Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa
File:                     34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa (raw, json)
Hash identifier:          +OzuBKz3Xfc5AJ1jDmxtLrR4jJkCrxsDTEyZwKrk984=
Subject key identifier:   9D:12:E6:FC:D7:3C:C7:1F:4C:53:8C:43:23:16:D3:B8:87:64:27:08
Certificate issuer:       /CN=6E1445AA0189887B340B440C514D8045AAAD400F
Certificate serial:       32264943B1F16784B0DB251D3370EE98B420F6E7
Authority key identifier: 6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa
Signing time:             Fri 01 Dec 2023 15:00:00 +0000
ROA not before:           Fri 01 Dec 2023 14:55:00 +0000
ROA not after:            Fri 29 Nov 2024 15:00:00 +0000
asID:                     268137
IP address blocks:        45.169.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:26:49:43:b1:f1:67:84:b0:db:25:1d:33:70:ee:98:b4:20:f6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1445AA0189887B340B440C514D8045AAAD400F
        Validity
            Not Before: Dec  1 14:55:00 2023 GMT
            Not After : Nov 29 15:00:00 2024 GMT
        Subject: CN=9D12E6FCD73CC71F4C538C432316D3B887642708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:e8:b9:a0:b0:03:4d:be:2e:cc:cf:c4:4c:
                    16:4c:c5:52:51:e3:f9:64:e9:32:ab:b2:07:be:f6:
                    b6:4e:ef:14:e2:6a:e0:18:1d:a2:44:c9:2a:e8:b4:
                    39:03:9e:de:28:1c:c8:5c:6c:0c:29:fb:8f:f6:6f:
                    30:a4:29:dc:b8:9b:05:9a:69:c3:e2:4f:01:30:22:
                    7e:76:43:f0:3c:63:53:ac:c5:a1:7f:56:ae:f2:78:
                    45:82:be:f8:65:2b:dd:90:e7:da:77:82:d7:00:29:
                    3b:6a:5e:06:03:50:a0:bf:82:3d:62:56:45:f8:96:
                    e2:94:6e:a5:d6:1f:6e:00:dd:30:47:67:23:d7:3d:
                    d7:ea:11:bd:43:d1:79:ea:84:5e:40:6f:1b:3e:97:
                    06:dc:ec:38:bb:a5:a2:4c:6a:9c:0d:46:77:1c:07:
                    73:64:ae:43:12:ae:75:ca:10:23:3d:a1:4a:a4:2c:
                    9b:a5:71:96:25:5d:bf:30:aa:2b:64:29:8a:be:0b:
                    e2:aa:d0:1a:98:fa:8a:08:ac:b5:ce:b4:db:fc:91:
                    fe:a7:54:9d:6c:66:7b:43:54:d3:b5:d6:92:6b:e3:
                    43:5a:e4:38:6e:f7:2e:3d:9d:8d:9a:63:f8:0b:0d:
                    bf:80:8d:cd:4a:bb:08:68:00:c2:63:08:a9:91:96:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:12:E6:FC:D7:3C:C7:1F:4C:53:8C:43:23:16:D3:B8:87:64:27:08
            X509v3 Authority Key Identifier:
                keyid:6E:14:45:AA:01:89:88:7B:34:0B:44:0C:51:4D:80:45:AA:AD:40:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/6E1445AA0189887B340B440C514D8045AAAD400F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E1445AA0189887B340B440C514D8045AAAD400F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/0/34352e3136392e3230302e302f32342d3234203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:db:83:24:ee:d9:ab:8a:d2:37:a1:af:85:f5:5d:32:70:b9:
         a3:d4:0a:fc:c4:6d:2b:16:3d:9d:0a:95:5c:89:70:77:d7:1c:
         97:04:be:7b:eb:b8:d9:50:3c:45:21:7e:5d:0b:c7:93:a9:a3:
         c2:e0:dc:fc:74:28:67:69:73:c1:01:d7:0c:aa:61:95:60:5b:
         ea:53:32:11:ca:a5:f4:23:b5:92:8d:71:3f:ef:b9:a6:19:9a:
         3e:12:9c:53:b5:f6:de:f8:48:f4:49:4a:98:dc:7a:52:ea:21:
         df:da:0c:3f:e4:ef:42:a2:91:be:1a:b6:9f:26:3c:03:dd:d2:
         34:61:89:d4:15:39:fe:65:ee:e2:0c:dd:59:ef:1b:75:d1:81:
         8f:71:54:7a:c9:e0:12:ea:73:74:78:76:b5:b3:b1:4a:5c:67:
         f5:50:0d:88:c8:dc:c8:6c:3f:ce:aa:60:5a:88:0c:2e:20:0b:
         e7:49:bb:a9:3b:2e:cf:b7:ac:2a:fe:0f:ba:90:91:1f:57:a2:
         9c:d9:f7:32:45:67:85:b5:bf:d8:59:fe:8c:83:26:cb:96:05:
         15:4e:11:19:90:46:7b:4b:78:0f:20:c5:2e:e0:4f:a5:83:03:
         13:9a:79:db:1e:27:c1:d8:25:c5:3c:d2:05:84:92:3a:d2:c5:
         07:5a:9f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org