Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa
File:                     34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa (raw, json)
Hash identifier:          TMmt1z9Elt8ifJTe9s4enSeHzaGOOCWNX5GXlckQo28=
Subject key identifier:   3F:B7:BF:DF:06:39:23:B1:58:A5:C4:FC:34:FB:EB:FC:4B:0D:D1:65
Certificate issuer:       /CN=6E1445AA0189887B340B440C514D8045AAAD400F
Certificate serial:       067F2A11282A60BEE4CA182A23E8C6100C1695AF
Authority key identifier: 6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa
Signing time:             Fri 01 Dec 2023 15:00:01 +0000
ROA not before:           Fri 01 Dec 2023 14:55:01 +0000
ROA not after:            Fri 29 Nov 2024 15:00:01 +0000
asID:                     268137
IP address blocks:        45.169.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7f:2a:11:28:2a:60:be:e4:ca:18:2a:23:e8:c6:10:0c:16:95:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1445AA0189887B340B440C514D8045AAAD400F
        Validity
            Not Before: Dec  1 14:55:01 2023 GMT
            Not After : Nov 29 15:00:01 2024 GMT
        Subject: CN=3FB7BFDF063923B158A5C4FC34FBEBFC4B0DD165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:c9:b5:cc:e7:bc:8b:86:59:4a:7c:6b:6c:
                    68:6f:98:65:24:dc:50:35:00:55:08:7f:6a:8f:af:
                    97:e9:59:2b:08:e2:f7:02:4c:1e:32:73:7b:e9:6a:
                    c0:5c:d0:07:f3:25:bb:dd:cb:ab:1d:40:82:2b:6e:
                    60:f0:20:7f:cc:aa:88:96:dc:73:80:10:a6:c8:de:
                    47:4e:9e:a9:b0:b3:25:4d:80:23:d0:7c:0d:6a:ba:
                    08:8c:52:1c:d5:0e:27:4b:f6:91:2e:89:f8:90:dc:
                    2c:83:49:ef:4b:4d:24:b2:5b:d9:fe:30:2f:96:61:
                    de:58:29:8e:79:70:cd:ff:e7:c9:ff:0d:e7:b7:1b:
                    2c:a8:91:ce:8f:fe:c8:ae:56:94:ef:91:fc:3a:cc:
                    01:b8:4e:0e:27:62:6c:96:e9:1a:37:cc:ba:ab:90:
                    89:04:cc:45:b2:76:cd:6a:19:44:d5:d5:6c:1e:70:
                    a8:79:ce:e5:03:aa:95:16:f8:65:ba:cb:cb:a9:b9:
                    e9:33:51:a6:9c:bf:77:45:a1:31:05:1f:cd:05:e9:
                    6d:8d:1f:9e:06:8f:4a:5a:8d:e7:1b:ac:ff:56:a7:
                    69:ac:87:b5:70:1e:99:34:e9:a9:d7:e4:21:13:6b:
                    c8:28:90:e3:e8:e3:88:33:ea:13:24:3b:ec:41:33:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B7:BF:DF:06:39:23:B1:58:A5:C4:FC:34:FB:EB:FC:4B:0D:D1:65
            X509v3 Authority Key Identifier:
                keyid:6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/6E1445AA0189887B340B440C514D8045AAAD400F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/34352e3136392e3230302e302f32332d3233203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:c5:5f:b7:62:21:8e:60:f5:c4:a9:c3:1c:6d:7f:2c:46:4f:
         0a:7e:c0:a1:80:16:48:f6:33:3b:cf:05:41:04:57:92:c0:8c:
         16:83:af:90:ef:33:ba:bf:43:97:81:d0:b7:ed:b4:02:78:de:
         32:91:9a:5d:41:ba:01:f6:4a:c5:69:b4:2c:dc:41:70:c3:d2:
         8f:1b:6c:fe:e7:19:87:65:ac:c4:bb:d7:ed:f9:84:52:be:a2:
         0f:5b:e8:27:e8:f1:64:f4:d9:df:67:d6:97:41:98:0f:30:bb:
         1a:d8:a5:f5:d0:21:38:d8:d7:be:3f:55:e4:05:34:40:9a:a7:
         95:7f:02:b4:29:29:40:b1:28:5b:fb:f7:a5:3f:5b:dc:17:79:
         10:e7:d1:a8:e4:36:52:53:5b:13:c3:6f:1c:1f:13:ed:1d:9f:
         68:0c:c2:88:80:0e:a3:6c:d5:7b:32:ac:41:76:c7:16:14:8a:
         28:00:68:d9:af:74:50:bc:4b:21:27:15:5e:ae:d9:b8:08:f3:
         e5:f4:8d:5d:b6:d8:96:28:64:51:ca:37:bd:58:3f:34:87:7f:
         a2:f5:16:e9:0a:71:c6:88:f8:b7:9f:63:9f:90:02:ae:c5:f2:
         0f:63:d0:02:91:ab:bd:07:75:96:71:80:c2:04:36:3c:de:91:
         2f:02:55:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org