:45:df:3b:22:94:c4:59:bd:a0:e7:02:1f:
                    2e:05:31:fd:bd:c3:1a:13:52:e3:39:af:cd:df:b5:
                    8d:17:9a:f3:23:ba:9a:4e:0c:22:86:59:b8:c1:a9:
                    f5:7a:e1:50:fc:87:1d:31:e8:26:7b:c8:a0:39:54:
                    85:9e:15:eb:f1:38:56:a8:fb:51:7e:23:7a:55:1e:
                    be:a2:02:4d:9b:8f:dc:ce:87:67:74:94:5e:3c:94:
                    05:44:19:50:ad:a5:56:87:12:11:ca:70:60:da:71:
                    07:bf:02:b9:7a:5d:1e:e3:55:42:5e:98:78:cb:cf:
                    f2:da:1e:48:31:cc:a5:8d:f1:83:c9:ff:9a:27:a8:
                    1c:8e:f7:e4:5d:0b:f5:ed:09:4b:b8:f7:07:96:7e:
                    c7:d2:49:72:a0:fd:09:3d:fa:c1:1b:76:5c:58:b4:
                    ca:ad:6d:0d:b1:c3:8d:1b:ef:da:da:9c:d9:ed:0e:
                    67:42:7f:1a:92:c5:a0:19:a9:43:65:9d:e1:ce:6e:
                    c4:ac:47:00:f2:8c:fa:cc:cb:96:e2:58:f3:95:5d:
                    ad:f9:a2:40:19:c7:f4:98:7e:48:d7:80:47:c5:bd:
                    cc:2d:d2:43:7f:d8:db:8d:51:9a:ed:37:1a:70:cf:
                    b6:82:ca:97:0d:21:e5:5b:aa:c0:3e:eb:4d:17:1e:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0F:4F:C1:E3:A0:AA:98:25:E4:1E:CE:B8:89:D9:F0:6E:01:02:8B
            X509v3 Authority Key Identifier:
                keyid:E2:0F:93:9C:D1:4A:80:3A:7E:FD:9E:A9:64:0E:79:52:5F:AE:E9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E20F939CD14A803A7EFD9EA9640E79525FAEE9C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32342d3332203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:ae:46:4d:ce:28:3a:5e:23:97:a3:a5:20:05:d0:26:ef:
         1b:c4:af:df:39:29:49:6a:28:87:d3:91:4a:83:d5:6f:91:53:
         d2:ef:7c:65:1b:ad:e8:7a:40:e8:2b:2e:b0:3d:18:06:da:dd:
         5a:97:d9:75:37:dd:bf:0a:a8:7d:7b:9a:b2:62:04:04:6a:a5:
         a2:95:3a:86:ea:8f:87:cd:8b:a0:d7:dd:b6:4d:7e:d6:a0:99:
         9a:cb:f6:33:04:58:45:fe:cc:ee:fb:28:f9:bd:ae:7c:34:71:
         35:2f:23:02:5a:b8:bf:c1:2a:f0:31:e4:e3:98:85:a0:08:59:
         c7:73:b5:7b:5d:32:2a:de:c1:88:fc:75:eb:41:b3:df:b8:43:
         f3:2e:f6:b4:c6:e8:43:f4:89:78:b9:fc:50:25:b4:f6:61:38:
         41:a8:8e:60:76:a8:e9:ce:3b:30:99:30:fd:55:bd:1d:d1:57:
         cc:46:85:53:5a:cc:41:ad:b2:81:47:9e:0e:b4:bf:c4:0c:d4:
         00:1a:57:bd:d3:0a:fc:cc:dd:cc:c4:73:a5:cb:8c:45:01:9c:
         1e:2c:27:c7:79:9a:91:bb:a1:8e:56:b5:99:b1:b8:48:40:bb:
         df:58:fb:ef:91:42:6d:46:ed:73:63:b2:3e:ff:2b:c6:ae:d5:
         fa:d8:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org