Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/0/34352e3138362e35362e302f32322d3332203d3e20323639343132.roa
File:                     34352e3138362e35362e302f32322d3332203d3e20323639343132.roa (raw, json)
Hash identifier:          /M383+qJBXa/mvBfAc9jL6JQApCZxDHAMWiTghgNNFg=
Subject key identifier:   75:70:B9:B5:32:A9:89:79:82:BC:36:11:43:FD:EA:61:07:6D:70:8C
Certificate issuer:       /CN=38EEDC1317812A986BA8575388484225E20BDA35
Certificate serial:       6D0F07C53B99399ED23BD4CD414FC8564C48FE24
Authority key identifier: 38:EE:DC:13:17:81:2A:98:6B:A8:57:53:88:48:42:25:E2:0B:DA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38EEDC1317812A986BA8575388484225E20BDA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/0/34352e3138362e35362e302f32322d3332203d3e20323639343132.roa
Signing time:             Mon 01 Jan 2024 14:39:54 +0000
ROA not before:           Mon 01 Jan 2024 14:34:54 +0000
ROA not after:            Mon 30 Dec 2024 14:39:54 +0000
asID:                     269412
IP address blocks:        45.186.56.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0f:07:c5:3b:99:39:9e:d2:3b:d4:cd:41:4f:c8:56:4c:48:fe:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EEDC1317812A986BA8575388484225E20BDA35
        Validity
            Not Before: Jan  1 14:34:54 2024 GMT
            Not After : Dec 30 14:39:54 2024 GMT
        Subject: CN=7570B9B532A9897982BC361143FDEA61076D708C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:19:35:37:28:f6:3d:e2:b4:00:70:9d:5c:
                    84:ea:73:49:b8:3c:f9:4b:bd:27:cc:ed:b9:e8:bf:
                    b5:1e:0c:d7:f1:b0:29:14:f5:ca:19:13:7c:17:3b:
                    e0:9f:f5:44:7d:1a:d1:b9:93:cd:d9:7f:d3:e8:b8:
                    dc:5f:5f:f7:d0:85:2a:b0:92:bc:a5:88:63:13:5b:
                    bc:d2:d5:8e:6f:96:c7:8a:b8:97:44:cb:3e:47:b3:
                    1d:5e:31:d6:64:01:58:d5:df:2d:20:1c:23:0b:d1:
                    fd:53:87:14:c7:54:ce:b8:8a:32:42:d5:3c:12:d3:
                    8a:5c:6c:90:05:1b:27:75:a8:c1:72:94:6a:1b:54:
                    b5:8d:b1:fe:f0:14:94:c9:15:f5:9e:e4:a5:36:f8:
                    05:28:c1:bb:ee:1f:49:68:2f:78:4c:ab:0a:f0:1b:
                    4f:b6:ee:5d:0c:97:b5:a4:ad:fd:e0:ff:ee:2b:c0:
                    e6:66:86:25:49:c2:a7:90:f1:38:7f:c0:84:c1:63:
                    1c:97:f8:4e:63:aa:6e:d3:bd:d8:e0:c0:58:0b:b4:
                    48:3f:00:0e:50:0f:5a:32:75:e5:ea:f3:ca:04:c4:
                    78:11:02:2a:2e:6b:8b:49:09:12:eb:96:10:97:12:
                    6d:ef:ef:8b:36:7a:f1:8a:b4:65:15:9b:03:3e:b4:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:70:B9:B5:32:A9:89:79:82:BC:36:11:43:FD:EA:61:07:6D:70:8C
            X509v3 Authority Key Identifier:
                keyid:38:EE:DC:13:17:81:2A:98:6B:A8:57:53:88:48:42:25:E2:0B:DA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/0/38EEDC1317812A986BA8575388484225E20BDA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38EEDC1317812A986BA8575388484225E20BDA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYWeTkrWwop1Lb4DYP6kUmeVkrwWdHXnQ4vmC2Ft3a1t/0/34352e3138362e35362e302f32322d3332203d3e20323639343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:99:c5:9a:2a:52:40:a2:6c:0e:c3:06:b8:c5:1b:82:a8:83:
         11:f4:a6:a3:bc:3b:4c:7a:81:fa:39:50:de:bc:8a:5b:5e:96:
         25:fe:e6:1e:c3:10:ce:7b:3e:aa:5f:22:06:83:93:9b:76:cd:
         99:bc:cf:c9:eb:cd:9e:01:0c:58:5c:74:42:3e:55:ff:83:62:
         8b:50:c6:e6:45:74:a5:e7:d0:03:a6:60:f2:45:5a:48:93:29:
         ab:00:c0:d7:3a:d1:1b:e4:34:b4:48:25:0f:8f:41:76:af:de:
         0e:bc:8c:3a:19:5e:e1:5d:f3:9c:77:58:33:55:33:34:61:9b:
         f2:1d:92:56:48:75:da:0a:15:8d:a8:e1:7d:1d:b8:d0:ae:25:
         0f:69:0e:02:da:c0:c1:b0:02:76:0e:08:04:55:01:38:d4:25:
         77:75:c7:c3:ce:e8:e2:70:3a:a6:f1:be:ef:d7:35:8e:0f:7b:
         c9:91:af:b4:0e:8e:23:4a:51:71:6a:e2:47:78:c3:8a:69:c0:
         38:0b:f2:6f:07:80:f2:52:71:11:4c:5b:f7:ac:18:bd:13:54:
         14:a9:b8:26:a8:52:a8:73:91:b7:61:3c:c4:8d:b9:fc:87:fa:
         f9:cf:2c:57:56:6e:08:0e:d6:fa:90:12:37:70:25:e3:98:49:
         ba:19:10:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org