Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/34352e3138392e34342e302f32322d3234203d3e20323639353737.roa
File:                     34352e3138392e34342e302f32322d3234203d3e20323639353737.roa (raw, json)
Hash identifier:          wDfwUocViz55QmGUEdTJfP/xbaBCQKSkKpcGTIUdKao=
Subject key identifier:   93:4C:3D:5E:32:6F:61:50:93:7A:E7:FE:27:8E:79:AF:00:0B:F4:89
Certificate issuer:       /CN=FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8
Certificate serial:       73244772C946339AF8EBB3CAF5264099D6884D68
Authority key identifier: FB:6B:4D:E3:43:D8:43:DE:8E:E9:9B:F9:4C:FF:EF:8F:97:46:AA:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/34352e3138392e34342e302f32322d3234203d3e20323639353737.roa
Signing time:             Tue 15 Aug 2023 19:00:25 +0000
ROA not before:           Tue 15 Aug 2023 18:55:25 +0000
ROA not after:            Tue 13 Aug 2024 19:00:25 +0000
asID:                     269577
IP address blocks:        45.189.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:24:47:72:c9:46:33:9a:f8:eb:b3:ca:f5:26:40:99:d6:88:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8
        Validity
            Not Before: Aug 15 18:55:25 2023 GMT
            Not After : Aug 13 19:00:25 2024 GMT
        Subject: CN=934C3D5E326F6150937AE7FE278E79AF000BF489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:b5:46:5c:cb:71:8a:a0:87:e7:16:2c:13:
                    9c:89:db:f3:86:63:bf:f3:d0:d4:15:e3:e0:7e:15:
                    5d:16:6e:52:51:93:9f:e2:98:8a:e9:42:53:7e:97:
                    1e:20:93:14:3f:9c:77:f2:18:ac:2d:d3:af:af:4f:
                    23:22:01:f0:d5:94:43:83:4e:2f:6b:d5:37:e8:10:
                    34:84:e7:e3:b6:50:32:c3:08:a0:f9:c9:97:6f:f5:
                    cf:79:19:06:a4:c4:73:a6:1b:6c:75:f7:0c:28:62:
                    9b:20:b0:a9:89:f8:0c:4c:98:dd:b9:5b:4d:bf:1c:
                    17:00:22:4b:9d:dc:61:d6:7c:05:eb:0f:60:2b:1d:
                    ba:39:31:8b:df:4b:5e:aa:f8:dc:f4:38:e0:8b:d6:
                    61:93:36:ad:4c:87:e4:c2:8b:7b:df:e4:17:14:6b:
                    41:d8:55:6f:d6:f8:b3:77:20:6c:cf:9e:53:3b:80:
                    66:14:25:10:8d:cb:c6:8c:8f:fc:ab:45:3a:c8:69:
                    d7:17:16:47:57:4a:a7:4d:25:be:e1:22:99:aa:d5:
                    e3:ea:4e:10:f5:f6:7b:a5:f6:3e:c6:e5:c0:6f:21:
                    bb:e5:a5:c2:49:04:61:57:7f:f2:c1:66:cf:61:82:
                    3b:b5:90:54:8e:d7:73:07:e6:71:03:93:bd:18:fa:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4C:3D:5E:32:6F:61:50:93:7A:E7:FE:27:8E:79:AF:00:0B:F4:89
            X509v3 Authority Key Identifier:
                keyid:FB:6B:4D:E3:43:D8:43:DE:8E:E9:9B:F9:4C:FF:EF:8F:97:46:AA:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB6B4DE343D843DE8EE99BF94CFFEF8F9746AAB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/0/34352e3138392e34342e302f32322d3234203d3e20323639353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:18:b1:91:a9:6b:87:b6:4f:0a:87:d6:da:d8:08:39:07:f6:
         52:e0:a4:65:b2:32:43:0d:8a:97:b8:61:61:a3:3f:19:f3:ee:
         67:97:2f:86:f8:62:62:dc:80:0e:4c:42:60:de:f5:bb:d9:a1:
         37:19:ee:8c:1e:ec:5a:2f:80:5e:bf:62:f8:b6:0c:c9:51:b7:
         38:e9:36:83:9e:94:18:9d:e7:e0:30:83:fa:3e:15:95:44:b0:
         8d:99:3e:31:97:ef:a6:0a:20:0d:04:f8:6d:8a:7c:14:5e:44:
         4a:97:12:a6:7f:9c:07:ed:b5:49:3e:cc:f8:d4:d6:7e:df:48:
         38:74:00:b8:c2:a2:7f:05:2a:95:e0:e5:0b:02:53:7f:98:ca:
         51:a6:cd:d4:97:5b:17:64:04:1e:48:81:ef:f0:5e:d5:01:ed:
         15:b6:6a:35:37:e7:2b:c8:d0:f7:08:68:73:86:4e:08:9e:0a:
         00:30:b3:c5:c5:3b:10:53:ce:19:38:a7:c6:88:9e:b3:7c:03:
         e8:54:09:bb:59:1f:e1:ba:76:50:0c:bb:f9:15:c0:05:42:fa:
         f2:46:91:ad:df:8f:a6:e1:91:80:7c:be:18:03:db:44:1e:c6:
         48:2e:c9:76:ca:15:77:89:4c:88:f9:16:ff:00:8f:9e:b5:d0:
         7c:b1:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org