Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/34352e3233342e31392e302f32342d3234203d3e20323637333336.roa
File:                     34352e3233342e31392e302f32342d3234203d3e20323637333336.roa (raw, json)
Hash identifier:          erNlMCule+vkR/1Ii09Jv6ujnneB6ZfSgI+BsDSkBQ4=
Subject key identifier:   C2:AE:2F:77:BF:EC:87:E4:E5:3A:1F:0C:0E:FC:2F:7B:64:17:EC:9C
Certificate issuer:       /CN=B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D
Certificate serial:       722B29E11C3E72A30DAEBDA36031F15D4DE89A32
Authority key identifier: B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/34352e3233342e31392e302f32342d3234203d3e20323637333336.roa
Signing time:             Tue 18 Apr 2023 18:12:10 +0000
ROA not before:           Tue 18 Apr 2023 18:07:10 +0000
ROA not after:            Tue 16 Apr 2024 18:12:10 +0000
asID:                     267336
IP address blocks:        45.234.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2b:29:e1:1c:3e:72:a3:0d:ae:bd:a3:60:31:f1:5d:4d:e8:9a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D
        Validity
            Not Before: Apr 18 18:07:10 2023 GMT
            Not After : Apr 16 18:12:10 2024 GMT
        Subject: CN=C2AE2F77BFEC87E4E53A1F0C0EFC2F7B6417EC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:b7:05:ae:27:47:ec:92:2b:84:7e:d4:56:
                    97:6c:85:0e:d7:5e:9b:4f:66:f6:49:37:86:db:95:
                    6a:36:41:6c:23:d5:24:95:f0:1a:cf:86:1d:46:a3:
                    5f:be:59:2f:2c:67:f7:72:9f:9a:ba:72:4a:b3:de:
                    3d:63:75:96:76:99:46:21:3e:1c:5d:99:d3:6a:9e:
                    e7:c0:55:c4:22:53:35:72:bf:32:75:b0:aa:23:be:
                    6d:83:55:3b:56:f3:6f:83:4c:24:d9:f5:f9:c5:67:
                    2e:e2:a8:fd:d9:91:a6:bc:f1:e3:11:59:6f:23:b4:
                    a3:66:8b:ae:f5:80:98:18:15:f1:fb:0c:c1:84:53:
                    a6:b1:37:fc:7b:82:63:21:36:8b:cb:59:8e:ba:7c:
                    65:b6:b9:9b:a7:44:9e:bc:16:26:57:c5:57:b5:73:
                    2c:08:97:1c:f3:f8:40:75:c3:d7:b2:a1:f9:22:52:
                    fd:2c:21:7e:c9:6a:77:0c:72:db:7e:9a:9b:0b:40:
                    1c:28:0a:5f:c1:cb:aa:dc:60:06:3c:c3:82:cf:26:
                    fb:2a:a7:5d:7c:6b:e8:6b:e7:6e:74:50:97:07:e6:
                    43:57:12:8f:d4:e7:eb:46:e1:c1:7b:a5:9d:1c:fa:
                    f7:4a:2d:1d:a5:60:c3:bf:96:90:86:4f:b3:fc:14:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AE:2F:77:BF:EC:87:E4:E5:3A:1F:0C:0E:FC:2F:7B:64:17:EC:9C
            X509v3 Authority Key Identifier:
                keyid:B6:BD:74:F4:A1:DF:60:FC:C3:DB:48:67:CA:1C:E8:4E:F6:43:88:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6BD74F4A1DF60FCC3DB4867CA1CE84EF643889D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/1/34352e3233342e31392e302f32342d3234203d3e20323637333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:56:77:5c:ea:80:dd:0c:a3:ee:a9:a0:c3:55:dc:94:d6:ed:
         8d:6f:a1:cf:85:12:42:96:34:3c:87:7a:82:60:54:63:dc:3a:
         c4:ee:31:ca:52:57:57:e1:5b:5b:d1:79:53:7f:e4:9f:e7:6e:
         e3:a5:92:a8:92:a0:60:27:69:6e:2f:e3:ff:40:02:45:6d:1e:
         09:71:e2:bf:02:08:d6:5f:b4:26:7f:16:10:02:33:c0:8e:21:
         c0:5a:57:35:b3:2f:17:09:11:c4:1a:bd:72:e6:c4:a2:65:0a:
         24:2f:c2:ca:a0:99:c0:da:83:5b:26:96:40:c7:51:ce:0d:38:
         bb:c9:d3:24:91:ba:e5:2e:cc:d0:54:ca:70:3d:4f:24:84:d2:
         d7:33:92:c4:d1:d0:52:de:64:51:31:20:05:18:28:0a:e7:78:
         b1:f2:d0:a0:ce:e0:12:1d:fb:89:b5:d3:18:22:8f:0b:7e:fc:
         2a:7d:41:ec:ec:f8:54:e4:20:90:cf:99:a6:a8:52:84:eb:e5:
         33:25:71:8f:83:3e:fd:d7:2e:9f:cc:6e:16:ec:dc:2a:67:d5:
         0f:6c:39:b0:db:56:5c:95:ae:9f:36:d9:a5:39:45:31:df:83:
         cc:c6:11:2c:72:c0:1d:31:99:17:cc:9f:f4:c7:59:a6:42:1d:
         b2:9f:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org