Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/34352e3233352e3136382e302f32322d3234203d3e20323638313933.roa
File:                     34352e3233352e3136382e302f32322d3234203d3e20323638313933.roa (raw, json)
Hash identifier:          3CH59ZbTVLSkKwCr971RqALjjtxnN68in/bBVeXqSYw=
Subject key identifier:   AB:04:8B:7D:D9:7D:2D:2F:1B:5A:9A:56:F3:6F:F2:38:32:D4:09:76
Certificate issuer:       /CN=F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87
Certificate serial:       30C10E4C4519A9E50D2F2B2160944F008D189001
Authority key identifier: F6:FE:6A:E9:BC:7D:26:C5:D8:E1:AB:5E:62:F6:81:1F:19:F8:FF:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/34352e3233352e3136382e302f32322d3234203d3e20323638313933.roa
Signing time:             Thu 22 Feb 2024 17:03:46 +0000
ROA not before:           Thu 22 Feb 2024 16:58:46 +0000
ROA not after:            Thu 20 Feb 2025 17:03:46 +0000
asID:                     268193
IP address blocks:        45.235.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c1:0e:4c:45:19:a9:e5:0d:2f:2b:21:60:94:4f:00:8d:18:90:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87
        Validity
            Not Before: Feb 22 16:58:46 2024 GMT
            Not After : Feb 20 17:03:46 2025 GMT
        Subject: CN=AB048B7DD97D2D2F1B5A9A56F36FF23832D40976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:a5:ef:c0:c2:97:9c:03:be:6c:8b:94:85:
                    be:d8:4f:b3:ba:7b:ba:e1:5f:d0:f2:ef:18:25:a6:
                    c8:f8:17:5f:71:c3:18:56:e6:62:e9:43:3e:63:70:
                    52:2b:5a:6e:11:57:0b:a9:9d:23:f2:9d:48:87:08:
                    08:14:8b:e9:0e:af:a9:f9:b7:ba:dc:8f:c0:29:be:
                    a9:eb:53:b6:29:20:8a:70:7d:42:6b:6f:2c:93:36:
                    9d:49:8a:11:6d:d2:c9:16:99:6a:39:22:6c:be:8b:
                    09:70:45:17:37:da:f7:78:32:3c:27:fa:e3:cc:a2:
                    f6:a0:c5:81:bb:8f:d9:94:29:52:19:f9:6c:f6:67:
                    5b:de:3f:14:e8:23:71:bf:ea:2a:35:7b:01:4e:7d:
                    07:89:dd:76:f4:8f:b8:b8:cb:05:70:c6:26:f4:ce:
                    57:22:aa:fa:ae:2c:bc:5a:40:e0:35:4a:d0:f8:19:
                    9d:25:c7:ae:e3:a8:6a:61:7e:60:54:09:8b:62:42:
                    21:a4:d9:28:72:75:40:eb:c3:8d:e2:e9:25:13:5d:
                    cd:ec:3b:47:c2:b8:57:2b:e6:9a:3d:ba:1b:ad:7f:
                    19:78:5b:60:9b:c3:b1:61:98:f2:91:d3:cf:ba:4b:
                    b1:92:16:bc:a4:76:ae:8c:97:1c:b3:30:8a:ae:b4:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:04:8B:7D:D9:7D:2D:2F:1B:5A:9A:56:F3:6F:F2:38:32:D4:09:76
            X509v3 Authority Key Identifier:
                keyid:F6:FE:6A:E9:BC:7D:26:C5:D8:E1:AB:5E:62:F6:81:1F:19:F8:FF:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6FE6AE9BC7D26C5D8E1AB5E62F6811F19F8FF87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBKGRcbJidkpSCdMFzDf549Q17pzLdGzLrggpSRc6cz6/0/34352e3233352e3136382e302f32322d3234203d3e20323638313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:da:b0:50:63:d2:05:69:5f:82:e6:e7:8c:c2:64:50:5a:b7:
         31:21:29:7f:24:03:ba:71:97:4c:b0:24:ac:82:76:98:e2:60:
         3f:4f:05:07:b3:77:88:27:57:44:bc:ee:72:ae:21:4d:49:19:
         1a:47:2f:ed:e9:ad:f3:a4:1d:9d:94:6f:84:2b:48:6d:45:b7:
         49:2a:2f:d6:45:ce:9e:3b:34:df:c6:96:13:18:ec:0a:f2:f2:
         fe:7e:09:d2:1c:4a:cb:45:aa:6a:cd:b2:67:c8:be:78:d0:28:
         87:91:17:b5:fe:6a:64:76:b3:9b:58:09:e4:10:84:79:77:4d:
         24:b5:d1:80:dd:c3:ca:f0:54:e8:91:67:b9:dc:c1:87:8b:c6:
         84:c5:87:fe:4c:e8:a5:8b:9a:ba:bc:db:57:00:f1:a3:39:8d:
         17:50:82:ba:bf:e0:37:1a:b8:e3:43:63:a8:62:fa:26:ea:ff:
         c4:a1:24:ee:c1:a1:f3:b3:63:7c:b3:16:d1:82:75:b0:d3:13:
         3c:fa:6a:7b:71:ad:5b:b3:b6:a4:a9:c8:ee:87:4c:9d:96:cf:
         7c:4c:9e:22:01:f3:28:db:a9:18:ed:c4:ac:94:4e:47:6a:a5:
         cb:fc:50:39:db:73:7a:cf:7e:45:07:f5:53:b2:49:cc:bf:5e:
         fd:c9:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org