Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa
File:                     34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa (raw, json)
Hash identifier:          kbiZkg8VtWFT1AGZzyVj6BkFdZVH22tjLURfZticmU0=
Subject key identifier:   42:2A:DF:06:CE:59:46:EE:20:2B:D7:6D:16:0A:77:32:12:3E:1F:34
Certificate issuer:       /CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
Certificate serial:       223FC6052881E9D7875DD7070D0685650DC74B5F
Authority key identifier: FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa
Signing time:             Mon 25 Sep 2023 09:24:19 +0000
ROA not before:           Mon 25 Sep 2023 09:19:19 +0000
ROA not after:            Mon 23 Sep 2024 09:24:19 +0000
asID:                     268057
IP address blocks:        45.168.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3f:c6:05:28:81:e9:d7:87:5d:d7:07:0d:06:85:65:0d:c7:4b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB
        Validity
            Not Before: Sep 25 09:19:19 2023 GMT
            Not After : Sep 23 09:24:19 2024 GMT
        Subject: CN=422ADF06CE5946EE202BD76D160A7732123E1F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:97:56:93:39:0c:36:ee:37:5e:d4:cd:b0:
                    40:68:b6:19:0c:6b:8b:a0:a3:62:e9:e7:a3:f8:c1:
                    a3:de:11:87:7a:68:03:05:80:af:4b:97:06:54:ff:
                    83:8d:1c:b0:b1:9a:90:f5:91:22:9f:ff:40:47:28:
                    04:7a:19:d3:c5:51:96:5c:13:2a:2d:fd:19:92:51:
                    89:29:6e:e0:c8:9f:10:88:43:73:f9:15:e0:93:93:
                    40:03:56:56:02:39:99:15:1e:08:66:d3:f4:51:37:
                    22:5c:8a:ff:34:0f:ed:16:f8:47:a1:ea:2c:ea:ff:
                    53:61:a7:74:50:d7:f1:65:e7:ff:a1:e0:b9:aa:45:
                    66:44:69:39:89:9c:c2:e6:b7:41:d0:8c:2a:a6:dd:
                    ff:83:18:64:74:d8:a2:8e:c8:8a:4d:e2:5f:6b:72:
                    c2:ba:17:51:ad:63:61:ff:86:ce:18:6c:16:c1:b7:
                    1e:61:6d:74:78:89:2a:f8:bd:6c:9a:a0:8e:39:94:
                    9b:f6:b9:01:c4:45:3d:26:7f:1f:32:83:d2:6e:3e:
                    47:cc:79:01:15:c0:4b:c0:0f:f8:2f:64:02:2d:6c:
                    a9:08:6b:d8:66:5b:bc:90:aa:c2:c8:0a:db:75:67:
                    54:3e:21:4d:10:57:81:c1:79:e6:c1:11:c6:92:30:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:DF:06:CE:59:46:EE:20:2B:D7:6D:16:0A:77:32:12:3E:1F:34
            X509v3 Authority Key Identifier:
                keyid:FA:32:1B:BC:67:AA:82:64:80:7B:FB:31:73:CC:E7:C3:CE:5B:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA321BBC67AA8264807BFB3173CCE7C3CE5B96AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/34352e3136382e3131302e302f32342d3234203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:01:a4:c0:32:92:5f:35:af:ad:bc:a1:cb:28:88:bf:86:e3:
         1f:e6:d7:30:e6:4d:14:f3:2f:96:e7:66:a7:74:f1:ff:ee:ec:
         db:99:a7:48:f5:44:cc:4c:1b:50:52:69:9f:45:c3:f5:2e:63:
         b4:ec:fb:75:f6:26:b1:4c:7c:8d:f2:e2:b5:62:32:8a:16:41:
         70:3b:d4:89:ae:38:d0:4b:b2:ab:72:eb:47:3a:75:23:3a:b8:
         96:08:6e:e1:58:fb:5d:c8:8e:18:49:3c:4e:fb:20:41:2d:ed:
         d2:49:b0:e3:66:4e:db:ae:33:2e:eb:e0:a2:cc:2f:a1:7f:92:
         9a:76:4b:11:58:b4:f3:8a:d6:62:70:53:a2:41:24:11:bb:61:
         dc:5b:40:76:00:2f:8c:f4:1a:fd:e4:c9:fc:8f:f0:cb:f3:1a:
         88:b4:16:d7:ca:fa:3e:a1:c8:6a:78:85:23:68:09:d1:ee:29:
         76:22:ab:a6:44:dd:e5:07:84:60:c0:b0:1c:3c:9e:88:3b:3d:
         db:f7:e7:48:64:88:71:5a:4e:0a:0d:7d:a5:d0:d7:d6:a1:b4:
         bd:75:9c:20:c9:ba:45:6c:7a:0d:d5:f5:52:6e:9d:e0:15:e5:
         51:db:15:2e:f1:d9:b3:aa:06:0f:31:b7:35:13:75:c4:81:4c:
         cb:b1:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org