Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234352e302f32342d3234203d3e20323636393939.roa
File:                     34352e3232362e3234352e302f32342d3234203d3e20323636393939.roa (raw, json)
Hash identifier:          q47UIWu0Zm6N7axyZFcn1laT+GMC+w3XYNpjF33ZSxA=
Subject key identifier:   63:5B:C4:44:FA:E3:DF:C9:1F:B2:B3:D1:84:83:D9:1A:99:12:32:78
Certificate issuer:       /CN=A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D
Certificate serial:       6DAB175CFAA0381EF55DC01FA0B8B7EACA0B22AD
Authority key identifier: A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234352e302f32342d3234203d3e20323636393939.roa
Signing time:             Sun 18 Sep 2022 19:51:20 +0000
ROA not before:           Sun 18 Sep 2022 19:46:20 +0000
ROA not after:            Sun 17 Sep 2023 19:51:20 +0000
asID:                     266999
IP address blocks:        45.226.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ab:17:5c:fa:a0:38:1e:f5:5d:c0:1f:a0:b8:b7:ea:ca:0b:22:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D
        Validity
            Not Before: Sep 18 19:46:20 2022 GMT
            Not After : Sep 17 19:51:20 2023 GMT
        Subject: CN=635BC444FAE3DFC91FB2B3D18483D91A99123278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:e0:90:a8:c3:bf:b0:40:08:31:a2:4b:4d:
                    67:25:e5:ae:9f:57:58:3a:b9:fe:e2:d9:0f:28:67:
                    70:b2:e1:4a:21:73:83:53:cc:83:0f:47:5e:2b:5b:
                    a4:a0:4a:db:06:37:0d:91:cf:d8:ed:cf:2e:6c:c6:
                    d7:b1:49:b4:72:96:28:c9:5a:40:85:02:89:56:f2:
                    96:2c:34:1e:d7:80:eb:70:f1:f4:51:44:1f:ce:17:
                    9a:51:b7:03:f2:93:4a:bc:7a:d6:b7:d0:97:32:ab:
                    ae:42:c2:26:d7:96:06:0c:95:60:c3:0a:33:92:6d:
                    c1:4e:4e:c6:d5:57:69:b7:af:5b:76:0a:fe:2e:74:
                    20:da:b5:91:8f:16:59:63:59:5e:c6:d9:d2:09:a1:
                    6e:f4:a2:b3:e3:58:10:74:e6:fb:6b:a5:1a:e2:2f:
                    11:b2:19:f9:96:e9:19:90:59:e4:d9:c7:7c:26:3c:
                    75:52:2f:13:e6:19:a9:ca:5e:ab:07:09:ed:a0:32:
                    50:3e:88:6b:c2:f9:e3:81:33:5e:82:6a:15:7a:41:
                    00:da:6d:bc:da:b4:0f:59:44:d3:8e:90:bf:59:9e:
                    99:c2:e6:18:6d:b1:8b:14:9b:4d:ab:c7:e8:a3:74:
                    a1:d5:2b:7c:0d:8f:2c:55:40:16:49:7f:90:f7:29:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5B:C4:44:FA:E3:DF:C9:1F:B2:B3:D1:84:83:D9:1A:99:12:32:78
            X509v3 Authority Key Identifier:
                keyid:A5:B8:A0:40:1A:3B:D4:83:DA:C7:81:AF:F2:E5:3D:7E:1B:EC:6B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B8A0401A3BD483DAC781AFF2E53D7E1BEC6B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NKJ8vPVQdZV6s7T9snv5PyesxhUaUSHaa4tMBcNCgqF/0/34352e3232362e3234352e302f32342d3234203d3e20323636393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:32:01:8c:b1:23:2e:0f:8d:42:63:99:2c:f4:48:90:f4:05:
         1b:9b:dc:89:c0:c3:57:c2:4f:d6:b7:ad:3c:b0:9e:f9:99:cb:
         49:0b:29:5a:fa:60:f7:26:25:8a:e9:a5:c2:c1:28:01:02:16:
         2c:59:e0:29:0d:d4:a5:ca:c4:2a:9a:cf:87:ce:53:2c:22:06:
         09:f5:1a:da:47:67:9e:40:76:65:29:87:bc:76:b3:a3:97:19:
         f7:97:84:2b:c9:8e:5e:d9:e3:29:ec:d6:12:03:f0:90:29:07:
         a4:ce:7a:8a:5a:70:44:07:d5:9c:2a:92:18:a0:83:09:8a:44:
         a5:86:4e:b0:48:67:23:12:7d:e1:cc:74:2a:2d:d1:6e:16:9c:
         ba:69:65:6c:ae:41:44:21:e7:61:06:c1:08:a7:80:33:99:e9:
         5f:db:ca:74:d7:11:e0:4e:36:d5:0e:61:d6:38:7a:f1:98:61:
         fa:4e:14:1d:aa:76:0d:5a:ea:9c:b7:25:d0:8f:80:2b:69:e4:
         73:f2:96:fe:d1:da:31:01:ea:25:0b:da:76:9b:79:8f:d5:d3:
         37:95:c1:01:da:77:c0:97:48:74:85:86:ea:7a:01:0e:4b:f1:
         71:4c:79:c4:3a:a6:e7:6e:58:39:df:d0:44:27:ff:66:98:41:
         00:12:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org