Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/34352e3136362e36342e302f32322d3234203d3e20323637393436.roa
File:                     34352e3136362e36342e302f32322d3234203d3e20323637393436.roa (raw, json)
Hash identifier:          Zq+/8fu76MxUu6Z9GcKkMZpszVDvbIwbA1YLO4wyTj8=
Subject key identifier:   CE:D7:BE:9E:E4:09:1A:EF:02:C3:FF:24:CB:86:85:E7:75:B3:3C:84
Certificate issuer:       /CN=A90C51F287F829905266548E409D0259B53DAEA7
Certificate serial:       224F3CB7660ACE2DFC206D76015E3C6DD7729787
Authority key identifier: A9:0C:51:F2:87:F8:29:90:52:66:54:8E:40:9D:02:59:B5:3D:AE:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A90C51F287F829905266548E409D0259B53DAEA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/34352e3136362e36342e302f32322d3234203d3e20323637393436.roa
Signing time:             Wed 14 Jun 2023 20:10:14 +0000
ROA not before:           Wed 14 Jun 2023 20:05:14 +0000
ROA not after:            Wed 12 Jun 2024 20:10:14 +0000
asID:                     267946
IP address blocks:        45.166.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4f:3c:b7:66:0a:ce:2d:fc:20:6d:76:01:5e:3c:6d:d7:72:97:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90C51F287F829905266548E409D0259B53DAEA7
        Validity
            Not Before: Jun 14 20:05:14 2023 GMT
            Not After : Jun 12 20:10:14 2024 GMT
        Subject: CN=CED7BE9EE4091AEF02C3FF24CB8685E775B33C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:57:da:25:25:8c:0d:8c:5d:fd:de:cf:d5:
                    76:14:2f:20:b2:88:aa:2a:a7:5e:eb:9d:60:24:fc:
                    db:fd:98:7a:7a:98:a1:35:ed:92:f9:50:1c:3d:cb:
                    f2:45:b1:70:e2:2a:69:02:6d:9f:97:e5:82:9f:31:
                    e4:b6:16:6b:f9:13:29:2b:a0:c5:c9:fa:09:7d:34:
                    20:ab:3d:d8:15:40:53:25:d7:3e:33:38:d9:d3:c5:
                    2b:44:42:e3:2d:12:e3:0a:99:59:48:65:d7:c3:1e:
                    71:af:50:34:26:2d:92:58:48:e6:f1:54:df:0c:57:
                    46:25:aa:05:01:13:15:d4:71:01:da:f7:5c:f2:48:
                    69:be:d6:f6:ec:aa:68:23:5c:2e:07:a7:77:a4:72:
                    68:27:d9:01:8a:22:14:1f:4c:ca:e5:09:19:6d:a3:
                    1f:d9:88:a5:20:82:f5:c3:86:98:0c:30:83:24:77:
                    32:58:63:71:36:44:a4:b8:41:44:60:e3:ba:01:55:
                    ce:f1:3a:04:db:50:03:9b:d9:57:07:41:02:2e:3b:
                    2b:b4:30:da:da:58:37:20:b5:cf:82:2f:03:dd:0f:
                    da:4d:66:f5:ea:f5:21:7a:92:81:36:c2:bc:66:21:
                    cc:05:b8:cc:fe:17:a0:61:bb:81:c4:48:c0:75:97:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:BE:9E:E4:09:1A:EF:02:C3:FF:24:CB:86:85:E7:75:B3:3C:84
            X509v3 Authority Key Identifier:
                keyid:A9:0C:51:F2:87:F8:29:90:52:66:54:8E:40:9D:02:59:B5:3D:AE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/A90C51F287F829905266548E409D0259B53DAEA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A90C51F287F829905266548E409D0259B53DAEA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/34352e3136362e36342e302f32322d3234203d3e20323637393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:f2:b0:53:80:66:7c:36:cf:df:75:55:74:c4:e4:13:8a:e4:
         84:34:0e:30:9f:8b:57:73:62:50:5c:9e:93:dc:46:67:08:ef:
         4e:f6:5f:25:4f:7f:8c:91:19:29:ae:7e:43:0d:51:dd:f0:f5:
         96:e9:26:21:87:8f:f9:66:0f:e7:6c:12:50:63:eb:77:c3:6e:
         ce:06:4b:0b:a5:35:ac:2c:08:b9:e3:53:be:f3:66:0c:37:58:
         74:1f:78:6f:4a:75:2e:97:4f:eb:2c:d0:68:df:d9:f7:0d:87:
         e3:86:e3:da:8a:26:9f:72:45:3d:1d:99:58:b0:08:77:36:c1:
         84:b3:99:9e:3e:06:cb:ba:d6:19:5c:4c:80:e3:04:34:59:36:
         f9:6d:c2:e7:50:46:49:c5:82:18:c4:e9:d2:4a:15:5c:b1:c5:
         4a:3c:38:9e:02:59:ed:2f:48:15:6e:7d:bd:db:83:fa:c7:46:
         de:8f:b3:05:c1:14:f1:04:b7:a4:4a:53:7b:82:66:85:ff:c7:
         67:5a:ca:74:ba:23:1b:48:d8:9f:54:99:c9:66:e2:56:cb:e3:
         6a:1e:4d:27:60:46:f4:9c:bf:8b:2b:e1:4a:46:8b:8f:7d:8f:
         78:18:26:2d:f4:c0:6a:44:a1:f4:a3:61:55:a1:2a:8e:b2:8f:
         20:49:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org