Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3138332e32392e302f32342d3332203d3e20323639323538.roa
File:                     34352e3138332e32392e302f32342d3332203d3e20323639323538.roa (raw, json)
Hash identifier:          aVoow6CKeAG2ZDQ9wnXdaVb2EMqcUBztJtFE3tZeens=
Subject key identifier:   16:7C:11:56:ED:20:C9:17:2A:00:FA:18:01:2C:6C:82:87:AA:BB:19
Certificate issuer:       /CN=3C56226A2217A64211E52D9EA9527FAAF1587160
Certificate serial:       6F0E5BF78531A0F35E7E0DF94575DDDF0E7C5BEC
Authority key identifier: 3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3138332e32392e302f32342d3332203d3e20323639323538.roa
Signing time:             Wed 31 May 2023 00:54:47 +0000
ROA not before:           Wed 31 May 2023 00:49:47 +0000
ROA not after:            Wed 29 May 2024 00:54:47 +0000
asID:                     269258
IP address blocks:        45.183.29.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0e:5b:f7:85:31:a0:f3:5e:7e:0d:f9:45:75:dd:df:0e:7c:5b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C56226A2217A64211E52D9EA9527FAAF1587160
        Validity
            Not Before: May 31 00:49:47 2023 GMT
            Not After : May 29 00:54:47 2024 GMT
        Subject: CN=167C1156ED20C9172A00FA18012C6C8287AABB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:30:32:cf:ca:4b:a0:73:4a:94:5f:85:38:
                    f4:64:4b:fd:61:12:61:84:9c:c0:36:d2:96:46:8e:
                    37:0b:4c:67:31:53:5f:67:60:1f:59:1a:0e:5e:95:
                    93:22:68:22:b0:df:0b:9a:1a:3b:45:af:f7:d3:b5:
                    02:cf:9e:6f:02:de:f2:31:4c:8a:ca:7a:41:3f:dc:
                    d2:42:3b:4f:b3:80:83:02:6e:06:47:53:7a:e0:a6:
                    bf:07:31:44:4d:d7:83:a9:64:df:05:98:e9:9d:92:
                    94:2b:c7:ca:70:56:45:ef:7e:b5:a9:56:88:6d:2e:
                    9c:dd:d7:1b:25:23:1d:18:84:31:af:a1:4a:c9:b1:
                    ad:cc:11:3a:32:3e:e8:00:c8:ee:99:da:49:24:0f:
                    ca:ba:f9:09:be:13:ff:40:d4:1f:55:f0:ef:59:69:
                    bd:94:9f:84:78:72:62:09:22:29:89:70:b3:7b:2c:
                    2e:63:1c:b9:9f:43:c0:65:48:4a:d0:e0:29:65:ce:
                    e2:61:ea:de:c0:bd:b1:32:b3:23:7f:2e:1c:b9:1c:
                    73:c1:56:01:02:bf:1f:a8:c1:58:d5:c4:13:64:70:
                    cf:1a:85:68:f6:da:ac:e6:7d:4e:5f:df:7b:68:bd:
                    52:40:74:c3:b6:85:11:4c:e9:97:83:17:23:83:5a:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7C:11:56:ED:20:C9:17:2A:00:FA:18:01:2C:6C:82:87:AA:BB:19
            X509v3 Authority Key Identifier:
                keyid:3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/3C56226A2217A64211E52D9EA9527FAAF1587160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3138332e32392e302f32342d3332203d3e20323639323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:44:87:8d:f0:3f:5e:46:58:98:2b:45:a9:c4:d7:c9:f1:ed:
         47:e0:05:51:bf:d5:9e:f9:8e:aa:50:a0:f3:10:26:e9:05:06:
         f6:33:7f:46:18:a6:ae:6e:78:39:44:07:df:24:10:c7:bb:ba:
         c8:ad:44:28:7c:97:f2:17:7c:23:7c:f4:f9:0a:cf:b8:3b:ad:
         25:07:24:15:7d:e8:95:ba:d0:2a:dc:c3:c7:2b:da:fb:73:bd:
         70:1d:f7:a8:ab:c4:c8:3a:58:59:12:16:88:89:b4:08:ad:f2:
         c5:54:c7:6d:6c:b9:ac:cb:f0:8e:09:ba:84:c7:1c:bc:1c:60:
         94:a1:99:24:82:7c:b3:90:69:53:13:b4:8c:4a:72:3f:d0:f6:
         0a:7f:83:9b:d7:68:2a:f4:ba:de:cc:a6:92:e2:91:3e:f8:8c:
         71:c4:87:d7:a7:4d:4f:c3:c3:8e:61:ca:dd:93:67:7c:ee:08:
         54:2b:5d:5a:0c:68:ff:4a:5f:eb:66:8f:8c:ef:d0:43:a9:dc:
         61:5d:d9:60:f8:60:1b:6f:f1:af:5b:ac:67:fc:0f:99:d5:58:
         b8:b4:e9:81:f1:a8:d3:c6:98:fa:12:77:db:76:eb:2b:72:94:
         da:7d:12:ba:e5:9b:45:6d:19:79:b9:ca:66:bb:41:7e:da:e6:
         3e:d6:64:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org