Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32342d3234203d3e20323639353732.roa
File:                     34352e3138392e36382e302f32342d3234203d3e20323639353732.roa (raw, json)
Hash identifier:          MzbnOdn2MglHr00SSQFIkhUdMNBrDl2g4EMEIzC4coY=
Subject key identifier:   E8:93:58:49:4E:DE:44:CE:74:9D:23:00:97:14:36:9F:51:76:A2:71
Certificate issuer:       /CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
Certificate serial:       10C22616ABAAD844D77DAD5861C9A757912CDA00
Authority key identifier: FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32342d3234203d3e20323639353732.roa
Signing time:             Mon 24 Jul 2023 17:00:00 +0000
ROA not before:           Mon 24 Jul 2023 16:55:00 +0000
ROA not after:            Mon 22 Jul 2024 17:00:00 +0000
asID:                     269572
IP address blocks:        45.189.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c2:26:16:ab:aa:d8:44:d7:7d:ad:58:61:c9:a7:57:91:2c:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA6AA47AC450A75C30FBC2791F8614A8A805F29C
        Validity
            Not Before: Jul 24 16:55:00 2023 GMT
            Not After : Jul 22 17:00:00 2024 GMT
        Subject: CN=3082010A0282010100A627CAF45519628CD74A658A72B0EB0F4203E26B1ECB6640A02C001952D23E171DE75C967BE4BFABB0DDA7ECB36118A860F507993B03F2399101521CE89F6DAD83CECF59DB24E8BA2FE95BECF806D359308208FBCA52FE5E61CAEBBC1FE197AD550D41F1D8C8578D8CA30A36820FBB36AF3170B29F4F00538F897D4FE4F00D0B466D6B407E08524FF3D2756D0D6E2A278D78A0F293D5F888347390C03616C51286E8A1F6DBDD4954D46A85F87E84FE5FAC8B04EF5DAA0C9B9AA8D7F5B32A1209B9A778CAA1E630689EEB88B1CC14C2522CF4B022075205D100DDF7CD8A2B1872935DB45C2B9D58BD0267FC70AABC2B0F939A776442575B71BB1D4C5B8EFB681B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:ca:f4:55:19:62:8c:d7:4a:65:8a:72:b0:
                    eb:0f:42:03:e2:6b:1e:cb:66:40:a0:2c:00:19:52:
                    d2:3e:17:1d:e7:5c:96:7b:e4:bf:ab:b0:dd:a7:ec:
                    b3:61:18:a8:60:f5:07:99:3b:03:f2:39:91:01:52:
                    1c:e8:9f:6d:ad:83:ce:cf:59:db:24:e8:ba:2f:e9:
                    5b:ec:f8:06:d3:59:30:82:08:fb:ca:52:fe:5e:61:
                    ca:eb:bc:1f:e1:97:ad:55:0d:41:f1:d8:c8:57:8d:
                    8c:a3:0a:36:82:0f:bb:36:af:31:70:b2:9f:4f:00:
                    53:8f:89:7d:4f:e4:f0:0d:0b:46:6d:6b:40:7e:08:
                    52:4f:f3:d2:75:6d:0d:6e:2a:27:8d:78:a0:f2:93:
                    d5:f8:88:34:73:90:c0:36:16:c5:12:86:e8:a1:f6:
                    db:dd:49:54:d4:6a:85:f8:7e:84:fe:5f:ac:8b:04:
                    ef:5d:aa:0c:9b:9a:a8:d7:f5:b3:2a:12:09:b9:a7:
                    78:ca:a1:e6:30:68:9e:eb:88:b1:cc:14:c2:52:2c:
                    f4:b0:22:07:52:05:d1:00:dd:f7:cd:8a:2b:18:72:
                    93:5d:b4:5c:2b:9d:58:bd:02:67:fc:70:aa:bc:2b:
                    0f:93:9a:77:64:42:57:5b:71:bb:1d:4c:5b:8e:fb:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:93:58:49:4E:DE:44:CE:74:9D:23:00:97:14:36:9F:51:76:A2:71
            X509v3 Authority Key Identifier:
                keyid:FA:6A:A4:7A:C4:50:A7:5C:30:FB:C2:79:1F:86:14:A8:A8:05:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA6AA47AC450A75C30FBC2791F8614A8A805F29C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/34352e3138392e36382e302f32342d3234203d3e20323639353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:0b:f5:85:23:b3:bb:40:0c:09:20:92:0c:39:2e:15:1e:
         56:9c:1d:47:83:bb:0a:f0:89:2d:7a:9d:ff:5e:91:7d:19:cd:
         38:b7:11:a5:2c:e2:36:54:42:cd:2e:30:3f:fd:d4:84:6c:d1:
         12:a7:32:71:e3:20:7f:fc:1f:ba:36:ff:7d:26:b4:1d:61:69:
         72:14:0a:2b:b9:8b:07:ed:11:05:df:36:ca:c9:ca:42:fa:de:
         69:08:00:41:3e:bc:87:b1:27:58:ea:1f:da:6e:92:b9:3a:e8:
         e6:05:04:d9:61:d1:7c:bb:34:25:29:0a:3f:a4:52:cc:7b:ad:
         75:58:f6:23:6c:a8:64:9a:a9:57:f8:b8:ed:b2:36:d6:91:b3:
         dc:3f:39:61:bd:7d:c0:3f:56:c5:8c:8d:58:3f:66:6e:31:83:
         ee:16:aa:32:3f:e2:f0:e2:32:dc:59:b6:83:bf:a4:7e:10:4f:
         e0:6c:68:69:0e:f5:14:e0:4c:2d:c5:a6:37:48:07:d8:df:9a:
         d1:bc:4a:8f:ef:9b:cb:b0:02:4b:2a:b5:d3:30:b6:a5:05:a6:
         1f:b8:15:4d:d6:1d:c0:97:dd:ac:4e:f9:79:7e:ac:5a:d9:6e:
         8c:c8:f1:ed:ad:a9:74:64:d5:99:f2:5d:17:e5:7e:3a:38:e5:
         a9:1a:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org