Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234342e302f32322d3232203d3e20323636393939.roa
File:                     34352e3232362e3234342e302f32322d3232203d3e20323636393939.roa (raw, json)
Hash identifier:          ow/BHZ72kmaRBxB++XErL9AYUu5l63+rjGx01TZeXXQ=
Subject key identifier:   6E:91:22:61:71:AA:DC:52:D7:BB:A1:65:BD:21:1E:C7:08:8C:98:1A
Certificate issuer:       /CN=A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D
Certificate serial:       2892D03D73C341AEB5B0022D694FFDD1CDCF86C6
Authority key identifier: A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234342e302f32322d3232203d3e20323636393939.roa
Signing time:             Sun 18 Sep 2022 19:51:14 +0000
ROA not before:           Sun 18 Sep 2022 19:46:14 +0000
ROA not after:            Sun 17 Sep 2023 19:51:14 +0000
asID:                     266999
IP address blocks:        45.226.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:92:d0:3d:73:c3:41:ae:b5:b0:02:2d:69:4f:fd:d1:cd:cf:86:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D
        Validity
            Not Before: Sep 18 19:46:14 2022 GMT
            Not After : Sep 17 19:51:14 2023 GMT
        Subject: CN=6E91226171AADC52D7BBA165BD211EC7088C981A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:88:10:16:a3:b0:ba:85:3b:6c:bd:6f:9a:
                    44:cc:54:02:24:6f:d2:71:fd:90:31:1c:23:4c:30:
                    fe:6e:b3:40:c1:e9:48:ce:8b:14:60:1c:47:12:01:
                    2e:29:bf:7a:ca:c5:ae:8d:75:73:4f:50:59:97:36:
                    2c:93:fd:01:8d:d6:db:42:0c:f7:37:7d:9c:93:a4:
                    36:63:75:3c:c9:fa:5a:8e:dd:74:3f:b4:0d:cc:14:
                    2c:71:8b:a5:76:6d:9f:b6:23:e3:1d:2b:9e:2b:cd:
                    00:ba:ef:78:61:9a:58:d9:15:d6:f4:a5:da:d6:20:
                    1f:c4:92:9f:62:21:cd:df:9e:71:6d:a1:d7:e1:8d:
                    7b:a8:48:be:97:b6:df:69:dd:70:a5:87:f7:3a:2d:
                    f4:54:5a:e1:bc:cd:54:ad:e8:bc:9d:0d:24:b3:f8:
                    71:a4:09:ff:57:26:50:78:be:3e:be:35:63:46:2c:
                    b3:fc:d3:af:b3:e0:b2:87:f5:0e:ca:47:46:cb:b9:
                    95:25:54:c6:a3:19:c2:aa:fd:09:96:42:34:9d:d5:
                    1f:2f:b2:77:00:84:4c:40:38:4a:d3:7b:ed:1d:1a:
                    42:a6:08:36:34:18:d2:c2:70:ec:db:5f:ba:c9:b3:
                    f1:4c:07:57:79:6e:53:65:d9:fa:50:b6:51:11:0f:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:91:22:61:71:AA:DC:52:D7:BB:A1:65:BD:21:1E:C7:08:8C:98:1A
            X509v3 Authority Key Identifier:
                keyid:A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234342e302f32322d3232203d3e20323636393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:3e:dc:5f:43:cc:09:cd:95:be:2f:8d:9b:19:89:c2:e6:09:
         2d:c1:c3:31:28:f4:3c:61:49:3e:fd:9b:cc:2a:7c:0e:06:b2:
         03:27:6e:58:ca:1f:da:4e:d8:dc:84:32:93:1e:67:7b:cd:6d:
         22:e7:cd:34:00:6a:c6:e7:1b:f8:56:38:bc:cd:e4:dd:99:ef:
         59:cc:a6:40:1e:13:a7:31:8d:17:e5:12:59:88:b7:f4:ff:b0:
         cd:e3:fe:f5:f8:53:88:f2:2d:53:19:99:fc:3f:7a:ea:15:0e:
         5a:b4:fb:49:3c:8d:2b:c6:0b:2d:ff:7a:e1:34:2e:6c:08:16:
         de:bf:58:d6:3c:99:59:e2:a8:7a:fc:03:08:0e:6a:2c:06:a3:
         5d:82:fd:ab:b1:8d:f1:86:97:b2:87:5a:78:1a:03:4c:6b:97:
         a5:0a:91:a9:e1:de:d1:dc:cb:b9:a6:fc:67:b4:34:2e:60:e5:
         59:75:71:97:17:51:49:84:26:09:00:28:5a:6e:8f:23:49:6e:
         aa:4b:cd:1d:55:2f:ac:e4:41:ad:de:0a:11:59:02:04:a4:30:
         1b:75:d9:8b:71:f2:ad:53:e9:3f:08:f1:82:43:64:af:9b:fb:
         8e:a1:eb:b6:08:58:4b:11:f5:d2:3d:ff:ed:6f:d6:c5:3f:6d:
         e0:d9:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org