Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32322d3234203d3e20323639343536.roa
File:                     34352e3138372e35322e302f32322d3234203d3e20323639343536.roa (raw, json)
Hash identifier:          rt6Yj2XdX7SD3InY3Erxespq91TQucj2d/kEHsdmB/c=
Subject key identifier:   20:54:9F:53:10:30:91:B4:EA:77:81:13:3E:EA:C6:CA:3F:BE:5B:17
Certificate issuer:       /CN=6A9ACE35D57659504CE2A4010FE0DB8CED51F514
Certificate serial:       2678A918126EA7175CCF120105CAEB2DCE3D3067
Authority key identifier: 6A:9A:CE:35:D5:76:59:50:4C:E2:A4:01:0F:E0:DB:8C:ED:51:F5:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32322d3234203d3e20323639343536.roa
Signing time:             Mon 18 Mar 2024 15:05:44 +0000
ROA not before:           Mon 18 Mar 2024 15:00:44 +0000
ROA not after:            Mon 17 Mar 2025 15:05:44 +0000
asID:                     269456
IP address blocks:        45.187.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:78:a9:18:12:6e:a7:17:5c:cf:12:01:05:ca:eb:2d:ce:3d:30:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A9ACE35D57659504CE2A4010FE0DB8CED51F514
        Validity
            Not Before: Mar 18 15:00:44 2024 GMT
            Not After : Mar 17 15:05:44 2025 GMT
        Subject: CN=20549F53103091B4EA7781133EEAC6CA3FBE5B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:2b:7a:70:3d:83:03:f2:6c:3f:c2:64:79:
                    cf:3d:e2:dc:3f:67:e4:8a:44:6d:f4:ab:2f:74:14:
                    85:30:6a:b9:b7:6e:56:68:5f:25:5d:4c:fc:a1:c5:
                    94:bd:82:7e:2b:58:76:14:30:01:1b:18:41:fd:89:
                    3b:15:c3:cc:74:52:6c:e3:df:3e:9e:6e:1d:f4:64:
                    c8:ff:36:a2:94:88:d9:65:56:fd:d5:0f:ec:ff:7d:
                    6e:2f:9a:fd:af:e1:cc:ed:12:b4:3f:70:88:db:5e:
                    3d:73:a3:49:69:ff:00:aa:69:8e:ac:20:01:9e:eb:
                    4c:ad:6d:5e:7e:a1:34:34:9a:d8:6a:c9:31:ca:91:
                    c0:0c:92:a4:2b:1d:55:db:7e:52:e1:d8:40:e0:c1:
                    6f:ee:c7:49:a6:3b:18:38:52:d8:f9:64:38:39:04:
                    f5:a9:77:13:95:22:67:2f:a6:14:a8:68:5f:ee:91:
                    33:24:8d:cd:e7:ff:44:22:ca:b4:c6:4f:78:04:c1:
                    68:40:81:16:b3:d5:ad:c5:ac:33:77:31:a2:bf:01:
                    eb:1f:2b:80:d6:36:b9:85:53:d0:72:45:66:a2:4f:
                    5d:0a:d0:a9:e3:a8:92:16:04:20:6b:cf:08:ec:a3:
                    8c:0d:f7:1a:c6:d0:70:c6:d7:32:ea:ea:ab:be:ad:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:9F:53:10:30:91:B4:EA:77:81:13:3E:EA:C6:CA:3F:BE:5B:17
            X509v3 Authority Key Identifier:
                keyid:6A:9A:CE:35:D5:76:59:50:4C:E2:A4:01:0F:E0:DB:8C:ED:51:F5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A9ACE35D57659504CE2A4010FE0DB8CED51F514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32322d3234203d3e20323639343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:36:a9:4b:79:6c:2f:9d:38:7b:5b:6a:ea:57:06:f5:43:a2:
         1b:88:00:6d:a0:d4:bb:13:60:e4:34:38:ea:16:42:6b:36:01:
         c7:2e:b8:a9:93:85:c6:9c:b0:6c:83:54:90:51:71:25:39:4c:
         30:86:10:8b:ce:4a:d6:87:c5:e0:8a:77:68:09:83:92:1c:76:
         0c:92:ef:86:9c:2c:c6:30:e6:ab:cc:67:46:c1:4a:0d:5b:6b:
         96:2f:c0:7e:9b:8a:ca:e7:73:16:bb:8f:be:41:05:6f:89:22:
         68:67:1b:3f:60:ad:1c:cf:d4:f7:47:52:14:24:2d:03:40:de:
         42:9c:87:ff:0e:0c:14:44:07:61:8f:13:2c:46:25:3d:2f:02:
         de:a0:92:24:14:2d:48:8d:76:b5:24:eb:ca:ab:01:b5:ee:24:
         1c:1d:8c:26:6d:ed:f6:b2:06:32:df:5d:d2:d5:c1:dd:ff:39:
         5b:b6:ed:a1:ad:e7:6f:82:8b:4d:fd:23:a3:57:dc:8b:da:42:
         6e:4f:91:b6:f5:f2:1d:c4:52:53:2f:32:d0:8d:a2:eb:eb:fa:
         80:7d:9b:25:e1:09:39:21:df:6a:f8:95:02:ee:5c:a6:19:d4:
         ee:86:4c:18:f0:7d:6b:46:6e:68:3a:2b:c1:e4:c1:d6:70:38:
         cc:58:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org