Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa
File:                     34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa (raw, json)
Hash identifier:          8SJgQm2x5t7dQNuLROhgKN0nT+3gKwkp5sFiIiyh6/M=
Subject key identifier:   E7:F2:3D:07:6B:86:2B:84:8A:C9:72:C5:7A:45:98:0F:09:54:94:A5
Certificate issuer:       /CN=CA6B34AFB25E47173E38783782E46D43F86C4899
Certificate serial:       58F6E90D736FC6D04EBABADF7E7CC0CDEEAB3D4E
Authority key identifier: CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA6B34AFB25E47173E38783782E46D43F86C4899.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa
Signing time:             Wed 27 Dec 2023 05:15:46 +0000
ROA not before:           Wed 27 Dec 2023 05:10:46 +0000
ROA not after:            Wed 25 Dec 2024 05:15:46 +0000
asID:                     268870
IP address blocks:        45.174.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f6:e9:0d:73:6f:c6:d0:4e:ba:ba:df:7e:7c:c0:cd:ee:ab:3d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6B34AFB25E47173E38783782E46D43F86C4899
        Validity
            Not Before: Dec 27 05:10:46 2023 GMT
            Not After : Dec 25 05:15:46 2024 GMT
        Subject: CN=E7F23D076B862B848AC972C57A45980F095494A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:9b:5e:96:d9:7d:cd:1e:db:b2:0c:5f:4b:
                    6c:47:44:5b:35:19:0d:6d:cf:a6:1a:40:05:63:a3:
                    63:f8:a8:ae:2b:0e:10:2d:e9:2c:0a:27:9c:5b:ce:
                    f2:23:f0:7d:31:ac:96:54:31:c4:59:cb:c1:bc:34:
                    0b:e8:aa:66:e2:cf:22:f7:a3:a9:18:7d:33:e8:9b:
                    09:a2:56:17:53:ed:6d:91:71:40:09:d4:9f:21:e9:
                    18:cf:e3:4d:42:1e:99:ba:5a:18:cf:2a:0f:47:6d:
                    57:a1:27:00:b2:d9:ab:e1:1f:54:3d:6c:19:d0:f3:
                    b8:b1:ce:8f:93:b0:bb:f3:fa:6c:88:85:41:d1:22:
                    7d:b3:28:54:72:ea:73:72:d3:a8:76:cb:cf:8a:bf:
                    15:56:0c:b7:71:a2:e3:cf:cb:0e:22:48:14:8e:1f:
                    2d:a0:ba:c0:59:5a:53:66:a8:28:42:fd:83:04:5d:
                    1c:bb:dd:1b:d0:9a:89:56:02:86:a9:6f:2a:58:93:
                    df:22:65:d0:2b:30:23:03:79:57:f1:e1:4e:89:4c:
                    a5:1e:d4:ac:a5:a6:14:2f:23:27:cd:d5:c6:1f:2a:
                    e2:e2:c9:d1:12:62:a9:a5:bb:fe:11:1b:c7:f3:87:
                    09:9f:93:9a:d1:64:08:45:5c:83:e5:73:f2:ec:fa:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F2:3D:07:6B:86:2B:84:8A:C9:72:C5:7A:45:98:0F:09:54:94:A5
            X509v3 Authority Key Identifier:
                keyid:CA:6B:34:AF:B2:5E:47:17:3E:38:78:37:82:E4:6D:43:F8:6C:48:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/CA6B34AFB25E47173E38783782E46D43F86C4899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA6B34AFB25E47173E38783782E46D43F86C4899.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/0/34352e3137342e3138342e302f32322d3234203d3e20323638383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:29:22:34:3b:1d:23:01:22:83:ac:67:d8:66:32:b1:3d:8d:
         d5:a1:78:b4:24:f4:33:ca:61:f7:45:c3:24:9c:9a:81:1c:be:
         c2:14:e9:b4:86:ef:7b:df:df:e3:ab:54:d2:2e:0f:6a:aa:a2:
         91:82:a4:73:e5:d0:7e:24:17:6f:76:41:ee:74:7d:fb:4b:99:
         07:51:a5:d2:ae:63:b5:16:1a:13:5e:9f:fe:16:50:aa:a3:c2:
         57:7f:9d:ce:b2:62:3b:aa:af:ef:8b:03:18:1a:31:5a:ef:23:
         73:3a:13:bd:7c:e8:7c:73:34:b5:b7:e3:ac:a8:72:74:dc:e9:
         35:3a:20:64:89:cd:fe:b4:f0:38:02:f0:19:14:04:f5:36:7c:
         e7:b2:21:0d:13:8e:c3:8f:0f:27:34:f3:3b:34:a9:ff:93:93:
         11:0f:5f:26:e4:70:de:78:2a:56:7b:2b:c2:ad:bf:cc:01:78:
         bc:95:17:1b:3a:ea:b6:4e:6b:19:19:6d:6a:0c:19:5a:c9:0f:
         ab:f5:77:ee:26:60:4e:29:36:0f:77:e8:ae:98:05:a7:fb:6f:
         c0:a9:28:ca:b9:39:dc:c4:53:7b:0b:5c:0e:ef:09:97:88:e4:
         9d:35:5d:42:c0:31:fb:b5:9c:06:e9:ee:f0:9a:c6:c3:69:45:
         46:89:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org