Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          5vetu+6HsCXn8LHCwt+gop3dvMmpa6xZQNRoxLTr3LI=
Subject key identifier:   A5:31:3C:40:8E:E6:FD:6F:09:46:84:24:0C:BC:06:8C:4C:AD:DA:25
Certificate issuer:       /CN=B776754A2C8B100218B061AA79BE9186F191500D
Certificate serial:       519DB74336E5482D5B7CC84AEBFF5AB58604CCF5
Authority key identifier: B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
Signing time:             Sat 11 Nov 2023 20:59:10 +0000
ROA not before:           Sat 11 Nov 2023 20:54:10 +0000
ROA not after:            Sat 09 Nov 2024 20:59:10 +0000
asID:                     267027
IP address blocks:        45.227.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9d:b7:43:36:e5:48:2d:5b:7c:c8:4a:eb:ff:5a:b5:86:04:cc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Validity
            Not Before: Nov 11 20:54:10 2023 GMT
            Not After : Nov  9 20:59:10 2024 GMT
        Subject: CN=3082010A0282010100CFA7FA097D7D91E2B91BF56FCC698937A35E5C26D7A67259CFE3A567AE94B07B0A6B5DF546B4A53D9D7C1C70A80C019BC4E302CEE21D22F7B1E32AB69E433CE34FCE3B5B6FE61BAC5A9AB3364991111DD149B749065CB5E6AF3B8C7ED8C5C6E5ACE7EBB691A3BE8EB7CF6FE55C5BB5B416FF7F714E3EB99426332618490238C28B84CE1C13E2D1F4F957BCEA00A6BC779611718CFC5637AA785455A1CDC829F7A410A3FD6A2168EF82175D79A21DD2A2401DE029027CB35750A84E89769277D3D08D4A8367B5762B969482105E31F595030CE404EC0C99AAB4D816BCE4CDB799A6E50A1ADABD3AD776A3EFEE06F61901BBF6AE5C310B82125C715255ABE5658B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:fa:09:7d:7d:91:e2:b9:1b:f5:6f:cc:69:
                    89:37:a3:5e:5c:26:d7:a6:72:59:cf:e3:a5:67:ae:
                    94:b0:7b:0a:6b:5d:f5:46:b4:a5:3d:9d:7c:1c:70:
                    a8:0c:01:9b:c4:e3:02:ce:e2:1d:22:f7:b1:e3:2a:
                    b6:9e:43:3c:e3:4f:ce:3b:5b:6f:e6:1b:ac:5a:9a:
                    b3:36:49:91:11:1d:d1:49:b7:49:06:5c:b5:e6:af:
                    3b:8c:7e:d8:c5:c6:e5:ac:e7:eb:b6:91:a3:be:8e:
                    b7:cf:6f:e5:5c:5b:b5:b4:16:ff:7f:71:4e:3e:b9:
                    94:26:33:26:18:49:02:38:c2:8b:84:ce:1c:13:e2:
                    d1:f4:f9:57:bc:ea:00:a6:bc:77:96:11:71:8c:fc:
                    56:37:aa:78:54:55:a1:cd:c8:29:f7:a4:10:a3:fd:
                    6a:21:68:ef:82:17:5d:79:a2:1d:d2:a2:40:1d:e0:
                    29:02:7c:b3:57:50:a8:4e:89:76:92:77:d3:d0:8d:
                    4a:83:67:b5:76:2b:96:94:82:10:5e:31:f5:95:03:
                    0c:e4:04:ec:0c:99:aa:b4:d8:16:bc:e4:cd:b7:99:
                    a6:e5:0a:1a:da:bd:3a:d7:76:a3:ef:ee:06:f6:19:
                    01:bb:f6:ae:5c:31:0b:82:12:5c:71:52:55:ab:e5:
                    65:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:31:3C:40:8E:E6:FD:6F:09:46:84:24:0C:BC:06:8C:4C:AD:DA:25
            X509v3 Authority Key Identifier:
                keyid:B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:98:35:cf:17:8f:4d:7b:2a:4b:d5:f6:0d:62:62:ef:c0:18:
         5e:df:c6:92:b5:23:b9:9f:05:ce:57:55:03:e7:b8:d5:16:c7:
         d7:c4:b9:63:ac:51:02:12:42:d4:c1:1b:66:2e:57:d4:f9:da:
         dc:2c:b4:da:1f:d5:07:ae:67:b8:f9:70:c6:13:c0:53:e9:a5:
         76:a1:81:db:39:4a:69:8e:45:07:8b:df:27:96:90:b3:35:54:
         46:7e:9c:c9:cb:27:be:b8:d4:c9:fc:c1:30:ae:72:7b:02:1f:
         e9:8b:5f:f6:82:26:91:1b:ac:a2:07:27:d8:8d:1e:ae:03:08:
         8b:ca:69:56:e9:fb:3c:96:b8:50:a6:f0:6b:01:a1:c6:89:c6:
         d3:d6:93:b2:48:72:bf:bb:69:08:00:09:7a:bc:51:a1:53:eb:
         2e:41:56:53:b2:f6:21:d8:c8:1b:d2:9d:4b:bb:f5:48:85:72:
         96:70:61:dd:69:ee:a9:de:ef:28:3d:c8:a1:aa:ac:df:d5:98:
         5b:59:44:ea:8a:b5:b7:ed:69:bf:2f:6e:91:3c:58:7b:7b:e9:
         aa:58:6d:21:0f:ea:53:c8:5e:eb:dd:30:56:ea:1e:e0:95:7e:
         84:ee:4e:85:b8:4e:fa:24:de:ec:fb:5e:db:f3:5a:59:78:38:
         c5:38:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org