Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/34352e362e3132382e302f32322d3234203d3e20323636313335.roa
File:                     34352e362e3132382e302f32322d3234203d3e20323636313335.roa (raw, json)
Hash identifier:          0Plxoj1skAnwjYyA+B6bn4QU0kOa1RchUlMIHwJyWdQ=
Subject key identifier:   83:AD:5B:70:F8:57:99:82:D7:96:EC:58:6B:60:8D:15:F2:F5:75:A2
Certificate issuer:       /CN=66EA09809D63B05E9ED21D386D077B26F209BAF0
Certificate serial:       2769F41FB3F716AAC919F4B7BEAF0B6E027CF519
Authority key identifier: 66:EA:09:80:9D:63:B0:5E:9E:D2:1D:38:6D:07:7B:26:F2:09:BA:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/34352e362e3132382e302f32322d3234203d3e20323636313335.roa
Signing time:             Thu 25 May 2023 14:39:37 +0000
ROA not before:           Thu 25 May 2023 14:34:37 +0000
ROA not after:            Thu 23 May 2024 14:39:37 +0000
asID:                     266135
IP address blocks:        45.6.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:69:f4:1f:b3:f7:16:aa:c9:19:f4:b7:be:af:0b:6e:02:7c:f5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66EA09809D63B05E9ED21D386D077B26F209BAF0
        Validity
            Not Before: May 25 14:34:37 2023 GMT
            Not After : May 23 14:39:37 2024 GMT
        Subject: CN=83AD5B70F8579982D796EC586B608D15F2F575A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:b6:52:38:85:15:4a:d9:7a:13:10:0f:25:
                    d6:22:ff:76:3f:66:b8:1e:33:06:a7:0b:9b:c4:33:
                    b2:c3:9c:4f:28:da:f2:64:0f:75:22:7b:a1:47:d5:
                    83:20:f6:cb:d1:68:b7:81:8f:d7:92:9a:32:53:28:
                    40:e9:cb:d2:86:31:b5:a5:fc:25:27:14:7f:4e:84:
                    e5:3b:c3:0e:3b:c9:a1:9f:59:93:1a:e0:ed:29:50:
                    bc:a3:92:25:dc:b9:c1:8b:fc:66:01:7d:24:04:55:
                    b8:e5:58:79:ce:d6:2f:aa:8b:8b:d8:5e:1b:d8:00:
                    01:0b:fc:25:50:fd:15:08:63:e6:40:2f:b4:a9:fc:
                    98:6f:80:21:21:6d:56:b8:f3:89:19:5b:96:04:77:
                    1a:bc:51:83:8e:f9:b1:3b:27:77:20:a6:8f:47:a3:
                    16:9a:4b:17:76:49:1a:aa:18:16:e0:aa:dc:72:cf:
                    50:1c:19:db:5b:2d:62:f0:77:48:02:cd:a1:c1:d5:
                    c2:bc:93:6a:79:07:1c:0c:64:38:9f:76:ea:c2:49:
                    e2:fb:d4:4b:f1:42:0b:da:e0:ff:7a:08:1c:25:86:
                    9c:e2:13:d8:bc:9b:02:8b:3a:af:2d:ea:aa:ff:7b:
                    8c:ea:80:56:63:ef:eb:0e:d5:5c:78:91:ff:5f:50:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AD:5B:70:F8:57:99:82:D7:96:EC:58:6B:60:8D:15:F2:F5:75:A2
            X509v3 Authority Key Identifier:
                keyid:66:EA:09:80:9D:63:B0:5E:9E:D2:1D:38:6D:07:7B:26:F2:09:BA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66EA09809D63B05E9ED21D386D077B26F209BAF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGbbvoNiDiYwbyFGEwxoTiUd74GFF7sbnqrsFaDi8WY9/0/34352e362e3132382e302f32322d3234203d3e20323636313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:83:52:ba:33:cf:45:c4:f1:5c:97:20:1b:e7:ee:22:ee:30:
         74:c3:dd:0a:92:c6:17:f5:9d:d7:f2:df:61:b6:8a:ec:bb:b8:
         28:08:c2:b5:7d:8b:8f:c7:42:9a:ef:76:1c:c4:69:40:3b:51:
         7b:5a:aa:0f:31:09:d1:28:8e:5f:96:ba:da:a7:15:32:06:53:
         a8:f8:26:3f:a6:ed:a0:1c:ca:ee:86:74:cc:94:16:6a:84:12:
         d0:16:9a:60:62:65:67:63:32:9f:04:66:33:e7:4b:9d:83:84:
         9d:c1:3f:62:d5:85:b5:e6:a0:82:1f:a2:46:1d:38:7e:fb:87:
         68:13:1d:bf:7a:5f:c9:c8:eb:0f:f7:b6:e6:2f:8e:3b:58:da:
         97:67:9f:d2:86:21:40:c7:ec:60:cc:1a:fb:94:17:38:b0:3a:
         c0:db:66:e4:7d:7d:03:da:61:aa:bb:84:0a:1a:22:3e:2f:43:
         29:08:77:10:13:da:43:5a:53:6c:40:cd:35:e9:c9:f1:c5:05:
         7a:21:6c:f1:1a:69:62:a6:e3:4f:77:73:e6:01:fc:a0:89:3d:
         b8:27:05:48:69:4c:4d:ab:7d:a1:3c:ee:32:70:99:f9:f7:94:
         05:9d:2d:96:d7:e5:8e:99:17:ab:c5:ec:83:45:51:0e:b7:7d:
         68:b5:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org