Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa
File:                     34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa (raw, json)
Hash identifier:          iDG3o5rLEV7bgZtTZsvUnMI8B73Ut7JxDmkdP5uVWTs=
Subject key identifier:   64:2A:F9:CD:6E:8F:CC:B7:0F:E8:23:25:11:F7:29:E7:3C:D1:DE:6F
Certificate issuer:       /CN=C06C9A928E7DAE51A6503DDCA4B5F79752FFA942
Certificate serial:       5D679278D1E8AA8C1AD52326C0B671816FB6AFEA
Authority key identifier: C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa
Signing time:             Fri 28 Jul 2023 17:24:40 +0000
ROA not before:           Fri 28 Jul 2023 17:19:40 +0000
ROA not after:            Fri 26 Jul 2024 17:24:40 +0000
asID:                     268261
IP address blocks:        45.236.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:67:92:78:d1:e8:aa:8c:1a:d5:23:26:c0:b6:71:81:6f:b6:af:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C06C9A928E7DAE51A6503DDCA4B5F79752FFA942
        Validity
            Not Before: Jul 28 17:19:40 2023 GMT
            Not After : Jul 26 17:24:40 2024 GMT
        Subject: CN=642AF9CD6E8FCCB70FE8232511F729E73CD1DE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:de:f0:44:cd:0a:80:4b:f9:16:6f:1b:d4:
                    c0:4e:65:ce:3c:e2:cd:e6:84:26:86:05:09:3b:f8:
                    ac:9d:65:ed:11:eb:0a:3e:17:78:ec:12:04:b7:18:
                    81:3c:53:55:3c:92:04:1c:d5:52:82:b2:57:5b:db:
                    b2:43:c6:fd:4e:cf:f1:df:5b:8c:f6:75:cc:cc:e2:
                    26:06:7e:fa:f4:a7:97:2b:ec:3c:12:37:e9:8b:92:
                    f0:35:fc:42:a4:f5:f0:bd:df:ae:a2:78:82:fc:7e:
                    ce:88:7e:60:90:47:ca:67:ef:bd:46:91:fb:b1:a2:
                    a5:9f:bd:5e:7d:a4:f3:33:99:3a:90:8c:79:5e:c6:
                    22:e7:2f:0c:6f:7c:fd:0c:0f:b4:01:3e:34:3f:5c:
                    de:69:cf:e8:6f:ae:ac:3e:0b:cb:5b:2f:33:40:24:
                    16:d5:54:de:30:5e:50:85:ac:ac:39:2f:80:76:6a:
                    85:28:be:3c:e1:b1:12:77:40:85:dd:fc:ca:44:e2:
                    b2:77:f6:99:13:01:22:c7:75:fe:c2:66:fd:c3:0b:
                    f5:eb:53:72:05:34:c4:3b:6c:82:ef:96:52:cc:5b:
                    78:9d:03:84:a6:e5:be:76:5c:57:af:5a:80:78:9a:
                    a0:b0:ff:b6:51:e7:77:94:03:31:af:1d:bd:e2:b3:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2A:F9:CD:6E:8F:CC:B7:0F:E8:23:25:11:F7:29:E7:3C:D1:DE:6F
            X509v3 Authority Key Identifier:
                keyid:C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/34352e3233362e3139362e302f32332d3233203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:57:94:f6:a8:cb:02:ac:e4:91:a4:4d:8a:ba:21:63:00:
         54:18:24:c1:28:57:9f:ca:d6:96:72:88:46:51:3d:a7:37:29:
         88:4c:14:0d:de:a8:3a:b8:01:98:5d:22:d3:cc:9c:a9:78:78:
         f0:9b:4f:05:4c:6f:dc:84:28:c0:cf:d3:8b:ef:45:26:16:5e:
         b6:79:38:12:81:3e:d3:2b:52:5a:6d:81:e0:3e:51:80:54:99:
         42:da:5e:38:50:f5:f2:0c:01:3f:5e:bf:db:3e:d6:25:a0:4d:
         2a:e8:39:be:42:13:c1:d9:11:d2:db:76:4a:25:ac:d6:2f:b1:
         31:85:e6:a2:0a:81:a7:f7:57:7e:6d:2c:c8:49:c5:3a:9f:57:
         fd:38:bd:bd:bb:8d:e6:76:9a:0d:18:f0:f0:6b:8e:0f:c6:59:
         75:83:f4:e0:99:37:15:70:62:d6:e2:53:da:91:b3:4c:1c:2e:
         d6:1e:b5:26:77:ed:66:a2:0d:4f:48:2e:df:30:b0:26:09:9d:
         99:2a:6a:e8:7d:69:a9:e5:fc:3f:dc:a1:eb:f4:5a:db:6c:00:
         c9:c6:a7:39:67:0f:46:d5:fc:59:e1:56:73:2c:bf:66:e5:a0:
         40:e1:18:78:19:f1:0d:6f:c5:06:8d:37:7d:76:29:6e:fb:b4:
         24:a5:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org