Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e31312e302f32342d3234203d3e20323638333435.roa
File:                     34352e3233392e31312e302f32342d3234203d3e20323638333435.roa (raw, json)
Hash identifier:          +VK+CobwSLoDpJ1niUkW8Ta5jEfxQ/zOmyWxrn7zKEk=
Subject key identifier:   2A:43:17:C2:7D:B0:70:01:51:30:FC:A8:E7:F5:D0:B3:46:70:10:1E
Certificate issuer:       /CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
Certificate serial:       664FB23487F87B1C2C71925227E51C5D1C589D35
Authority key identifier: C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e31312e302f32342d3234203d3e20323638333435.roa
Signing time:             Tue 26 Apr 2022 14:21:06 +0000
ROA not before:           Tue 26 Apr 2022 14:16:06 +0000
ROA not after:            Tue 25 Apr 2023 14:21:06 +0000
asID:                     268345
IP address blocks:        45.239.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4f:b2:34:87:f8:7b:1c:2c:71:92:52:27:e5:1c:5d:1c:58:9d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
        Validity
            Not Before: Apr 26 14:16:06 2022 GMT
            Not After : Apr 25 14:21:06 2023 GMT
        Subject: CN=2A4317C27DB070015130FCA8E7F5D0B34670101E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3d:a6:dd:4d:16:7d:c4:07:84:dd:c5:73:24:
                    5e:37:6c:48:6d:d3:65:2b:a0:f6:e2:81:2c:0e:b5:
                    66:e2:b1:27:67:56:7e:08:67:6b:ac:03:7b:08:b8:
                    45:bc:7d:f7:b9:6f:8f:d4:aa:c6:4c:1a:2b:28:48:
                    7c:6d:fe:cd:b9:6b:c1:4b:3e:fd:36:da:65:6f:2a:
                    03:7d:4a:7d:b2:94:c8:39:14:88:34:68:1b:f7:5d:
                    1e:f0:2a:d7:65:77:9b:c9:f5:8d:46:be:d1:e1:6f:
                    71:63:74:64:0a:4f:bc:04:e5:ab:b6:be:65:c7:74:
                    34:81:a3:3f:cc:3b:b3:e4:bd:88:bb:17:8a:be:ad:
                    1a:63:a1:98:1d:c1:c8:4c:fc:a0:e1:d6:e0:1c:8d:
                    92:14:51:3b:0d:e2:f7:ce:eb:a5:9e:90:63:b6:9f:
                    49:c8:cd:cc:00:04:f8:61:40:c3:29:d2:c5:45:c5:
                    8b:8f:74:12:4b:6f:dc:4e:57:d8:ce:c7:0d:47:ec:
                    ed:c3:f8:cb:5c:33:b3:89:a4:1d:13:f2:db:1e:99:
                    30:3f:b9:8c:3b:7c:63:35:81:cd:2c:40:c6:c3:16:
                    47:5a:43:48:c8:79:04:cc:1a:68:dc:1d:eb:71:9c:
                    d1:d2:8f:15:d0:45:d5:fe:b2:8c:70:07:f3:c1:97:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:43:17:C2:7D:B0:70:01:51:30:FC:A8:E7:F5:D0:B3:46:70:10:1E
            X509v3 Authority Key Identifier:
                keyid:C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e31312e302f32342d3234203d3e20323638333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:d6:4a:8f:ee:84:3b:c8:de:28:d2:15:1b:1b:bc:f6:5f:
         cd:c4:ca:44:dd:82:64:b4:2c:ea:30:f1:24:fa:38:3d:39:29:
         9d:3f:30:a9:5f:5f:9d:48:71:0a:b9:ff:7d:72:0e:65:53:0c:
         01:a5:6e:3c:61:11:8b:47:45:80:c1:67:50:fc:62:e4:58:bb:
         5d:87:b6:50:2c:9f:fa:91:8f:e7:1c:e4:d5:8b:ee:79:ef:91:
         10:fe:2d:55:89:3c:0b:7a:f7:50:ac:69:75:5e:e5:32:98:a2:
         fd:f8:8c:45:49:de:b5:9f:20:e0:a2:55:18:3e:df:d4:50:16:
         25:df:69:00:2f:84:82:4d:fb:93:18:fc:c5:eb:8f:54:62:3d:
         16:ba:a2:3e:68:ee:43:0c:db:d7:24:f1:42:6b:76:9d:f8:b0:
         b7:75:9a:f7:80:2d:ae:1f:0d:a7:fc:db:cb:39:f9:ff:37:c1:
         57:ff:68:ed:86:de:b4:57:98:6c:13:b3:d7:a9:f6:83:de:2f:
         8e:03:71:ab:33:e0:ad:6e:2c:f8:49:0e:d4:e7:48:9b:a1:51:
         e5:3c:d2:8c:ae:ee:7a:7a:49:71:3c:00:53:57:c1:a1:60:3d:
         f4:23:38:4d:c0:20:88:4f:31:26:1f:01:02:ad:03:df:af:45:
         a6:df:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org