Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32322d3234203d3e20323638303335.roa
File:                     34352e3136382e31322e302f32322d3234203d3e20323638303335.roa (raw, json)
Hash identifier:          xETQQpMcdyJJ7+w6VKU//k5TlRLxyNkPWteOuGJy17Q=
Subject key identifier:   9F:5B:FE:E5:B2:50:AF:F5:ED:73:2F:15:B4:27:C4:10:7A:E2:A9:DB
Certificate issuer:       /CN=8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6
Certificate serial:       69B7E022216617085B04A71061E2BEC0C0170564
Authority key identifier: 8F:9F:20:7F:06:04:0F:FE:6E:78:8F:B3:AC:3A:FE:C8:DD:F0:60:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32322d3234203d3e20323638303335.roa
Signing time:             Thu 27 Jan 2022 15:53:57 +0000
ROA not before:           Thu 27 Jan 2022 15:48:57 +0000
ROA not after:            Thu 26 Jan 2023 15:53:57 +0000
asID:                     268035
IP address blocks:        45.168.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b7:e0:22:21:66:17:08:5b:04:a7:10:61:e2:be:c0:c0:17:05:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6
        Validity
            Not Before: Jan 27 15:48:57 2022 GMT
            Not After : Jan 26 15:53:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:10:e2:65:ed:cf:00:ae:bd:e4:f7:6d:43:
                    6e:6a:cc:de:47:c0:63:94:65:82:38:9b:db:b0:8a:
                    69:8a:b4:68:46:3d:c2:3a:df:a6:3d:2b:d7:eb:1a:
                    91:72:d3:62:76:7e:d9:ea:e9:f1:20:65:9c:4e:33:
                    b7:d0:f7:bd:d1:71:da:d5:e7:af:b0:5f:da:ff:0d:
                    88:35:12:53:a8:3c:3a:94:72:b6:94:f1:4d:58:bf:
                    3d:e9:6f:fe:0b:41:a2:0d:5c:ec:e4:67:a7:5b:07:
                    be:80:a5:59:4d:b7:c4:e4:6a:4f:63:95:03:f5:8e:
                    0f:4c:0d:05:fa:ef:41:b0:41:d8:17:17:c9:38:93:
                    2d:0a:42:22:37:c8:a8:68:b0:be:25:cc:0a:dc:58:
                    e1:bd:a5:6e:54:aa:b7:73:34:3b:dd:0c:cf:f7:ee:
                    4f:7f:0a:dc:49:0e:66:b1:0c:19:10:a6:c7:c2:68:
                    a2:cf:c5:ce:ee:e7:2d:e4:43:75:89:3d:8c:68:69:
                    1a:bc:a4:b2:65:fc:6e:9f:cf:f4:84:3e:ae:86:40:
                    a3:04:3f:b6:57:5f:42:81:3d:06:f1:52:ff:0b:28:
                    8a:42:52:3e:d9:e7:0a:10:4e:f7:50:63:72:08:88:
                    04:ef:53:3e:b8:68:42:47:d6:6f:8d:bd:49:9e:1f:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:FE:E5:B2:50:AF:F5:ED:73:2F:15:B4:27:C4:10:7A:E2:A9:DB
            X509v3 Authority Key Identifier:
                keyid:8F:9F:20:7F:06:04:0F:FE:6E:78:8F:B3:AC:3A:FE:C8:DD:F0:60:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F9F207F06040FFE6E788FB3AC3AFEC8DDF060C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32322d3234203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:0a:82:36:43:9a:66:30:23:6a:56:44:39:14:9f:df:cf:
         b9:5c:ad:21:e5:43:37:bc:2d:d6:18:bf:6f:df:ac:4b:1e:03:
         24:35:10:1d:09:76:42:f9:4d:2b:97:cc:6c:f5:5d:dc:ce:d3:
         78:2e:f3:2d:23:6b:26:92:bc:39:11:47:85:94:58:8d:0a:fb:
         27:68:e5:b1:0d:b2:33:2c:e5:17:45:1c:cb:ef:fb:d9:7d:bd:
         8b:2f:52:d4:1b:0b:00:27:ff:b9:60:4e:37:66:a8:fe:af:3d:
         ae:33:ac:5d:64:2b:9e:88:9b:49:96:8a:76:b3:44:61:20:71:
         e9:f7:b9:ac:de:ab:4a:a0:ae:85:90:d3:08:bd:39:86:03:4f:
         fa:c4:cb:28:40:b1:25:cc:00:93:4c:b3:bc:66:41:a1:8c:e9:
         bc:f4:14:55:c6:0f:5e:81:9c:66:15:e0:6f:64:11:53:72:a6:
         88:06:9b:19:87:8d:b3:b3:dc:0e:7c:cf:f3:6f:24:bc:8e:94:
         db:a4:ea:fc:6e:75:21:b1:55:0c:0f:4d:b5:c3:fb:64:76:79:
         19:2c:df:9d:87:04:66:d6:c1:52:f7:48:25:9d:06:06:bc:22:
         00:fc:75:82:2e:df:7c:eb:91:45:7d:e8:3a:b1:65:e0:c1:16:
         f9:0d:16:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:23 2023 by rpki-client on console-fra.rpki-client.org