Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/34352e3232362e39362e302f32322d3234203d3e20323637303230.roa
File:                     34352e3232362e39362e302f32322d3234203d3e20323637303230.roa (raw, json)
Hash identifier:          ezbdYCeAo8gWHWFDuZK84raW+e9HbzuPOJnGykeOAm8=
Subject key identifier:   06:A4:DC:1C:EF:81:61:A0:99:01:A3:F1:40:FA:D2:42:77:D3:1D:14
Certificate issuer:       /CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
Certificate serial:       0A9DF427CE81A083A3F60D22F1C8456690C827CB
Authority key identifier: CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/34352e3232362e39362e302f32322d3234203d3e20323637303230.roa
Signing time:             Thu 10 Aug 2023 21:25:17 +0000
ROA not before:           Thu 10 Aug 2023 21:20:17 +0000
ROA not after:            Thu 08 Aug 2024 21:25:17 +0000
asID:                     267020
IP address blocks:        45.226.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9d:f4:27:ce:81:a0:83:a3:f6:0d:22:f1:c8:45:66:90:c8:27:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6720E096E2B3B5875DEF1F65F6D97FBB565623
        Validity
            Not Before: Aug 10 21:20:17 2023 GMT
            Not After : Aug  8 21:25:17 2024 GMT
        Subject: CN=06A4DC1CEF8161A09901A3F140FAD24277D31D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:d7:b8:a7:aa:69:62:14:70:c2:52:25:03:
                    56:eb:59:f4:23:93:f6:49:38:46:dd:fc:d0:01:26:
                    ad:df:b6:22:d7:b4:09:e0:9f:4c:33:5b:49:1a:a1:
                    93:6f:52:d5:a0:48:46:44:1b:81:a0:6f:f7:9a:64:
                    4f:d6:1c:11:65:ca:de:40:12:79:09:25:06:c5:a6:
                    9f:1d:a1:fb:93:29:65:fe:f3:91:63:a7:d6:48:40:
                    e5:c5:d2:2f:34:68:88:31:38:46:80:c3:0c:c3:c8:
                    ad:44:ea:97:35:d0:ca:bb:60:01:6e:15:43:6b:7f:
                    cc:15:3d:d8:1a:50:df:af:dd:2c:35:21:90:7d:d8:
                    5c:fd:11:6b:3c:7d:30:d5:bc:11:0c:e8:95:83:90:
                    09:36:1c:6f:8e:a4:b9:c2:e4:9b:40:6b:f3:f2:cd:
                    cf:ee:17:9f:e1:6d:46:86:b1:3a:63:c4:47:a1:34:
                    c6:ba:e7:80:00:9a:fa:f5:c0:38:ba:42:4f:a9:54:
                    cf:c2:36:1b:75:d7:97:2e:3f:0e:13:21:27:5b:41:
                    10:9a:23:89:76:fe:bd:e1:ce:3c:ca:c9:b7:05:49:
                    92:db:e8:b7:79:7e:00:78:1c:fe:84:41:40:cc:d8:
                    f2:16:43:7b:9e:a9:94:7b:5b:6e:2e:18:f2:b6:00:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:DC:1C:EF:81:61:A0:99:01:A3:F1:40:FA:D2:42:77:D3:1D:14
            X509v3 Authority Key Identifier:
                keyid:CD:67:20:E0:96:E2:B3:B5:87:5D:EF:1F:65:F6:D9:7F:BB:56:56:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6720E096E2B3B5875DEF1F65F6D97FBB565623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/0/34352e3232362e39362e302f32322d3234203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:c0:d5:93:6f:11:0a:b7:55:20:a5:08:d4:45:9f:3d:f6:
         b8:ee:cb:55:58:8c:b3:db:84:f7:ab:45:f3:2e:03:73:9c:61:
         f8:c5:4c:be:a0:d3:6f:91:11:f6:0a:00:8f:ea:ac:e8:e5:6a:
         f6:99:b8:e3:c3:44:4e:a3:71:af:45:d5:00:9e:6d:4a:3c:82:
         cb:5b:97:87:46:2d:37:b2:90:1b:5e:cd:46:40:6a:38:a0:4a:
         ab:e8:d9:9f:d6:2d:25:e1:37:49:7a:28:bb:28:95:1a:18:f9:
         fb:53:dd:2e:4e:f0:f6:b5:b1:b6:84:b2:9b:2f:f3:bd:9d:84:
         49:b3:39:ac:9d:1b:65:be:bb:70:73:bf:79:43:e4:89:db:23:
         dc:e6:be:b0:11:78:a6:f2:fb:9f:e9:21:35:ab:8c:45:44:72:
         15:0e:9d:2f:52:de:0d:08:9e:13:30:45:ff:27:62:ed:ae:1f:
         4d:15:ff:6a:f0:19:56:ca:7a:76:10:74:e5:fc:8b:42:ce:90:
         bd:b7:72:4e:7b:fd:d6:40:ee:7d:24:87:05:5d:87:4c:19:c3:
         fb:f6:3b:9f:f7:0a:8f:5d:1a:b2:24:56:c8:ce:1f:c1:77:55:
         e7:0f:e9:9a:81:79:de:6b:56:da:0d:aa:4f:f1:d4:4c:ea:fc:
         40:ae:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org