Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/34352e3136352e39312e302f32342d3234203d3e20323638363732.roa
File:                     34352e3136352e39312e302f32342d3234203d3e20323638363732.roa (raw, json)
Hash identifier:          UyJdons2zai85EMjSppSgetLavWc8XrnCPXn/gdxnAA=
Subject key identifier:   A6:36:60:9B:0C:5C:26:E9:01:35:41:FB:D5:E7:D7:8B:78:3A:4F:CA
Certificate issuer:       /CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
Certificate serial:       63F41AC1850514387FA04875EE37FE9148A69B38
Authority key identifier: 75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/34352e3136352e39312e302f32342d3234203d3e20323638363732.roa
Signing time:             Mon 19 Jun 2023 17:00:00 +0000
ROA not before:           Mon 19 Jun 2023 16:55:00 +0000
ROA not after:            Mon 17 Jun 2024 17:00:00 +0000
asID:                     268672
IP address blocks:        45.165.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f4:1a:c1:85:05:14:38:7f:a0:48:75:ee:37:fe:91:48:a6:9b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8
        Validity
            Not Before: Jun 19 16:55:00 2023 GMT
            Not After : Jun 17 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:1c:4e:48:bf:9b:d8:0f:8e:05:f3:13:84:
                    cb:2b:53:d8:e0:ae:34:b7:99:e4:5b:27:59:81:ee:
                    62:dd:4c:a9:1b:a9:5a:20:b8:0d:75:da:c0:5c:78:
                    22:6f:15:b1:7d:a1:07:4e:44:7c:26:62:4b:ba:af:
                    29:95:02:17:7c:3f:b3:1a:e1:7d:3d:ae:3d:89:c6:
                    a9:95:52:25:b3:1e:86:b7:87:c5:4c:3b:ff:cb:fe:
                    f0:8b:b7:30:6b:ed:f5:4f:f1:dc:8c:fb:0b:52:35:
                    67:b6:f1:68:aa:ea:88:84:39:cd:a1:33:f8:93:e8:
                    18:15:7a:a2:d5:43:16:1a:d0:a2:4b:ce:91:d0:d4:
                    80:2b:87:00:60:da:e3:71:84:63:46:87:5f:01:bc:
                    90:f0:2a:a4:be:32:db:f9:38:34:e6:ac:e8:df:33:
                    45:fe:8b:81:c3:eb:79:67:ea:d2:52:8d:fa:bf:4c:
                    55:48:aa:43:95:6d:32:7a:c9:1f:7a:24:34:f5:77:
                    ea:17:bd:32:9a:c4:e1:41:5e:62:52:d2:73:98:f9:
                    18:b7:49:43:35:43:39:56:f2:00:f3:0f:4b:d7:04:
                    d1:c5:a3:53:06:a7:3b:b3:16:97:03:11:bc:b9:63:
                    e4:38:95:e6:b6:7a:b3:0a:ac:f7:a7:c5:ae:f4:7b:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:36:60:9B:0C:5C:26:E9:01:35:41:FB:D5:E7:D7:8B:78:3A:4F:CA
            X509v3 Authority Key Identifier:
                keyid:75:68:E6:A2:7B:4C:E8:B4:EB:D5:A3:30:59:2B:70:A2:0F:BF:6B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7568E6A27B4CE8B4EBD5A330592B70A20FBF6BB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFJQozo1BZEnJw7est3eaqf6qm8Ppig8FiUb3aFwiKWr/0/34352e3136352e39312e302f32342d3234203d3e20323638363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:4c:86:fe:fc:81:61:17:d3:e0:ee:53:1e:73:12:da:91:8d:
         6a:08:4a:b0:4f:ee:a4:fb:ab:fa:ea:7a:df:a8:62:ca:0c:7c:
         8a:83:eb:cd:fc:a6:36:6c:78:03:d3:21:20:c1:49:70:96:b5:
         00:3f:8a:54:f2:d7:4f:ed:9e:2f:33:55:ba:27:c0:2a:93:87:
         d5:c7:05:f1:77:65:f8:4a:7e:05:39:d7:69:3c:b7:a2:05:85:
         84:52:c1:94:f3:ad:2a:44:8a:54:7c:e6:78:04:fb:e2:ab:78:
         d4:e5:a9:03:fe:7f:42:69:c4:8d:b7:9c:01:39:3e:f5:95:e4:
         01:8f:59:e2:97:89:10:49:eb:0d:24:0c:8e:e0:b3:c7:6d:59:
         2d:15:23:ff:92:cc:06:7e:f8:84:d8:89:30:f3:35:bb:e0:e8:
         6e:2a:bb:68:44:49:25:db:46:e7:0e:da:4a:55:6c:31:cd:88:
         1f:31:16:cd:1c:43:87:b6:ca:32:88:be:ac:92:a5:db:bc:21:
         5b:9e:fd:df:72:5c:be:66:f5:55:78:fb:0b:f6:d0:9a:5f:ca:
         0f:5f:a0:12:f8:d8:d1:5d:86:b2:c8:64:49:fc:6d:f8:f0:52:
         4f:0e:1f:97:62:4d:84:70:06:ef:05:07:1f:fc:3b:b9:83:d6:
         56:1a:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org