Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/34352e372e3139362e302f32332d3233203d3e20323636363038.roa
File:                     34352e372e3139362e302f32332d3233203d3e20323636363038.roa (raw, json)
Hash identifier:          YU+6XG57PUMHRxdmZxZsspIympIrGUG/gtQeQJQJHWY=
Subject key identifier:   F1:72:86:8E:D5:33:E2:C9:46:7F:25:F0:A7:A5:0C:CC:87:7D:D8:AA
Certificate issuer:       /CN=CF178172195A182C594FB724DD7B684E9210DA90
Certificate serial:       29FAF3D55A15709323CEF0EA04D55A718EE1B1
Authority key identifier: CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/34352e372e3139362e302f32332d3233203d3e20323636363038.roa
Signing time:             Fri 27 Oct 2023 21:15:19 +0000
ROA not before:           Fri 27 Oct 2023 21:10:19 +0000
ROA not after:            Fri 25 Oct 2024 21:15:19 +0000
asID:                     266608
IP address blocks:        45.7.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fa:f3:d5:5a:15:70:93:23:ce:f0:ea:04:d5:5a:71:8e:e1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF178172195A182C594FB724DD7B684E9210DA90
        Validity
            Not Before: Oct 27 21:10:19 2023 GMT
            Not After : Oct 25 21:15:19 2024 GMT
        Subject: CN=F172868ED533E2C9467F25F0A7A50CCC877DD8AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:53:1d:c0:ad:c1:cd:35:84:db:b0:24:23:
                    c8:81:f2:6d:55:3b:7c:e8:20:11:13:3c:a3:62:96:
                    3a:1b:ab:57:64:68:ae:fd:12:7a:e0:82:7c:6f:06:
                    5d:0d:87:16:48:fc:38:a5:9b:9d:26:40:63:11:80:
                    84:8c:a9:cc:1e:e7:85:7f:29:e5:19:6a:f8:10:4d:
                    be:9e:bc:8d:be:3d:c9:8d:88:19:bc:0a:90:b1:19:
                    95:89:9d:8c:02:9f:ff:df:88:5e:4c:0c:ff:9d:8d:
                    3f:d9:c0:e9:95:52:26:15:15:7c:8b:f6:e7:43:70:
                    80:ac:41:21:25:a1:c7:a6:05:d1:09:97:27:3e:ab:
                    9b:41:94:92:83:e4:a4:c1:07:11:af:ae:e1:1e:cf:
                    9c:a8:94:ad:b4:e0:d3:03:17:4e:4f:c5:fe:70:83:
                    d6:5f:5c:57:a3:4b:6c:8c:ba:27:a4:ae:d4:49:79:
                    49:b6:11:bc:84:30:36:71:de:7c:f1:fa:fc:f4:6e:
                    a2:9b:ce:e4:e6:13:45:26:6e:52:79:35:db:7d:82:
                    00:78:1e:30:e8:54:79:3f:c8:9c:43:2d:dd:69:88:
                    ab:89:50:7c:ee:72:a2:25:09:f6:c9:e4:9b:41:ef:
                    66:1d:1a:a2:30:79:1f:61:86:10:96:ba:a3:7e:fd:
                    a7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:72:86:8E:D5:33:E2:C9:46:7F:25:F0:A7:A5:0C:CC:87:7D:D8:AA
            X509v3 Authority Key Identifier:
                keyid:CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/34352e372e3139362e302f32332d3233203d3e20323636363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:a1:e3:1e:7e:55:4d:a4:56:54:78:82:54:eb:19:46:c0:67:
         f0:63:48:33:80:54:51:6f:32:c5:a4:a3:cb:81:04:ea:9c:a1:
         9c:40:8c:8b:61:10:9f:84:b5:90:16:ba:56:d0:ad:0a:fa:cd:
         7b:35:38:05:6d:f5:5a:ab:18:b0:52:a0:bc:93:4a:7f:7a:c3:
         da:3d:d6:7a:2e:7c:b4:c0:46:30:0f:b7:7b:d6:91:3f:56:a7:
         77:f8:a5:d6:70:ec:b8:52:09:18:7a:f8:0d:27:51:ad:63:a9:
         92:ce:68:5a:52:1b:43:42:28:a1:6f:c0:ff:5e:66:c4:6e:3d:
         fb:88:f0:b0:5a:6c:8f:e5:ea:a2:b7:90:a2:2d:18:5a:f9:4e:
         ff:12:96:9f:59:41:81:9e:bd:e3:4a:d4:bf:72:90:ca:e1:3b:
         3d:a5:2b:6a:d9:a9:ed:ca:e8:4f:b4:6a:db:72:f7:69:49:db:
         7e:26:e6:44:a3:89:48:63:35:56:a9:b9:11:af:67:2c:ca:b0:
         7a:09:50:e7:ee:bc:33:ab:1f:36:81:44:28:c3:40:d0:6d:e7:
         bf:de:e5:67:42:39:2c:23:0c:12:fd:88:3c:ff:c7:80:9f:a6:
         08:2b:1c:0d:be:ea:e1:2a:ad:5a:27:b6:c4:2f:31:34:fb:31:
         e3:e3:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org