Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e3232352e38342e302f32322d3234203d3e20323636393331.roa
File:                     34352e3232352e38342e302f32322d3234203d3e20323636393331.roa (raw, json)
Hash identifier:          sQsHm78N/izWCNPMlxzXpPIasl9YvT1URP2+FO8i48M=
Subject key identifier:   70:71:0B:3D:E5:47:BE:5C:01:41:8B:51:67:FC:29:01:49:6E:1F:EB
Certificate issuer:       /CN=C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E
Certificate serial:       55B6393A35D263FF3907559D347D2CF9ECB91E39
Authority key identifier: C6:51:5F:0A:A1:B8:05:AF:93:CE:49:3D:07:9C:E2:D3:C8:7E:BA:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e3232352e38342e302f32322d3234203d3e20323636393331.roa
Signing time:             Fri 26 May 2023 22:00:00 +0000
ROA not before:           Fri 26 May 2023 21:55:00 +0000
ROA not after:            Fri 24 May 2024 22:00:00 +0000
asID:                     266931
IP address blocks:        45.225.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b6:39:3a:35:d2:63:ff:39:07:55:9d:34:7d:2c:f9:ec:b9:1e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E
        Validity
            Not Before: May 26 21:55:00 2023 GMT
            Not After : May 24 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:0a:fe:d1:7a:93:5e:7b:57:01:f9:b5:f4:
                    9f:76:c1:cb:0f:60:af:d1:b2:a2:03:b4:bc:57:8d:
                    49:e1:ba:07:13:79:54:87:5c:66:e4:af:bd:25:4b:
                    7a:f4:c2:d6:16:fd:f6:05:99:cf:f6:84:7c:38:d3:
                    0f:da:4c:61:7d:25:60:48:1c:63:e9:0c:84:3d:46:
                    62:57:a3:d3:d5:16:e0:7b:f8:0a:a7:83:32:11:b8:
                    90:0e:28:c0:83:0a:5b:ac:72:c8:2b:9d:9b:8f:11:
                    df:5d:07:9c:b3:af:9f:58:67:11:c0:fa:e4:78:54:
                    49:6e:11:be:67:b5:50:fa:d9:8a:8b:10:23:95:fe:
                    c6:af:d9:a0:82:35:a4:f1:e6:7d:e2:7b:37:e5:e9:
                    29:a6:bf:db:c1:0d:98:7c:26:0f:69:78:f4:61:0e:
                    d5:e3:18:b6:91:b5:26:6d:48:3e:e3:d3:08:27:5f:
                    29:aa:67:34:54:1f:6e:6d:f0:e0:c1:a7:20:41:07:
                    23:c1:d2:09:f1:ef:d3:4d:81:b6:6c:d7:0d:35:c0:
                    1e:8d:ad:17:ac:6d:ff:8f:1b:0b:b5:15:73:e1:46:
                    ef:7c:0d:3e:d9:2e:3d:61:c9:73:25:79:65:37:69:
                    13:cd:68:7e:79:fb:99:75:ef:e3:e1:16:76:57:56:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:71:0B:3D:E5:47:BE:5C:01:41:8B:51:67:FC:29:01:49:6E:1F:EB
            X509v3 Authority Key Identifier:
                keyid:C6:51:5F:0A:A1:B8:05:AF:93:CE:49:3D:07:9C:E2:D3:C8:7E:BA:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6515F0AA1B805AF93CE493D079CE2D3C87EBA1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e3232352e38342e302f32322d3234203d3e20323636393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:70:b6:03:31:bf:de:b8:30:c9:92:9d:4d:40:33:20:82:
         ba:a5:f9:88:57:62:a1:37:73:c4:0c:88:d5:05:04:27:f2:48:
         87:48:a0:af:d2:3a:1b:98:ac:bc:6f:6d:1e:20:ba:a6:ef:99:
         45:7b:3f:5a:af:a8:c7:76:1e:cc:7c:ca:6d:a6:34:be:d1:9a:
         bf:4c:1b:24:6f:3b:cc:1e:13:9b:0d:2b:9f:85:e0:8a:de:df:
         8c:cd:9a:dc:03:bc:92:93:80:c8:cb:cf:a8:a9:1f:fb:78:1c:
         5c:41:10:77:7a:23:62:63:27:d8:50:9a:0c:2a:0c:d3:22:c7:
         56:60:34:43:7b:23:c4:9d:13:4e:c5:7d:18:d8:41:58:78:e2:
         1e:51:6a:59:7d:81:44:35:a6:6d:17:5e:26:45:35:be:6e:03:
         cd:1f:32:8b:51:0b:ab:7e:06:01:85:1e:3c:1c:de:a1:c8:04:
         97:14:8c:98:94:aa:f7:89:5d:cf:ec:fb:62:09:5e:a2:a9:cf:
         61:33:b5:c9:a5:b1:bb:74:01:63:a7:86:36:58:21:dc:6f:e8:
         96:4b:78:00:b6:43:c6:c8:39:4c:ad:5d:a2:eb:52:2c:a9:3a:
         b4:c0:d0:e6:30:5c:29:92:99:81:fd:3c:be:1b:a0:b6:12:82:
         47:b3:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org