Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33382e302f32342d3234203d3e20323636313532.roa
File:                     34352e362e33382e302f32342d3234203d3e20323636313532.roa (raw, json)
Hash identifier:          OsOFsQa0KFZ/nAlDujLn4jsA5SrhUd1ViE3gg+p8h6Q=
Subject key identifier:   DE:49:1D:A5:B4:67:91:E6:BC:52:8A:BE:0D:80:4A:16:93:9F:F7:32
Certificate issuer:       /CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
Certificate serial:       7AD19706613D3F8F495235762112F158806258CF
Authority key identifier: 43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33382e302f32342d3234203d3e20323636313532.roa
Signing time:             Fri 10 Jun 2022 21:13:56 +0000
ROA not before:           Fri 10 Jun 2022 21:08:56 +0000
ROA not after:            Fri 09 Jun 2023 21:13:56 +0000
asID:                     266152
IP address blocks:        45.6.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d1:97:06:61:3d:3f:8f:49:52:35:76:21:12:f1:58:80:62:58:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43CFF50DFBCC9374EC20BBF975BA99950554A5A8
        Validity
            Not Before: Jun 10 21:08:56 2022 GMT
            Not After : Jun  9 21:13:56 2023 GMT
        Subject: CN=DE491DA5B46791E6BC528ABE0D804A16939FF732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:9c:bc:6d:c9:26:d0:e7:19:06:a7:86:a4:
                    32:9f:c3:5c:03:21:33:71:cd:c3:84:25:c0:2f:fa:
                    d3:1f:2b:ad:6e:d4:2e:83:3d:00:49:da:06:db:83:
                    ce:d1:e9:20:b1:5b:4a:29:5b:74:d4:d5:ff:3e:c1:
                    17:91:f3:87:97:33:87:2f:7c:26:7a:4c:35:f4:79:
                    e4:6f:e6:84:c8:50:fe:dc:7f:65:d9:a7:37:11:5f:
                    ff:37:ee:7d:65:91:c9:0a:ca:e2:2c:12:1e:76:7f:
                    a1:3c:aa:be:98:62:13:da:08:14:67:60:0d:51:26:
                    c0:c6:a3:8a:96:67:50:ef:91:38:23:c0:b6:83:c7:
                    46:3b:77:61:80:18:3d:7b:1f:17:c0:a8:4f:fe:09:
                    42:68:a6:41:45:f1:c2:c0:9c:47:03:90:77:71:99:
                    a3:6c:93:87:7a:90:54:ce:74:6b:ce:85:d8:03:ee:
                    bc:bd:a3:22:9f:39:9c:1d:33:de:56:d4:ce:45:65:
                    a5:0e:25:5f:52:6b:0d:0c:20:81:23:ee:aa:e0:3a:
                    21:dd:0d:d9:52:ad:65:56:50:90:ea:e9:ec:f7:6b:
                    33:84:34:1c:a5:cb:83:5f:e6:cf:28:7e:6a:89:ed:
                    f8:97:67:15:d7:70:fa:0d:c2:05:5a:31:f1:80:2f:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:1D:A5:B4:67:91:E6:BC:52:8A:BE:0D:80:4A:16:93:9F:F7:32
            X509v3 Authority Key Identifier:
                keyid:43:CF:F5:0D:FB:CC:93:74:EC:20:BB:F9:75:BA:99:95:05:54:A5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43CFF50DFBCC9374EC20BBF975BA99950554A5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33382e302f32342d3234203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ee:e0:db:4b:64:9d:3a:cf:f3:06:bf:a2:e6:f0:22:a3:1f:
         0a:ad:3b:fb:ce:3d:3a:eb:03:c3:93:51:23:2a:61:84:d3:d0:
         b7:58:a8:e1:b2:6b:71:22:41:64:0c:3d:4c:7e:b0:2a:dd:b8:
         14:13:8f:12:0d:c8:6e:2b:91:e0:ed:95:a6:2d:9f:e2:a9:3f:
         ba:89:0a:5c:ef:7a:35:f9:22:8b:10:ec:b2:90:89:95:af:bc:
         27:7f:a3:91:3e:98:55:d6:23:12:eb:80:2d:d6:08:84:b8:47:
         30:d3:39:51:e3:03:3e:4c:74:7c:89:e4:4d:b7:8a:1b:c4:85:
         e5:22:4d:31:82:d9:9f:61:24:56:f0:4a:d2:e0:14:0e:66:00:
         00:01:74:60:28:67:11:ab:da:76:ab:32:6e:70:03:7c:be:f3:
         65:a2:f3:11:45:df:56:e0:f4:65:27:11:06:81:7d:b0:87:e9:
         35:4c:1e:6e:d3:fc:93:6d:0d:c4:68:b1:fb:da:9e:7c:21:20:
         1a:db:7f:57:eb:fc:f5:82:70:05:e4:c9:ca:25:12:e5:57:cf:
         d5:c9:6d:94:51:ea:8b:94:18:2c:38:bc:a0:2f:03:dc:39:63:
         ef:a9:95:ea:3c:5a:8b:48:fa:36:62:c2:f2:01:17:f2:18:0e:
         07:a3:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:32 2023 by rpki-client on console.sobornost.net