Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e382e302f32332d3233203d3e20323638333435.roa
File:                     34352e3233392e382e302f32332d3233203d3e20323638333435.roa (raw, json)
Hash identifier:          NArMvCMOQsbMVU9bX81jqy+199+TVv87/pMTF4CoEiE=
Subject key identifier:   F0:FA:EF:98:2E:11:87:7B:BE:5C:36:97:65:6D:B6:AF:F8:DE:B0:5A
Certificate issuer:       /CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
Certificate serial:       35E9A6EF19A0C92C95472A0DAAB78521B88DFD30
Authority key identifier: C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e382e302f32332d3233203d3e20323638333435.roa
Signing time:             Tue 26 Apr 2022 14:21:06 +0000
ROA not before:           Tue 26 Apr 2022 14:16:06 +0000
ROA not after:            Tue 25 Apr 2023 14:21:06 +0000
asID:                     268345
IP address blocks:        45.239.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e9:a6:ef:19:a0:c9:2c:95:47:2a:0d:aa:b7:85:21:b8:8d:fd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6066122620E9E1661EF8B90823AF6D16CD7DA98
        Validity
            Not Before: Apr 26 14:16:06 2022 GMT
            Not After : Apr 25 14:21:06 2023 GMT
        Subject: CN=F0FAEF982E11877BBE5C3697656DB6AFF8DEB05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:54:57:5a:2e:c5:e4:5a:ce:59:3d:00:2c:
                    f4:f4:4f:ca:38:b1:a9:72:e2:f1:69:eb:43:09:b3:
                    87:49:f4:f2:a2:19:b6:38:f0:5d:3d:80:78:b5:8f:
                    bd:24:2e:44:d0:d0:fa:0d:61:71:98:b9:2e:19:b2:
                    a5:de:4e:cb:7b:be:f1:b8:a4:fd:5b:00:a2:88:f6:
                    2c:75:ed:c6:d1:09:a6:62:75:ea:f9:df:e9:2d:b4:
                    f6:5b:91:98:a1:de:f4:a0:c2:2e:93:0d:d3:c6:5c:
                    6d:26:73:74:6f:54:9d:0b:9e:9b:43:51:57:ff:d3:
                    d1:18:94:c8:bf:e3:fc:8a:6e:ba:5d:d2:83:f4:b9:
                    cf:7a:1a:26:76:c7:c2:35:43:51:e3:ae:52:4c:23:
                    cf:1d:7f:53:92:e3:07:7e:a7:e2:94:97:6e:b4:16:
                    da:62:ba:5f:93:7f:41:1a:42:1e:14:a1:c7:d5:6e:
                    72:59:26:76:51:40:99:cc:54:05:97:c8:26:2a:3f:
                    1f:b7:74:96:b4:0a:7f:69:ad:b5:4c:e3:b8:3a:5e:
                    86:de:c3:f1:d7:3b:89:72:9e:57:03:5a:d1:9e:c2:
                    cf:ea:18:21:46:00:1d:f2:3f:b1:c2:e3:ad:1e:d7:
                    88:12:9f:aa:f9:f6:73:85:ef:8c:51:4a:fa:7d:72:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FA:EF:98:2E:11:87:7B:BE:5C:36:97:65:6D:B6:AF:F8:DE:B0:5A
            X509v3 Authority Key Identifier:
                keyid:C6:06:61:22:62:0E:9E:16:61:EF:8B:90:82:3A:F6:D1:6C:D7:DA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C6066122620E9E1661EF8B90823AF6D16CD7DA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZkQUqCdUDHhRqJGXsJPvv2i2Qaz6yMUKCh3TcWg9KE9/0/34352e3233392e382e302f32332d3233203d3e20323638333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:85:12:50:87:fb:0a:c3:7e:28:04:2d:78:4e:e8:f6:5a:a3:
         21:87:64:6e:87:33:41:55:fa:ee:4e:54:78:da:91:d0:ee:31:
         24:d5:21:c9:ab:88:c3:7a:60:98:9b:5f:6d:8b:f4:f0:ab:ab:
         57:8a:80:a9:47:23:10:a0:96:44:b3:5d:60:b3:ab:f1:80:62:
         b8:5f:3b:f0:29:29:e4:fe:34:b7:68:d6:c5:0d:04:59:4c:69:
         87:c5:8e:22:70:3d:30:24:66:31:93:83:c5:1c:51:48:18:89:
         7d:7b:5c:f6:de:23:ae:4f:06:95:32:59:50:aa:4d:1c:db:f7:
         50:1e:21:b9:91:fa:13:42:4c:60:fa:1e:d7:b2:8a:cd:7f:99:
         37:de:bb:82:d1:60:06:36:23:51:08:b1:8c:51:c3:cb:c8:2b:
         b8:7a:17:a4:1d:a3:76:3e:01:08:2c:3c:66:d3:d9:11:09:85:
         e9:0e:45:70:40:62:01:97:ac:09:fc:a1:32:8a:e5:54:f0:7e:
         c0:2d:68:f9:0b:cc:65:4b:c8:ca:06:f9:70:1f:5a:22:c1:8b:
         8c:7b:ee:2f:45:2f:c0:da:58:cb:cc:3e:3b:d0:2c:89:6b:14:
         2a:23:83:0e:61:6f:1f:50:8d:11:f5:25:09:8b:16:58:61:8c:
         86:d4:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org