Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3139312e302f32342d3234203d3e20323637393837.roa
File:                     34352e3136362e3139312e302f32342d3234203d3e20323637393837.roa (raw, json)
Hash identifier:          M8ps9XlsNcQRSYtDjAacXGHZyeepnl93KITMIQMLfR4=
Subject key identifier:   5B:8B:39:58:94:4C:68:6A:CA:DC:FA:B7:19:81:A9:35:8A:44:65:36
Certificate issuer:       /CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
Certificate serial:       79D15D7DA727D720408F2C662A4D8A109CB5B4D1
Authority key identifier: 13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3139312e302f32342d3234203d3e20323637393837.roa
Signing time:             Thu 15 Feb 2024 20:47:04 +0000
ROA not before:           Thu 15 Feb 2024 20:42:04 +0000
ROA not after:            Thu 13 Feb 2025 20:47:04 +0000
asID:                     267987
IP address blocks:        45.166.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d1:5d:7d:a7:27:d7:20:40:8f:2c:66:2a:4d:8a:10:9c:b5:b4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13520DAFF407052F1C2BFBEFFD2ED8571B8C2073
        Validity
            Not Before: Feb 15 20:42:04 2024 GMT
            Not After : Feb 13 20:47:04 2025 GMT
        Subject: CN=5B8B3958944C686ACADCFAB71981A9358A446536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ea:3d:a7:2c:ca:86:d1:4e:b8:33:9b:cd:c5:
                    9a:e1:7a:f0:ba:36:4f:9b:bb:3d:e8:31:5c:4a:0a:
                    ec:f5:fa:e5:60:0c:47:46:71:ba:41:8f:35:f9:57:
                    dc:94:8e:79:22:5f:39:9c:a8:e5:36:a1:d9:f2:1d:
                    d3:f2:11:fc:c0:12:6a:33:5e:dc:9c:20:6a:c6:9b:
                    44:df:f3:7e:8a:b4:51:8b:f2:1e:2e:fa:aa:aa:fb:
                    d8:49:67:e3:bd:17:2b:01:3d:2f:1a:82:b1:32:fd:
                    79:a3:60:36:51:7c:a0:3e:55:2c:ee:0f:da:20:33:
                    4c:d6:83:3a:12:3b:fc:8c:a0:13:33:20:a2:fd:23:
                    55:92:32:cc:05:8b:c3:cb:6c:6d:c6:10:ca:91:88:
                    22:fc:24:2d:61:fe:64:7c:ec:4f:09:15:64:4d:77:
                    c1:19:58:05:32:ca:2b:ca:f5:2a:91:c4:b7:97:89:
                    b5:74:f6:2c:48:3f:32:bf:6b:ca:71:ca:c0:1b:e6:
                    78:7d:64:6e:87:e5:dc:e6:0c:6a:20:6e:c8:10:9f:
                    d4:1f:e8:8e:cd:b9:bd:b8:3f:e6:85:f5:eb:89:59:
                    99:3e:c6:3c:eb:0d:9b:b2:ab:51:2c:87:e3:b3:22:
                    85:d6:f0:bf:d4:2b:d1:a1:98:ea:af:50:9f:66:0a:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:39:58:94:4C:68:6A:CA:DC:FA:B7:19:81:A9:35:8A:44:65:36
            X509v3 Authority Key Identifier:
                keyid:13:52:0D:AF:F4:07:05:2F:1C:2B:FB:EF:FD:2E:D8:57:1B:8C:20:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13520DAFF407052F1C2BFBEFFD2ED8571B8C2073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6HUk6omZaKaY3GzLZCLTqPCVLQjwxmsMMKAR1jfnSYZ/0/34352e3136362e3139312e302f32342d3234203d3e20323637393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:08:67:a5:df:75:df:f6:2c:06:ac:37:35:58:5a:b0:c5:bf:
         68:db:69:4b:c7:24:4a:fd:54:21:9c:fa:5b:18:53:45:00:8b:
         3c:54:e4:3a:b3:e9:8f:86:17:79:f0:07:f5:0c:ca:ae:9a:29:
         67:ed:b0:fa:cc:0d:63:d1:6d:55:82:56:aa:1e:78:5c:93:fc:
         5e:21:2e:66:90:d1:c0:32:09:c1:a8:f3:a7:be:65:f0:dd:6e:
         7c:61:94:f3:29:34:93:08:5d:d5:48:66:aa:93:a8:64:ad:48:
         7b:e0:0f:1b:0b:63:84:40:06:5f:87:e2:f0:ca:9d:4c:eb:58:
         9a:8e:f1:73:54:03:d5:07:e1:e7:09:35:04:2c:8d:47:15:8d:
         78:ca:3b:ff:69:ae:d4:c3:f2:89:e8:83:15:5f:ca:b5:11:36:
         20:5e:5c:02:e4:3b:2c:ed:89:e1:f5:13:68:64:6b:2d:9b:de:
         d2:08:02:31:97:f7:1f:61:64:ac:a6:96:cd:8e:62:51:de:ba:
         1b:53:8b:87:d3:9e:39:21:6e:57:0b:f4:56:b7:34:2a:ca:68:
         f8:1a:f0:12:18:f4:64:5b:7e:8b:76:11:40:ef:81:2f:5a:3a:
         87:83:92:58:69:1f:ff:c0:c7:5e:5a:78:a3:bc:73:42:04:58:
         88:6c:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org