Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32332d3233203d3e20323638373236.roa
File:                     34352e3137312e3138362e302f32332d3233203d3e20323638373236.roa (raw, json)
Hash identifier:          nvMYLvUh9Flf6buX0ReW9ip6+ref201/wiJreWitKWs=
Subject key identifier:   50:29:83:B0:5F:61:0A:31:12:F8:85:D2:21:F0:C8:FC:58:39:9C:00
Certificate issuer:       /CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
Certificate serial:       31FE8221C38F65370A612C5AB4F3E6ACB74834D2
Authority key identifier: C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32332d3233203d3e20323638373236.roa
Signing time:             Wed 03 Apr 2024 13:30:56 +0000
ROA not before:           Wed 03 Apr 2024 13:25:56 +0000
ROA not after:            Wed 02 Apr 2025 13:30:56 +0000
asID:                     268726
IP address blocks:        45.171.186.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fe:82:21:c3:8f:65:37:0a:61:2c:5a:b4:f3:e6:ac:b7:48:34:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A2521E13521DFA520C40EC85BF7155050CA33B
        Validity
            Not Before: Apr  3 13:25:56 2024 GMT
            Not After : Apr  2 13:30:56 2025 GMT
        Subject: CN=502983B05F610A3112F885D221F0C8FC58399C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:21:5e:4e:f2:56:34:11:cf:ae:17:2f:e5:
                    e2:1e:e0:d3:09:a5:84:26:cc:c3:dc:48:7a:b0:60:
                    e0:6c:b4:8f:fd:e4:b7:a9:73:e4:22:36:bc:51:a9:
                    b8:32:cd:c7:04:97:71:84:63:b9:33:db:a4:06:d4:
                    1d:15:0c:02:a0:96:c8:20:5f:17:76:13:2b:6f:98:
                    2b:52:7d:c5:86:0b:28:00:b3:8e:67:c6:12:84:3e:
                    7c:e1:0d:81:49:e7:2b:08:04:b5:bc:68:00:a9:77:
                    8e:38:95:b5:47:c3:c5:b5:c5:b6:57:b2:6b:e3:d3:
                    42:84:d8:93:1d:65:c3:92:6d:f4:b8:5f:fe:de:72:
                    2f:d9:bc:8a:dd:7b:72:58:98:a1:26:a0:e4:ae:db:
                    4a:3b:b0:a5:91:a4:8d:e0:4b:ee:25:4f:e6:6e:04:
                    bd:a2:6a:e5:92:90:39:af:d8:b5:ea:b4:43:99:cf:
                    f8:86:c4:dd:25:5a:15:cf:c8:ab:d9:53:ca:de:bd:
                    77:cc:20:30:41:e8:5e:c4:dc:ca:fe:4b:36:30:90:
                    8c:d1:69:32:fb:50:d1:c9:37:31:89:7c:13:82:d9:
                    1d:a7:91:54:06:33:da:55:02:de:98:6f:78:e5:5c:
                    0c:28:d6:81:c2:c8:14:c8:f2:96:d4:e2:37:e6:e3:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:29:83:B0:5F:61:0A:31:12:F8:85:D2:21:F0:C8:FC:58:39:9C:00
            X509v3 Authority Key Identifier:
                keyid:C6:A2:52:1E:13:52:1D:FA:52:0C:40:EC:85:BF:71:55:05:0C:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6A2521E13521DFA520C40EC85BF7155050CA33B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/34352e3137312e3138362e302f32332d3233203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:c2:f0:b2:21:db:5c:ce:bd:fa:1b:24:a1:b7:97:8b:d7:
         92:a5:d3:2e:58:19:dc:6c:11:22:c5:66:df:ba:3b:c9:30:cc:
         7d:7f:22:3a:04:7e:9a:19:25:b7:ae:8e:f0:7a:ab:55:7a:ba:
         a2:7d:3a:ff:6c:f1:ab:7a:2f:cd:a1:05:a6:9c:af:40:c3:c0:
         69:39:57:70:86:a0:cd:7b:67:56:b8:53:6a:c7:76:b1:8a:d3:
         c8:55:93:eb:1d:30:1e:cc:c5:cc:17:7c:cc:cf:62:21:55:3b:
         84:a6:a5:9e:53:59:21:fd:2e:7b:a2:59:a9:07:a3:9e:34:bd:
         62:24:9e:22:82:c5:0c:55:ba:51:56:f6:75:b2:cd:4d:5f:a6:
         e8:1d:2b:ac:2d:f2:d6:6f:f3:4e:ad:a1:00:e5:8a:86:4b:ea:
         d8:d2:61:76:ca:d3:25:1c:64:69:b1:27:1e:39:8a:d0:cb:65:
         ee:0d:ca:d4:45:b7:79:f7:57:ab:c3:a8:71:67:31:34:82:50:
         97:6e:9c:cd:06:8d:32:c2:38:73:87:35:03:b1:c3:99:ff:ad:
         0e:7b:ee:8a:0b:32:bd:5f:71:30:ec:6b:16:d3:cd:a8:4e:47:
         34:4e:69:02:d8:bf:ac:6a:12:18:22:10:ae:4c:1d:ca:8e:23:
         ad:af:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org