Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32332d3233203d3e20323636323332.roa
File:                     34352e362e3138302e302f32332d3233203d3e20323636323332.roa (raw, json)
Hash identifier:          OTxfUFuMi9wl8CpCfTIiHRZ4UWYsJlN+fIOwQixMHwA=
Subject key identifier:   09:34:B4:DD:26:CB:3D:54:44:09:EE:72:0B:54:FA:CF:A7:13:20:D2
Certificate issuer:       /CN=8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F
Certificate serial:       6623D1B10C8E09B54E9D447D3BC6766CA332C767
Authority key identifier: 8A:99:42:1A:DB:1D:C9:BA:7F:69:83:7F:10:8B:27:A7:9F:BE:FA:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32332d3233203d3e20323636323332.roa
Signing time:             Sun 26 Mar 2023 11:36:21 +0000
ROA not before:           Sun 26 Mar 2023 11:31:21 +0000
ROA not after:            Sun 24 Mar 2024 11:36:21 +0000
asID:                     266232
IP address blocks:        45.6.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:23:d1:b1:0c:8e:09:b5:4e:9d:44:7d:3b:c6:76:6c:a3:32:c7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F
        Validity
            Not Before: Mar 26 11:31:21 2023 GMT
            Not After : Mar 24 11:36:21 2024 GMT
        Subject: CN=0934B4DD26CB3D544409EE720B54FACFA71320D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:96:29:9e:78:cb:23:54:79:b7:4f:0d:df:66:
                    01:67:7d:7d:7b:ef:20:38:f0:ed:45:03:04:4b:b9:
                    0a:7f:51:00:de:74:f0:52:35:7d:aa:10:f4:7c:e8:
                    c0:48:05:e6:f5:5a:45:b6:f2:f2:b0:12:77:47:84:
                    95:2f:6a:53:af:41:89:48:49:1e:c3:2f:94:7c:4d:
                    46:77:b2:dd:8e:9e:33:14:5c:1a:7a:b6:d2:04:46:
                    a3:82:ba:9d:e5:38:e3:54:f6:c6:33:9a:77:09:ad:
                    d7:e5:be:ba:2e:a0:b6:b2:8a:4b:19:a3:51:35:a1:
                    4b:1f:dc:d3:cb:28:45:74:3b:4d:38:03:00:80:ea:
                    61:84:47:6c:ea:7d:81:27:4b:b7:71:30:ad:0c:93:
                    4f:ad:c8:14:57:70:0f:4f:75:02:97:9a:8e:ec:26:
                    79:eb:50:07:26:5c:0d:68:6a:e9:f2:49:a6:7e:9d:
                    6d:7b:76:cf:a5:46:f5:94:a1:d3:42:4f:cf:bc:00:
                    b2:b3:93:ea:29:12:22:84:a6:af:fd:68:83:59:99:
                    32:ee:b1:cc:7f:8d:11:64:0e:10:b6:35:0d:4c:d9:
                    88:39:2f:56:0a:1d:2d:2c:cc:95:13:0f:8f:32:91:
                    28:07:ef:2b:48:c8:0b:11:18:dd:28:7f:25:39:f4:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:34:B4:DD:26:CB:3D:54:44:09:EE:72:0B:54:FA:CF:A7:13:20:D2
            X509v3 Authority Key Identifier:
                keyid:8A:99:42:1A:DB:1D:C9:BA:7F:69:83:7F:10:8B:27:A7:9F:BE:FA:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32332d3233203d3e20323636323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:f2:4e:11:db:94:f9:88:35:bf:ed:75:65:24:fe:66:1f:5d:
         ea:3c:bd:e0:48:f9:d7:e9:3f:f3:9c:83:21:8c:29:79:36:3e:
         af:d0:6c:19:e8:fa:83:ef:d0:e3:3b:f4:4e:8f:67:ef:4d:46:
         b4:63:d6:1c:12:d1:9b:b2:d9:34:54:c6:bf:a3:bb:9e:78:d7:
         13:1d:3d:26:92:b1:d6:bc:de:d0:9c:b1:5e:a8:c6:eb:8a:5b:
         4b:37:af:24:a8:2f:89:53:f7:13:c8:dd:55:5e:00:f1:2e:32:
         19:ec:80:d5:f8:0a:37:3a:40:94:c9:ff:23:1d:76:a7:cb:bc:
         a4:42:8a:fa:6c:dc:91:a2:da:84:de:0e:c4:db:36:7f:af:03:
         1b:55:04:2a:21:24:72:1b:95:e7:08:21:dd:de:40:af:e7:65:
         ab:62:0f:87:6f:82:09:ab:b6:91:4e:81:f1:47:25:b2:1e:36:
         46:2b:1c:f3:be:05:26:c7:c9:89:64:fd:ea:4c:ef:ef:25:1d:
         34:29:46:86:03:66:03:f2:7c:08:12:2d:3f:b4:0a:df:5f:8e:
         5c:3d:00:1e:8a:60:26:3d:71:59:06:13:64:06:f3:fb:e0:89:
         84:e5:4f:b7:af:6d:6c:7b:55:da:2c:3b:cb:3f:2d:ca:a9:f5:
         57:34:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org