Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa
File:                     34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (raw, json)
Hash identifier:          Or9Tv+8pxuUfZN5l/87lKZ571u8GQBlB7IEx7DKZlbo=
Subject key identifier:   EF:F1:D1:F5:A5:AE:F6:F4:AA:3F:AD:7A:EF:8A:A0:F1:13:39:D3:09
Certificate issuer:       /CN=5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7
Certificate serial:       673E00A035198DC7499A887EEEE1FC9B228BFA14
Authority key identifier: 5D:15:44:51:4B:DB:86:48:BB:33:24:6F:CF:0E:AA:3D:FC:2E:97:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa
Signing time:             Fri 01 Mar 2024 20:01:04 +0000
ROA not before:           Fri 01 Mar 2024 19:56:04 +0000
ROA not after:            Fri 28 Feb 2025 20:01:04 +0000
asID:                     269039
IP address blocks:        45.177.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3e:00:a0:35:19:8d:c7:49:9a:88:7e:ee:e1:fc:9b:22:8b:fa:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7
        Validity
            Not Before: Mar  1 19:56:04 2024 GMT
            Not After : Feb 28 20:01:04 2025 GMT
        Subject: CN=EFF1D1F5A5AEF6F4AA3FAD7AEF8AA0F11339D309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:b0:7a:7e:3e:71:b8:c7:fb:ab:17:43:ee:
                    b4:ca:9a:09:0b:61:4b:12:71:b4:d1:c7:13:e2:78:
                    e6:c7:42:f6:6a:ea:15:e0:f4:e1:f3:36:e0:da:8e:
                    ab:4b:e1:76:86:b1:ac:5b:8f:21:b3:1f:41:b5:d8:
                    97:b3:b3:6f:1b:ed:d3:a2:93:b4:b4:f0:35:93:a4:
                    51:fb:97:e7:a0:b0:df:b6:7e:3d:17:ec:65:a8:59:
                    29:9b:4b:e6:13:ba:59:e9:b3:0b:0a:3c:70:f6:46:
                    57:ce:55:86:c9:1d:4e:2d:59:54:46:55:79:3f:01:
                    6f:c9:b9:7c:22:3f:3f:3b:e7:7e:96:6f:08:d8:40:
                    50:10:3f:61:cd:9e:e3:20:eb:87:10:ec:b3:a9:50:
                    fd:11:e6:b5:ab:3b:7a:e3:7d:0a:1b:2e:39:04:a1:
                    f0:1b:54:47:18:f3:ce:c3:76:ad:66:7e:45:0a:85:
                    cb:5b:db:ad:e6:2f:aa:da:4b:03:f1:6d:40:b3:db:
                    3c:ce:4a:f1:48:4f:d5:22:41:13:18:5a:82:db:00:
                    df:cf:68:73:be:6b:42:93:ba:a9:c6:f2:e2:0f:56:
                    25:41:4a:e0:bd:af:54:fe:7e:65:58:2b:f2:2a:d4:
                    6c:7a:8b:7d:19:54:b9:86:48:4f:55:98:67:40:77:
                    ba:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F1:D1:F5:A5:AE:F6:F4:AA:3F:AD:7A:EF:8A:A0:F1:13:39:D3:09
            X509v3 Authority Key Identifier:
                keyid:5D:15:44:51:4B:DB:86:48:BB:33:24:6F:CF:0E:AA:3D:FC:2E:97:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1544514BDB8648BB33246FCF0EAA3DFC2E97E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/0/34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:14:df:2a:d2:61:c7:b4:24:f5:c6:3c:bd:c6:39:a2:0a:
         18:eb:f4:f5:44:90:27:24:c8:31:5b:20:2a:f9:33:f0:ee:d3:
         fa:a0:35:7e:2f:97:7b:67:2f:73:e4:03:84:d1:ae:31:c5:5f:
         d5:1d:2d:38:35:c6:39:38:22:a4:95:d0:7c:7f:60:e0:64:49:
         0e:b4:16:17:44:81:13:c5:11:08:b2:7b:3d:f6:8c:71:4f:79:
         ff:6e:42:6f:d7:4f:c8:e5:96:35:89:f4:c4:ac:bd:32:46:84:
         a1:07:6c:e3:ec:e9:9d:9b:cb:44:60:ca:10:d9:d4:79:5b:f3:
         bb:2b:e0:d3:f2:20:d1:9f:c3:c7:74:86:64:5b:2a:2f:0a:7f:
         9e:bf:61:c4:3d:17:bc:b5:26:77:cf:45:97:49:27:bc:eb:46:
         ac:29:0a:3c:c7:67:09:f4:a1:01:74:55:47:c0:67:be:0f:7f:
         cc:b4:35:0c:97:2f:b3:02:d1:0f:c7:30:cd:5d:f0:37:a1:eb:
         14:66:fc:6b:80:27:ca:c1:1d:5e:b6:6c:7b:2d:fb:33:23:f3:
         d2:24:4d:b4:3d:9e:94:42:33:9f:95:4b:96:19:56:52:ee:8b:
         b6:61:62:80:4d:3f:09:e6:fb:f8:a1:03:31:46:15:29:88:fd:
         09:ba:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org