Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3139302e302f32342d3234203d3e20323637393837.roa
File:                     34352e3136362e3139302e302f32342d3234203d3e20323637393837.roa (raw, json)
Hash identifier:          kqmPok12ZPDNmdyjUV4xNiJL/GDJxvRvCahJ5sAwOcA=
Subject key identifier:   F0:DA:BD:90:9E:D3:65:A9:54:51:1F:87:B7:35:FE:3B:3A:C1:6D:86
Certificate issuer:       /CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
Certificate serial:       2D6208800ED2F9371E3657EE1B2E2326C20FE494
Authority key identifier: 13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3139302e302f32342d3234203d3e20323637393837.roa
Signing time:             Thu 15 Feb 2024 20:47:10 +0000
ROA not before:           Thu 15 Feb 2024 20:42:10 +0000
ROA not after:            Thu 13 Feb 2025 20:47:10 +0000
asID:                     267987
IP address blocks:        45.166.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:62:08:80:0e:d2:f9:37:1e:36:57:ee:1b:2e:23:26:c2:0f:e4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
        Validity
            Not Before: Feb 15 20:42:10 2024 GMT
            Not After : Feb 13 20:47:10 2025 GMT
        Subject: CN=F0DABD909ED365A954511F87B735FE3B3AC16D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:51:ca:57:b6:82:f8:2d:45:b5:ba:8a:b3:
                    c3:09:52:db:eb:36:73:07:51:90:47:b8:6e:af:7d:
                    d6:da:e7:a8:67:15:04:8e:40:de:70:99:78:c9:33:
                    1b:32:2a:08:f2:53:25:2b:4d:95:53:cd:bb:7c:1c:
                    f4:ca:52:64:0d:ef:13:11:5f:37:ad:42:18:48:a3:
                    86:d9:24:19:80:23:3d:20:8b:ba:b4:a7:f0:6d:80:
                    b0:ea:2a:b6:49:56:3f:c7:a5:0e:22:71:6d:01:4e:
                    c4:28:ce:b6:b6:aa:78:b1:c5:76:8c:3d:b8:bc:da:
                    67:c2:e1:03:19:d2:0f:e7:0d:0c:bf:49:6e:ec:84:
                    79:19:2b:83:8d:ce:c2:a5:aa:04:f3:61:e9:52:16:
                    ae:9b:36:46:54:98:e8:8c:01:d9:f7:56:74:e9:89:
                    0f:31:1c:0f:1c:a2:03:57:aa:42:f4:3c:c4:5f:6c:
                    0e:bf:d1:18:08:80:6d:f5:ed:8f:05:66:fa:48:19:
                    10:31:35:20:80:17:f5:8c:13:17:7e:46:a8:42:bd:
                    aa:f3:e1:60:27:f8:2d:cc:51:fd:d8:c5:1b:12:26:
                    1c:9d:4a:c9:40:2a:46:2c:a1:0d:d7:79:5d:e3:24:
                    29:5b:b2:2b:f7:77:de:b8:10:a9:20:fc:72:19:94:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:BD:90:9E:D3:65:A9:54:51:1F:87:B7:35:FE:3B:3A:C1:6D:86
            X509v3 Authority Key Identifier:
                keyid:13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3139302e302f32342d3234203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:40:a7:91:2b:bd:aa:87:45:dd:8a:1e:ab:9c:b8:d0:81:
         1e:71:c8:a1:14:2c:df:d5:0b:bc:2c:91:59:a2:f3:58:9e:ad:
         ea:3e:54:b9:60:66:2d:df:2f:90:2e:24:99:63:b1:d0:b8:3a:
         72:45:86:ed:de:2b:69:2c:9b:8a:12:da:21:a0:be:ef:f5:60:
         21:19:25:73:36:f4:2d:86:87:4d:cd:2e:e5:ea:1e:38:59:b1:
         ad:16:b6:d0:3f:f4:36:10:69:22:f5:ad:84:11:1c:65:a3:35:
         7e:a3:2c:ff:1d:a9:d4:22:62:39:a3:ca:e6:34:99:54:32:c8:
         ca:87:f6:54:86:81:0d:58:61:ff:2e:74:59:a9:41:0d:6c:fd:
         99:0a:53:24:e3:27:a5:2f:dc:5b:1e:6a:59:8c:5f:45:3b:2a:
         08:77:38:81:5f:2b:bb:3f:a4:dd:5a:c6:75:52:ca:15:ff:ce:
         ac:5e:92:30:1d:54:6f:dd:ca:c5:c6:8a:1b:6a:ae:c4:f5:6d:
         d3:2b:15:81:35:67:29:b4:68:d2:9d:30:4f:52:97:5b:7e:d0:
         d8:0b:cf:7c:da:a7:5d:e4:be:17:47:13:6c:28:52:7c:2d:2f:
         85:e7:10:b5:22:cf:05:99:d4:cd:73:9f:86:8e:95:7f:67:b5:
         0f:b9:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org