Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230362e302f32332d3233203d3e20323637363635.roa
File:                     34352e3232342e3230362e302f32332d3233203d3e20323637363635.roa (raw, json)
Hash identifier:          fTG7WN+YBSz6fC+jedbEwr8KiDJrsJSSGV6RKmClORk=
Subject key identifier:   A0:1E:B2:55:F1:72:AF:5E:80:97:DE:B3:C6:5F:58:3E:D2:5B:B5:71
Certificate issuer:       /CN=2ACF040B0315E2967A7D30E1A3047CCBB7A56867
Certificate serial:       51160CBD57214BEE4FA1FDBB422AD4BB76474EB1
Authority key identifier: 2A:CF:04:0B:03:15:E2:96:7A:7D:30:E1:A3:04:7C:CB:B7:A5:68:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ACF040B0315E2967A7D30E1A3047CCBB7A56867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230362e302f32332d3233203d3e20323637363635.roa
Signing time:             Mon 21 Mar 2022 19:13:00 +0000
ROA not before:           Mon 21 Mar 2022 19:08:00 +0000
ROA not after:            Mon 20 Mar 2023 19:13:00 +0000
asID:                     267665
IP address blocks:        45.224.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:16:0c:bd:57:21:4b:ee:4f:a1:fd:bb:42:2a:d4:bb:76:47:4e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACF040B0315E2967A7D30E1A3047CCBB7A56867
        Validity
            Not Before: Mar 21 19:08:00 2022 GMT
            Not After : Mar 20 19:13:00 2023 GMT
        Subject: CN=A01EB255F172AF5E8097DEB3C65F583ED25BB571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:e6:01:56:00:7e:d0:c9:ec:97:c6:1a:6a:
                    17:24:ce:56:d3:89:b9:54:f4:5c:8d:fe:79:a8:f4:
                    65:5f:5f:49:54:ec:8c:c2:72:2d:b0:c5:37:b7:dc:
                    d9:17:63:2e:bf:9b:4b:b7:9e:ad:86:e5:c0:87:2e:
                    3a:10:b1:a0:a9:b0:0c:67:2b:45:96:7c:d1:73:20:
                    c6:f3:b4:e9:eb:00:7f:04:75:ee:58:4a:2e:4c:44:
                    cd:9b:db:06:8e:1c:5c:7e:a9:aa:43:a7:fc:63:d4:
                    09:7c:f7:c0:b4:a3:e8:9f:e2:95:12:0c:ab:d2:0b:
                    d7:25:2b:de:ae:66:18:78:74:10:88:a7:ab:ec:ca:
                    f9:d1:a3:52:6d:c0:d1:8d:03:69:ca:b9:c6:24:09:
                    4e:52:15:92:e6:12:61:34:d5:ea:e4:b5:b3:d2:5b:
                    fe:e6:43:00:ba:51:02:5e:6e:10:0c:c6:3a:31:f7:
                    7a:3d:f1:c6:5a:af:50:54:3c:2a:08:ab:f8:2d:31:
                    7d:3d:22:63:bc:51:de:57:47:0b:12:bd:b7:36:22:
                    c7:9f:50:fc:32:61:47:53:e2:6c:86:46:09:29:2f:
                    84:b2:27:f2:a6:59:80:fb:63:55:b1:d7:ba:57:1d:
                    98:03:37:df:40:37:40:b1:7c:78:b5:49:b9:66:0b:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1E:B2:55:F1:72:AF:5E:80:97:DE:B3:C6:5F:58:3E:D2:5B:B5:71
            X509v3 Authority Key Identifier:
                keyid:2A:CF:04:0B:03:15:E2:96:7A:7D:30:E1:A3:04:7C:CB:B7:A5:68:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2ACF040B0315E2967A7D30E1A3047CCBB7A56867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ACF040B0315E2967A7D30E1A3047CCBB7A56867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230362e302f32332d3233203d3e20323637363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:ac:2a:38:3e:4b:f8:bb:43:b7:2d:88:f3:99:84:1e:09:4f:
         81:74:49:83:dc:b0:50:75:3b:a4:30:9b:bb:d4:bd:d0:d7:5d:
         09:5c:e7:14:e5:ac:d7:66:98:1c:1b:d9:3e:ca:cb:3e:5b:52:
         b0:39:0e:20:fa:2e:17:c8:79:4d:85:9a:8c:72:8f:7e:ca:81:
         0b:1b:bd:7c:fd:01:51:f1:b1:a1:82:43:54:9f:b5:55:9e:2f:
         89:3c:19:5e:5d:57:82:49:cb:0b:b9:21:a4:0b:93:c3:a0:4d:
         5f:e1:38:50:a6:fa:d8:62:63:cc:a9:bd:f5:c4:56:6b:2c:3b:
         c9:c1:d3:5b:92:92:bb:85:ab:4a:2c:70:5d:f4:c5:85:30:96:
         8c:b7:df:b9:8d:94:b3:34:e8:6e:0d:b5:43:5d:b6:7a:44:9c:
         6e:8b:bd:19:bb:d1:57:01:f6:5f:04:bf:42:0b:a4:3b:af:80:
         f6:62:26:49:fd:0d:80:df:e4:11:27:bb:8c:92:41:46:0b:23:
         a8:37:86:86:bf:b4:28:e8:57:0f:2f:4e:85:79:61:ea:ba:e5:
         af:80:f7:56:b9:7d:1b:7f:d0:04:23:c9:8a:8e:09:51:d1:19:
         10:36:ba:9c:76:1a:78:89:dd:24:42:9e:dc:ee:4d:52:46:c7:
         b4:7f:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org