Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36342e302f32332d3233203d3e20323638303036.roa
File:                     34352e3136372e36342e302f32332d3233203d3e20323638303036.roa (raw, json)
Hash identifier:          BtP5/j00bF6VZE3GHU2WaSVMBdBw/81zRSMRf8uTXFc=
Subject key identifier:   2F:16:52:60:B3:C4:0C:50:28:50:F2:B0:C5:58:84:89:1C:7A:57:C7
Certificate issuer:       /CN=4BF5B35D2D18CCAFE6BF20BA0CB468578089836F
Certificate serial:       295FF832D1418611FB16C97C5B76D650AD7F87B6
Authority key identifier: 4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36342e302f32332d3233203d3e20323638303036.roa
Signing time:             Tue 23 May 2023 12:20:45 +0000
ROA not before:           Tue 23 May 2023 12:15:45 +0000
ROA not after:            Tue 21 May 2024 12:20:45 +0000
asID:                     268006
IP address blocks:        45.167.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5f:f8:32:d1:41:86:11:fb:16:c9:7c:5b:76:d6:50:ad:7f:87:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B35D2D18CCAFE6BF20BA0CB468578089836F
        Validity
            Not Before: May 23 12:15:45 2023 GMT
            Not After : May 21 12:20:45 2024 GMT
        Subject: CN=2F165260B3C40C502850F2B0C55884891C7A57C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:64:7b:c8:09:0c:c2:c1:44:72:33:33:e6:
                    74:8a:0d:a6:50:d3:38:e1:05:31:97:b0:29:c9:f5:
                    f4:b7:65:3b:52:00:85:15:6a:2b:e1:ad:9a:da:06:
                    5d:46:76:7a:c2:bf:cc:c1:5d:b7:48:5b:45:34:c3:
                    2d:6c:4b:81:c5:88:db:f6:6c:62:67:30:0e:1d:b6:
                    62:1c:5a:63:51:7b:39:16:55:1d:4a:7c:44:a4:af:
                    f7:43:ca:de:f7:56:2b:53:37:b7:30:74:8f:da:bd:
                    da:64:9e:4e:96:7b:1a:e7:3f:f3:16:0c:20:40:15:
                    55:dc:ca:43:17:c6:77:04:d3:d7:d9:97:cc:11:e4:
                    11:96:8a:c0:65:58:45:08:7a:15:d2:2a:8a:f8:00:
                    28:95:dd:51:ed:f2:40:4b:29:65:f9:0f:1f:c0:10:
                    96:02:e1:cf:57:04:61:20:df:3e:d6:e6:65:da:26:
                    4f:4c:b7:68:5b:07:63:12:53:8c:26:9b:ad:8f:61:
                    6d:a9:c3:3a:c1:6b:e7:6f:11:fa:92:5c:28:1b:12:
                    1b:24:fa:2c:56:03:57:65:42:07:d8:09:63:09:8d:
                    b1:e7:d5:b0:40:85:bb:97:30:26:ab:b3:06:3a:e1:
                    31:26:af:9b:ef:6c:6f:1c:c8:0a:d2:d1:bb:24:da:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:52:60:B3:C4:0C:50:28:50:F2:B0:C5:58:84:89:1C:7A:57:C7
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36342e302f32332d3233203d3e20323638303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:65:12:03:17:b2:35:9b:f4:57:06:9b:73:3a:4f:73:b7:f2:
         be:b1:44:85:ff:b8:6b:5b:63:25:1c:e3:8f:9d:29:fd:55:c1:
         e5:ff:70:d5:ac:5c:10:71:2e:80:3c:86:fd:76:4f:2a:98:f5:
         1f:31:c5:f3:cc:57:5e:9d:5b:d4:2f:df:b3:be:fb:76:d7:73:
         31:dd:4d:72:46:93:9b:0d:83:ab:d6:b0:05:f8:e0:a2:df:19:
         70:c4:49:f3:7d:be:bd:71:0d:b7:41:98:72:19:c8:39:05:6f:
         35:bc:5f:21:cb:ed:4e:f6:34:39:3f:f6:13:7d:4c:3b:7a:e8:
         63:e2:db:bc:74:e4:ce:12:c6:cc:da:96:c2:52:bd:1d:d6:c5:
         15:42:68:e6:a6:be:80:f4:6c:e2:0b:93:93:2e:d2:92:c1:41:
         95:99:d8:37:ac:f2:42:65:c5:74:b2:95:7a:aa:14:64:be:25:
         08:16:02:c9:4b:09:05:6e:5d:8d:19:fd:90:8e:b4:47:90:01:
         92:ab:fc:fc:eb:dc:18:da:2b:8d:42:67:b2:ff:2a:7b:46:b1:
         4a:b3:d6:11:67:7e:be:68:f7:c1:ef:66:3a:06:75:85:d4:6c:
         2c:f8:eb:3a:16:82:a1:30:75:4e:e9:c8:04:8b:6e:0e:d1:d1:
         2c:27:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org