Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36362e302f32342d3234203d3e20323638303036.roa
File:                     34352e3136372e36362e302f32342d3234203d3e20323638303036.roa (raw, json)
Hash identifier:          GZg0HXhscfK+P2eCNOUPtw0knP8tLnqRdsIALmMuVDc=
Subject key identifier:   69:68:EF:39:18:7C:69:36:B9:EF:4A:CF:56:21:5C:BA:53:CE:7C:BF
Certificate issuer:       /CN=4BF5B35D2D18CCAFE6BF20BA0CB468578089836F
Certificate serial:       292B52559B16BA1AB1B7F54A508A7CF01671EAA9
Authority key identifier: 4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36362e302f32342d3234203d3e20323638303036.roa
Signing time:             Tue 23 May 2023 12:20:45 +0000
ROA not before:           Tue 23 May 2023 12:15:45 +0000
ROA not after:            Tue 21 May 2024 12:20:45 +0000
asID:                     268006
IP address blocks:        45.167.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2b:52:55:9b:16:ba:1a:b1:b7:f5:4a:50:8a:7c:f0:16:71:ea:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B35D2D18CCAFE6BF20BA0CB468578089836F
        Validity
            Not Before: May 23 12:15:45 2023 GMT
            Not After : May 21 12:20:45 2024 GMT
        Subject: CN=6968EF39187C6936B9EF4ACF56215CBA53CE7CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:f5:52:37:7f:93:b0:cc:1d:77:a8:20:d3:
                    8c:ed:d5:db:40:af:0b:66:0b:58:f7:e5:28:b6:27:
                    6d:be:3b:a9:77:5b:b7:17:16:c5:a7:09:95:9d:61:
                    ab:e7:9f:fd:7f:4f:99:c4:ac:13:3c:99:49:49:d2:
                    7e:cb:ca:4e:7c:77:64:ff:3b:e2:af:2d:89:db:35:
                    44:68:dd:49:a5:aa:be:40:13:58:55:72:9b:1c:ca:
                    3f:fe:a0:fe:83:de:47:36:60:ed:d5:a1:9c:31:d7:
                    83:6f:d9:46:29:7b:a5:7d:e1:d1:0c:c1:d6:5e:e4:
                    d5:23:29:d9:60:01:17:27:64:82:6f:d9:29:0e:1f:
                    73:fa:22:c8:79:56:04:89:90:90:91:3e:93:29:1a:
                    66:2e:b6:a0:37:7c:0b:54:5b:17:9a:6d:e6:af:a3:
                    6b:74:85:25:10:cc:06:0c:17:24:14:3f:83:1d:55:
                    fb:32:62:55:f9:90:ac:86:1e:2e:ae:4c:a8:58:b8:
                    ca:08:74:d3:9a:05:4a:81:85:02:81:cc:1c:56:af:
                    bf:e2:c1:8e:36:b5:7a:e8:02:d5:e8:c1:e6:a3:bf:
                    da:b4:5d:89:d1:68:18:bf:19:36:ec:11:2d:f6:34:
                    ad:f0:2b:ec:19:59:cb:d5:f4:e5:59:90:f7:89:f2:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:68:EF:39:18:7C:69:36:B9:EF:4A:CF:56:21:5C:BA:53:CE:7C:BF
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B3:5D:2D:18:CC:AF:E6:BF:20:BA:0C:B4:68:57:80:89:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BF5B35D2D18CCAFE6BF20BA0CB468578089836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HggQ2JUt5Ad8Dztsu5fHQqP1vWTQSGfEo4mLAWygdvEW/0/34352e3136372e36362e302f32342d3234203d3e20323638303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:b7:b8:74:78:f3:fa:82:e3:0d:3d:1c:78:ea:ac:86:92:bd:
         2d:15:8e:15:25:95:93:70:ae:12:bd:a0:64:5d:d3:65:b2:61:
         77:56:eb:2e:11:55:d9:28:c3:8f:9e:d8:78:25:fa:42:49:08:
         6b:2e:56:14:c9:ef:6b:d7:33:5b:61:08:2c:8e:43:40:aa:7c:
         0d:75:0d:8b:d4:ea:cd:29:5b:c7:2f:4e:91:c9:ae:cd:bf:cc:
         8b:39:1c:fa:09:f9:33:66:2a:e3:c4:de:a6:7e:04:da:93:62:
         bb:05:f0:be:ef:f0:c4:54:80:ed:58:7e:fd:ad:f1:8a:27:14:
         b1:26:03:7c:3d:4a:6a:10:7d:0a:28:e5:b0:a6:2d:cd:d7:a1:
         96:60:2d:c6:c2:2b:f7:15:61:16:2a:3a:ef:7b:bb:c5:9c:64:
         dc:8b:71:40:ef:22:57:ab:a0:5b:bf:31:51:fa:06:29:77:87:
         5b:93:1d:a6:58:b8:82:1c:ad:9e:57:1a:9e:5c:7c:53:8c:1a:
         d7:50:d9:58:18:ed:46:66:7f:a9:5b:96:76:44:93:bf:c7:90:
         91:39:96:cd:b9:3f:14:38:ba:9c:05:e7:f7:06:98:82:12:f2:
         e3:4e:03:ea:09:da:86:29:9e:ca:4a:b7:c8:fd:8d:7d:fe:28:
         94:89:6e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org