Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/1/34352e3233352e35362e302f32322d3234203d3e20323637343131.roa
File:                     34352e3233352e35362e302f32322d3234203d3e20323637343131.roa (raw, json)
Hash identifier:          pwfs84qhTxtqBpylGQizvzpddTz9JaX+Z+kG1tv8zjM=
Subject key identifier:   4A:68:0F:D1:CC:04:99:A9:E8:7D:35:8D:74:7F:B2:3E:A2:2B:FB:3F
Certificate issuer:       /CN=75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED
Certificate serial:       3A7227531109C312C256616992F1987608B232D8
Authority key identifier: 75:AF:94:AA:26:13:C4:5B:4C:FE:95:17:F3:0C:9B:B4:FC:79:CB:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/1/34352e3233352e35362e302f32322d3234203d3e20323637343131.roa
Signing time:             Wed 10 Apr 2024 13:17:15 +0000
ROA not before:           Wed 10 Apr 2024 13:12:15 +0000
ROA not after:            Wed 09 Apr 2025 13:17:15 +0000
asID:                     267411
IP address blocks:        45.235.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:72:27:53:11:09:c3:12:c2:56:61:69:92:f1:98:76:08:b2:32:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED
        Validity
            Not Before: Apr 10 13:12:15 2024 GMT
            Not After : Apr  9 13:17:15 2025 GMT
        Subject: CN=4A680FD1CC0499A9E87D358D747FB23EA22BFB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:c8:22:1f:b4:db:62:4d:11:c8:a6:26:b0:
                    2d:a5:22:8a:78:3c:99:d3:b4:a5:d2:a8:ce:4b:65:
                    6c:79:69:a9:1a:da:dd:e9:85:9a:86:80:a4:ce:f4:
                    28:0d:e2:ab:3d:9c:1e:90:df:26:e0:94:60:33:23:
                    06:9f:55:84:57:17:2b:c5:82:87:4b:5f:fb:a5:a0:
                    f1:de:bf:9b:bf:3f:4b:73:2f:46:f4:7e:d3:75:29:
                    a6:ed:ab:4e:f5:60:92:8b:9c:df:68:53:37:35:da:
                    4c:8d:7a:dc:8f:e6:84:40:e7:6c:1a:e9:34:16:18:
                    ec:97:88:59:f9:eb:62:2f:bd:0f:b1:ea:76:92:04:
                    2b:2f:46:4e:ea:27:f7:78:02:72:73:ea:cc:77:d8:
                    9e:b3:05:56:21:de:45:91:72:e1:73:59:f2:bd:77:
                    f6:9a:c8:26:e5:dd:f1:86:75:b4:1e:69:a9:05:86:
                    d2:62:80:09:89:df:57:6b:d3:b5:d9:c6:47:74:99:
                    a9:b7:b6:cc:27:c6:62:47:07:0f:5c:8f:8b:60:b4:
                    93:a0:21:59:85:d7:f7:b5:c0:61:36:51:67:f3:d9:
                    88:41:e0:12:5b:2b:30:a1:a4:37:f2:93:11:4a:44:
                    59:73:74:43:28:61:17:7c:19:46:d8:c0:8f:3a:be:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:68:0F:D1:CC:04:99:A9:E8:7D:35:8D:74:7F:B2:3E:A2:2B:FB:3F
            X509v3 Authority Key Identifier:
                keyid:75:AF:94:AA:26:13:C4:5B:4C:FE:95:17:F3:0C:9B:B4:FC:79:CB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/1/75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75AF94AA2613C45B4CFE9517F30C9BB4FC79CBED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/1/34352e3233352e35362e302f32322d3234203d3e20323637343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:b1:cb:2a:90:dc:50:58:4d:10:96:bb:06:1b:63:19:2b:03:
         a2:80:9f:12:2d:54:1d:ff:cf:4f:d1:35:c9:04:f3:e2:59:71:
         d7:3a:55:4e:cb:ee:28:c9:41:16:3c:38:9e:05:9d:a6:45:07:
         20:5f:05:e4:c9:4a:f9:52:f4:eb:2d:42:30:09:68:ea:ae:86:
         40:bd:2a:93:15:ff:88:55:45:a7:2d:70:6d:93:0e:bd:7a:17:
         55:e6:ce:77:e2:a8:0d:ae:54:84:a1:8d:7b:44:80:e8:f8:52:
         d6:df:36:7f:1e:57:01:6c:70:dc:fe:99:ab:4f:e4:83:d6:06:
         2a:db:f1:e7:e1:9f:06:f0:3a:32:a7:e3:52:7c:5d:91:69:0a:
         17:31:f9:07:21:0f:3a:dc:b3:a9:40:78:18:9e:9e:01:cf:b7:
         a0:8f:7c:a3:e5:04:3d:d3:e9:0a:f6:a4:fa:2b:1b:c4:0d:d4:
         02:33:a8:65:7a:53:bd:26:e7:6c:0b:53:72:c8:8f:b1:25:80:
         9a:ae:80:9c:26:c3:79:7c:99:6b:2c:2c:0e:4a:bb:e2:37:3b:
         33:d1:ae:27:87:3a:bd:48:a8:e8:b5:20:4e:ee:ac:01:88:0a:
         7e:97:f3:5f:81:43:00:5d:2d:e2:c9:fc:ee:7c:cb:a9:ba:28:
         37:a8:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org