Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32332d3233203d3e20323639353339.roa
File:                     34352e3138372e3136302e302f32332d3233203d3e20323639353339.roa (raw, json)
Hash identifier:          cZY9TCoMZZtpDnVp0OxO1eHIV6aUQ5a+cE4xp6j6djE=
Subject key identifier:   02:AF:50:7D:2A:26:DF:2F:F0:F7:B1:D2:F2:AA:F3:3E:1A:72:90:11
Certificate issuer:       /CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
Certificate serial:       77AB876905C90002E4F170BE70D1733FDF5546AE
Authority key identifier: C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32332d3233203d3e20323639353339.roa
Signing time:             Fri 16 Jun 2023 15:03:39 +0000
ROA not before:           Fri 16 Jun 2023 14:58:39 +0000
ROA not after:            Fri 14 Jun 2024 15:03:39 +0000
asID:                     269539
IP address blocks:        45.187.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:87:69:05:c9:00:02:e4:f1:70:be:70:d1:73:3f:df:55:46:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Validity
            Not Before: Jun 16 14:58:39 2023 GMT
            Not After : Jun 14 15:03:39 2024 GMT
        Subject: CN=02AF507D2A26DF2FF0F7B1D2F2AAF33E1A729011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:4e:a7:aa:7e:9b:f9:68:e6:22:8e:89:27:
                    8d:87:2f:fc:b3:a4:22:30:c6:62:95:c5:f3:06:cb:
                    46:8c:1a:07:e1:64:82:7f:0d:ac:12:b2:66:09:78:
                    74:13:f6:a8:e4:a2:3f:8b:c5:2f:41:66:a0:f4:78:
                    97:47:8d:ce:6b:d1:84:bd:c9:75:8e:71:9b:17:4d:
                    f4:2f:c4:09:70:c1:2c:fd:76:ad:4b:98:8e:b7:45:
                    b8:a4:8b:f6:6a:cb:b2:69:d6:2b:3b:8b:e2:3f:91:
                    cb:8e:3e:3c:12:dd:a0:60:bf:b3:cb:3e:5b:3a:a4:
                    fb:e8:90:61:67:bb:4d:21:fc:13:a0:c6:62:62:ff:
                    cd:81:ad:b3:6b:1e:ea:ce:be:05:5c:8f:56:d0:22:
                    d1:cb:7e:6e:30:9b:11:9a:b1:43:52:e6:5c:2f:cc:
                    2b:84:81:aa:fa:be:6d:fc:44:87:c3:e5:6d:7f:92:
                    39:ed:ea:f4:e6:7d:f1:ad:7f:6d:c5:e0:fb:9a:e6:
                    85:96:09:18:85:d6:b1:3d:ad:4a:7a:f4:82:72:c1:
                    6d:69:48:25:ca:1b:1d:f5:9f:0f:0e:9c:ff:e6:1a:
                    26:49:a1:4a:af:74:9c:2a:4a:a7:e6:29:c2:08:92:
                    0c:d5:49:f2:15:f9:8b:64:92:22:2f:f8:f3:f5:70:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:50:7D:2A:26:DF:2F:F0:F7:B1:D2:F2:AA:F3:3E:1A:72:90:11
            X509v3 Authority Key Identifier:
                keyid:C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32332d3233203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:2a:2a:b0:6a:c5:ff:19:ee:a8:5e:58:ef:36:80:3d:7f:e5:
         bf:83:4c:84:e7:39:87:59:9c:59:2f:07:5a:25:1f:b6:48:84:
         4d:d7:56:07:da:62:aa:46:de:b4:39:ab:69:5f:c9:d8:f3:53:
         5c:46:1e:6d:54:e0:52:a9:16:2e:eb:54:2e:33:f8:e0:a7:93:
         56:48:71:74:fd:b1:fb:4a:f0:22:90:01:72:fb:6f:c0:dd:d1:
         cb:ab:27:bc:36:ef:84:a4:97:df:02:31:a0:62:5b:0a:22:74:
         10:85:19:ae:38:85:62:c2:3d:31:8c:1d:87:bc:97:d2:2c:18:
         dc:f9:36:a3:89:a4:cf:df:29:d2:14:10:ee:3a:b9:a0:88:5b:
         64:e7:44:b2:25:65:83:f6:22:e7:55:8d:3d:d1:57:dd:8a:10:
         81:23:3c:74:46:72:b7:4a:ca:5a:0d:59:16:97:96:1d:a0:4a:
         3d:37:bb:60:3a:08:6a:95:c2:12:01:0c:69:96:67:41:dc:83:
         ca:30:fd:44:61:25:e7:cc:6d:a8:c9:6f:83:28:16:85:fd:94:
         ae:b2:b2:5e:89:bf:96:e6:91:f5:d5:ae:79:32:c0:01:83:51:
         b8:1f:e9:45:25:0e:fc:93:93:e5:7d:26:b4:15:a7:72:0e:c3:
         48:a3:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org