Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32332d3234203d3e20323639343434.roa
File:                     34352e3138362e3136342e302f32332d3234203d3e20323639343434.roa (raw, json)
Hash identifier:          YdiSG4SRcnaUyxxHSR1ShbMXpYE1zl4xWyZiWIdHsh4=
Subject key identifier:   9A:6E:56:2A:3B:CF:7B:AE:B8:5A:9F:F1:E1:68:3B:87:14:7E:0A:F4
Certificate issuer:       /CN=0A57E22B5DA2126C6212C06A47BFC5022500D7AA
Certificate serial:       25A62B0F86DFD0785CE5DA20526151D8D11A0986
Authority key identifier: 0A:57:E2:2B:5D:A2:12:6C:62:12:C0:6A:47:BF:C5:02:25:00:D7:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A57E22B5DA2126C6212C06A47BFC5022500D7AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32332d3234203d3e20323639343434.roa
Signing time:             Wed 18 Jan 2023 18:59:43 +0000
ROA not before:           Wed 18 Jan 2023 18:54:43 +0000
ROA not after:            Wed 17 Jan 2024 18:59:43 +0000
asID:                     269444
IP address blocks:        45.186.164.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a6:2b:0f:86:df:d0:78:5c:e5:da:20:52:61:51:d8:d1:1a:09:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A57E22B5DA2126C6212C06A47BFC5022500D7AA
        Validity
            Not Before: Jan 18 18:54:43 2023 GMT
            Not After : Jan 17 18:59:43 2024 GMT
        Subject: CN=9A6E562A3BCF7BAEB85A9FF1E1683B87147E0AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:15:12:e0:3a:b9:6b:9e:c5:44:7f:93:26:
                    43:d9:fb:88:0c:21:91:c1:1a:a9:4e:70:79:bc:de:
                    62:a1:f7:50:c5:bc:f1:60:a8:6f:a3:87:a4:09:db:
                    79:77:3f:fd:b9:44:28:5b:ed:29:98:84:4c:46:5a:
                    42:a6:7c:d2:15:a4:68:02:ea:af:55:39:f3:be:c3:
                    eb:96:bf:3b:79:02:98:b2:df:cb:33:3b:d8:96:53:
                    c4:35:16:aa:2a:c5:b9:a7:d3:74:b2:cf:08:45:8c:
                    4f:c8:64:ff:4d:18:f1:3b:07:5a:be:cb:2e:b5:6d:
                    f3:fa:13:2c:04:bc:13:f1:8f:03:4b:c5:de:61:bb:
                    fe:58:8c:e8:63:ca:41:ae:82:c2:ff:00:41:df:e1:
                    b6:76:ae:f1:13:21:f7:ab:0d:ee:c1:ae:12:6b:67:
                    c3:7e:33:84:f5:84:e8:d0:b8:cf:a7:73:1e:35:0b:
                    9a:f0:52:68:71:dd:83:e8:93:20:52:93:94:4b:f0:
                    61:ad:09:2b:b9:4f:7f:78:98:9b:1b:13:91:e4:f1:
                    c4:43:8a:8a:19:a0:d6:dc:0e:09:8b:a5:74:02:67:
                    2d:d3:13:6f:62:c8:6d:a3:cc:e7:47:fe:62:71:f2:
                    a7:d3:76:36:1a:2b:eb:98:e9:d9:41:6d:f8:08:a5:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6E:56:2A:3B:CF:7B:AE:B8:5A:9F:F1:E1:68:3B:87:14:7E:0A:F4
            X509v3 Authority Key Identifier:
                keyid:0A:57:E2:2B:5D:A2:12:6C:62:12:C0:6A:47:BF:C5:02:25:00:D7:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/0A57E22B5DA2126C6212C06A47BFC5022500D7AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A57E22B5DA2126C6212C06A47BFC5022500D7AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/34352e3138362e3136342e302f32332d3234203d3e20323639343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:e3:47:9a:69:53:d4:63:89:e6:e0:5e:a1:da:93:a4:8d:
         cf:79:53:c6:64:7b:40:f8:96:e3:91:2f:6b:34:b4:ff:00:38:
         2b:d8:12:d4:56:4e:f5:41:3f:8e:42:bd:53:37:e3:32:99:7b:
         41:9c:d8:a9:1d:d5:53:a6:68:4e:16:47:cf:03:23:9f:11:fc:
         87:b9:72:a7:be:69:1f:e1:bb:be:7c:2a:7b:58:5f:40:fb:aa:
         f8:b7:83:88:1d:40:da:a1:21:68:47:21:d5:43:63:5a:1e:b4:
         43:4c:48:00:90:1d:ff:63:71:86:34:05:4a:6c:9e:55:c4:36:
         07:f0:8b:43:8d:4f:c6:e3:c8:0b:f0:5f:bb:b9:c7:47:fa:b4:
         36:96:c8:aa:a5:3c:ca:2f:89:7b:eb:22:59:3a:de:f0:12:30:
         43:ff:98:99:3b:b0:64:e8:aa:ec:9d:b9:e5:07:7a:f9:20:85:
         67:b1:3b:1c:a9:1c:77:a4:0d:80:93:47:bd:0b:af:2c:92:8c:
         8f:4e:0e:a7:e8:d7:38:b4:d9:06:4c:a2:5b:11:9c:23:4a:a3:
         d0:c6:98:83:5a:85:20:e5:e3:70:bc:e2:02:94:d8:0d:99:2b:
         c3:37:cf:96:6b:54:2d:a6:61:eb:18:5c:af:8b:83:b5:ec:d1:
         83:c6:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org