Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e382e302f32322d3232203d3e20323638333435.roa
File:                     34352e3233392e382e302f32322d3232203d3e20323638333435.roa (raw, json)
Hash identifier:          T6SDtGg1FMioiVAecY1UzRAeexnUhO5XsnTGDQPhvJk=
Subject key identifier:   74:AA:9D:66:FD:B7:92:A5:C7:6A:95:DE:78:0E:1E:6F:BF:89:78:8C
Certificate issuer:       /CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
Certificate serial:       1CD995E06D41A9BFB044B356D54BACACD91B25B9
Authority key identifier: C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e382e302f32322d3232203d3e20323638333435.roa
Signing time:             Tue 26 Apr 2022 14:21:06 +0000
ROA not before:           Tue 26 Apr 2022 14:16:06 +0000
ROA not after:            Tue 25 Apr 2023 14:21:06 +0000
asID:                     268345
IP address blocks:        45.239.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d9:95:e0:6d:41:a9:bf:b0:44:b3:56:d5:4b:ac:ac:d9:1b:25:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
        Validity
            Not Before: Apr 26 14:16:06 2022 GMT
            Not After : Apr 25 14:21:06 2023 GMT
        Subject: CN=74AA9D66FDB792A5C76A95DE780E1E6FBF89788C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:69:8f:91:8a:bb:30:a1:fc:d7:88:56:bf:
                    9b:0c:46:c2:ee:63:82:94:14:f1:d4:05:7f:9d:93:
                    0c:90:5a:6d:8b:5e:97:5f:5c:27:46:07:28:1c:8e:
                    c9:c8:b0:f7:5e:e3:5d:d1:ad:6c:f7:a9:4a:83:77:
                    d6:38:de:9a:f4:ce:98:2e:24:13:3a:54:00:5e:e3:
                    65:0b:3c:c4:b6:08:60:43:5b:4e:1c:ba:e8:cb:8f:
                    7c:e6:64:3d:2f:84:ed:e7:07:39:a6:9a:a1:a6:5e:
                    a8:de:fc:ac:9c:3c:7a:b4:ef:7f:61:18:2a:00:c3:
                    4c:f9:ac:34:09:01:24:fd:77:ca:fc:89:2c:aa:1d:
                    c9:e7:29:1b:28:76:8e:55:90:60:2b:3b:19:7f:e4:
                    bb:fb:56:04:20:38:f1:02:dc:81:d6:e1:ac:d5:44:
                    70:80:53:29:7d:03:44:a4:a1:85:be:e3:b2:69:c9:
                    8e:bc:8f:55:5c:d2:5c:63:5e:63:f6:d3:a3:ff:f4:
                    09:62:29:f5:41:98:e8:e4:63:62:66:93:7b:ce:98:
                    b8:d7:69:3b:2c:12:2d:95:b3:8a:f7:98:b4:e4:67:
                    30:22:63:5d:39:ac:12:9b:ad:91:1a:8d:50:5d:19:
                    31:97:9c:ed:2e:da:b2:91:74:9d:96:e3:8d:55:f1:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AA:9D:66:FD:B7:92:A5:C7:6A:95:DE:78:0E:1E:6F:BF:89:78:8C
            X509v3 Authority Key Identifier:
                keyid:C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e382e302f32322d3232203d3e20323638333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:2d:12:8a:ca:86:ce:83:5b:ba:b2:4a:e3:00:90:40:4a:b0:
         ce:46:65:5a:6e:f9:e9:bd:36:3c:a2:b8:a2:6d:95:f7:98:a5:
         b4:85:0d:05:81:9c:86:87:1f:fd:96:8d:7a:da:c8:cc:c0:22:
         e9:44:b3:a4:6d:93:10:1f:03:50:1f:1c:26:0c:f1:a0:eb:f5:
         e7:ee:25:d4:16:fb:b3:2c:39:4f:b9:bb:89:dd:6c:7f:2b:6a:
         7b:b9:8e:48:e1:c1:a5:cf:ac:12:78:ba:cd:1e:58:fe:87:12:
         c2:c6:d2:c4:fa:d5:92:d5:9e:dd:fd:ed:a9:dc:a5:47:9f:3c:
         d5:06:cc:5a:50:d7:8b:89:be:d4:ee:b0:33:aa:2f:78:70:d2:
         bb:b5:f0:04:7e:5b:ae:50:44:2b:56:bf:67:91:8a:a8:fe:5b:
         22:42:63:55:74:51:9e:ff:56:07:30:3d:c6:c1:2b:c9:26:7c:
         a2:2d:78:49:52:d0:d1:89:f5:c2:50:6b:10:ef:2d:b3:ae:8a:
         f5:ff:e3:a6:80:6c:27:de:f5:9a:38:d3:a5:48:51:b5:be:3d:
         af:26:48:c6:30:69:fe:1b:6c:fe:2e:db:c9:f4:d1:e7:b5:04:
         18:1a:94:fd:87:7a:30:6b:28:77:03:28:78:9c:8e:b4:94:f2:
         d0:18:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org