Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/34352e3232362e3135362e302f32322d3232203d3e20323636393730.roa
File:                     34352e3232362e3135362e302f32322d3232203d3e20323636393730.roa (raw, json)
Hash identifier:          m5DEwxx+XCecO7jYcb+c2O69YYEES5WyOgDxs/KZFbk=
Subject key identifier:   95:89:E2:2E:C0:B7:1E:4C:22:22:81:95:A3:FB:D5:4D:35:0C:B2:50
Certificate issuer:       /CN=0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9
Certificate serial:       6A8D4C31F63951D11F30856CDC9FD971DBA02BBF
Authority key identifier: 0F:6A:DB:F5:2D:CB:A6:28:C4:D1:78:6F:C3:04:E3:BB:07:E2:AB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/34352e3232362e3135362e302f32322d3232203d3e20323636393730.roa
Signing time:             Tue 24 Oct 2023 12:47:43 +0000
ROA not before:           Tue 24 Oct 2023 12:42:43 +0000
ROA not after:            Tue 22 Oct 2024 12:47:43 +0000
asID:                     266970
IP address blocks:        45.226.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8d:4c:31:f6:39:51:d1:1f:30:85:6c:dc:9f:d9:71:db:a0:2b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9
        Validity
            Not Before: Oct 24 12:42:43 2023 GMT
            Not After : Oct 22 12:47:43 2024 GMT
        Subject: CN=9589E22EC0B71E4C22228195A3FBD54D350CB250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:5c:95:e8:bd:c3:2f:54:6f:b9:1e:9d:ca:
                    32:32:a9:68:6c:a5:59:7c:03:59:df:04:8a:28:62:
                    c1:4e:ca:77:b4:1d:8b:2f:04:15:c7:4d:bb:d6:d5:
                    bf:3c:14:9f:47:ca:e0:ba:e3:77:48:4b:a5:81:e5:
                    d6:3a:4b:85:ca:21:1d:b4:bc:1f:d7:82:9d:6e:a6:
                    ba:d6:c2:aa:d7:17:df:ed:1c:25:82:2e:08:cd:c2:
                    77:9e:68:02:53:10:1e:f4:0b:26:e4:e5:77:b5:fe:
                    4a:ad:9f:3f:4b:af:3f:b1:bd:c1:a5:0a:3f:fa:4a:
                    87:d6:75:16:43:dc:83:76:8c:b3:55:89:2c:a3:f2:
                    7d:b7:87:ad:91:32:01:8e:4a:05:25:4c:d7:64:f6:
                    8b:e9:71:0a:ca:77:34:ce:3e:1b:2c:18:1a:48:fc:
                    fd:b1:c2:f5:a0:a6:85:cc:d7:c8:47:f0:88:7b:d9:
                    f7:17:e9:90:a7:46:7b:b9:6a:10:70:ce:44:1e:bc:
                    5f:b3:61:65:28:16:ee:e3:3a:f5:f8:d0:59:83:86:
                    40:01:5a:47:b6:43:e9:ad:df:6d:9d:43:69:6d:92:
                    ee:8c:fb:e6:62:41:5c:08:cc:31:d0:b6:fe:eb:d2:
                    72:8e:16:42:2f:86:01:c9:d1:28:fe:26:3d:73:e3:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:89:E2:2E:C0:B7:1E:4C:22:22:81:95:A3:FB:D5:4D:35:0C:B2:50
            X509v3 Authority Key Identifier:
                keyid:0F:6A:DB:F5:2D:CB:A6:28:C4:D1:78:6F:C3:04:E3:BB:07:E2:AB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F6ADBF52DCBA628C4D1786FC304E3BB07E2ABC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/34352e3232362e3135362e302f32322d3232203d3e20323636393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:33:11:fc:10:76:cf:4d:21:a2:0f:52:20:73:bd:04:f1:21:
         e2:36:41:db:36:a9:0f:c9:09:f1:6a:2d:00:f0:93:63:bb:f2:
         60:e3:53:59:23:83:12:44:36:e4:f5:18:ec:d1:7d:3d:76:a0:
         a6:41:04:16:46:f1:dd:62:8f:ec:e8:eb:78:80:24:bf:6e:de:
         b5:3e:26:45:b8:8c:ae:7a:42:9c:c1:9e:2f:0f:f5:e4:f2:5e:
         aa:56:99:d3:3e:c4:e3:7f:f3:37:38:5c:0c:17:95:23:0c:22:
         e5:0e:84:77:27:0f:9a:bb:3b:ed:32:a2:a7:fa:56:06:fd:a9:
         c7:96:2c:47:05:79:17:5f:4c:cc:78:19:25:21:bf:4d:ca:83:
         e9:14:8b:0e:20:04:5a:ab:39:ee:e1:6b:0d:1a:80:a5:9e:ad:
         40:de:3d:1d:b7:6a:51:3c:c1:c7:3c:78:29:79:4d:67:8c:0e:
         00:0c:82:98:c2:c5:53:0a:45:26:33:60:ea:98:58:8a:67:d9:
         05:46:a0:da:7e:22:14:63:e1:02:ff:57:f1:84:0e:18:ba:24:
         90:9c:cc:79:5a:81:35:6d:9d:da:25:8f:a8:18:a2:db:11:2d:
         08:47:41:00:ec:ff:04:b0:fb:58:b3:ac:b9:5b:4a:88:5a:90:
         1e:33:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org