Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/34352e3137342e3133342e302f32342d3332203d3e20323638383532.roa
File:                     34352e3137342e3133342e302f32342d3332203d3e20323638383532.roa (raw, json)
Hash identifier:          DGixAdys3AY920OjBM0/zd7m08Jt8/Pqvk2QiD2hZGo=
Subject key identifier:   7C:4A:56:B6:27:C7:41:66:12:0B:C8:02:AD:7E:95:0C:67:21:2C:6F
Certificate issuer:       /CN=6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E
Certificate serial:       522FE98A8277A7086B6D0CF135DE71BDE08550A3
Authority key identifier: 69:44:C5:5B:F9:B2:E6:46:89:5F:4A:0B:34:0F:DB:CB:1A:D4:B6:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/34352e3137342e3133342e302f32342d3332203d3e20323638383532.roa
Signing time:             Tue 16 Jan 2024 15:00:00 +0000
ROA not before:           Tue 16 Jan 2024 14:55:00 +0000
ROA not after:            Thu 16 Jan 2025 15:00:00 +0000
asID:                     268852
IP address blocks:        45.174.134.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2f:e9:8a:82:77:a7:08:6b:6d:0c:f1:35:de:71:bd:e0:85:50:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E
        Validity
            Not Before: Jan 16 14:55:00 2024 GMT
            Not After : Jan 16 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:44:08:44:d1:63:ed:22:df:0a:a6:4a:a6:6c:
                    7e:47:a7:5b:bf:d0:50:ae:3c:48:84:05:84:64:03:
                    2b:95:5a:8a:36:a7:8c:1a:82:f8:c7:ef:a4:04:28:
                    f6:33:eb:c7:92:41:f2:ff:9b:8c:9a:38:1f:87:07:
                    c3:a4:c2:28:e9:d3:05:ca:7b:9d:5d:fc:ff:70:f7:
                    d4:11:08:c1:9b:8a:d7:0b:27:f1:51:28:91:5e:bf:
                    32:f7:cb:d3:2f:8f:09:44:d1:22:a8:6a:68:11:8d:
                    7a:bb:4d:be:0d:d5:ee:0f:63:f5:ff:3b:89:a8:b9:
                    5e:47:2e:76:a6:f3:f2:0c:89:c1:c3:9d:9e:0f:6e:
                    f1:fe:01:a7:32:a6:64:09:a5:38:e8:68:fe:34:53:
                    06:12:d0:00:5e:bb:e0:58:ec:fd:a4:56:87:82:da:
                    2f:4f:a3:e7:e5:4f:62:78:ec:fc:cb:ed:03:a2:17:
                    91:8b:8a:0b:f3:e0:09:e4:75:87:86:b9:a8:1b:01:
                    35:c5:8c:3c:ca:6e:6d:35:9a:5e:60:db:21:2b:a6:
                    f3:4a:28:39:35:fa:dd:81:07:03:cb:85:ee:8a:c9:
                    12:6d:8e:73:f9:c3:ad:be:33:f5:d5:36:c7:0d:fb:
                    70:e5:19:67:96:bf:29:49:41:9a:15:05:cb:5e:20:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4A:56:B6:27:C7:41:66:12:0B:C8:02:AD:7E:95:0C:67:21:2C:6F
            X509v3 Authority Key Identifier:
                keyid:69:44:C5:5B:F9:B2:E6:46:89:5F:4A:0B:34:0F:DB:CB:1A:D4:B6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6944C55BF9B2E646895F4A0B340FDBCB1AD4B66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGPwbFMZHjdzRHqXhmBjhjidvpSNoioGWMZS64ZCqoJt/0/34352e3137342e3133342e302f32342d3332203d3e20323638383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:56:53:63:2b:7d:04:e4:1a:fc:25:f4:5f:bf:6b:11:e9:be:
         fd:34:a3:06:25:16:a3:68:86:a7:bb:e8:1a:cd:18:de:df:5e:
         02:e6:1b:bf:04:5f:7b:f5:43:3d:e3:6e:95:58:a8:8f:81:00:
         fe:21:20:7d:66:fe:9c:d8:c3:b3:21:03:94:7d:21:45:57:ac:
         97:36:28:c0:04:3b:4b:03:48:85:07:a5:55:22:ff:47:95:51:
         a5:c0:54:72:9c:a9:3b:10:9b:37:0d:c8:3f:a7:6c:f7:67:23:
         f0:53:2a:10:27:88:22:9f:ba:14:2a:d9:e3:72:2a:59:7e:30:
         1c:9e:0b:75:30:33:2b:84:aa:c2:b7:eb:b9:c5:34:70:71:1f:
         f6:50:46:2c:b5:2d:4a:b3:f3:ed:f2:61:fb:df:c2:b6:6a:45:
         ce:39:c0:59:11:cc:e6:ea:37:90:f6:2a:b9:c9:e6:e2:5f:49:
         3f:21:d0:35:a3:28:f7:07:b2:e1:9f:64:ad:d6:f5:36:f2:16:
         8d:52:a2:29:da:fb:66:91:7f:37:b9:59:c2:fb:4a:bd:cf:3e:
         20:72:b9:47:c3:df:a3:84:0e:d5:be:ce:40:88:94:40:69:d5:
         25:9c:41:9b:5e:ec:73:96:7f:19:b3:a1:10:2d:b3:c9:ad:67:
         3f:ca:69:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org