Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          /7tqb/ICwuV88EWLPwJ60ni/WcD80YYVs5ymc7l0oP4=
Subject key identifier:   65:6A:3C:BA:7A:6A:83:67:D1:49:8D:A4:E7:74:CF:2C:1A:E9:4C:9A
Certificate issuer:       /CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
Certificate serial:       7DBD73D42C909AA65F292D5601E7B1F87B4F8366
Authority key identifier: 1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa
Signing time:             Tue 29 Aug 2023 17:00:00 +0000
ROA not before:           Tue 29 Aug 2023 16:55:00 +0000
ROA not after:            Tue 27 Aug 2024 17:00:00 +0000
asID:                     269014
IP address blocks:        45.176.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bd:73:d4:2c:90:9a:a6:5f:29:2d:56:01:e7:b1:f8:7b:4f:83:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
        Validity
            Not Before: Aug 29 16:55:00 2023 GMT
            Not After : Aug 27 17:00:00 2024 GMT
        Subject: CN=3082010A0282010100CD7BF21FC034436CDBB99929A3E5482E04738DB5C575288675DF8843AC8B72FE3A8D2BC38F9FECFD64461DDEA1C6D2FB04EC750D5664947F3C4BB89DD1638C47A21CFA888E7AE58F36EE736265C1DEC901F155477343E290B53957E36F7BCDED89CB7104FF1AE15093F9D13825FA75BEDA9BF51C077953DBA217E7510A4A9559C56E4160E0868171FC3D129C5A22FC7E806F61488E487ED04C0C043881111765B16AFD595EE578982CC3D7F85778B371DC386A8B3823BB97E694D6D2CC1A88C1D5D8CCCAC3D2F7F0E3F6470C08A7BB17939709AC3CE703FB92357A00E67D9EE6D7C76679196B381DE9D9BCD9F1016866B16D227B86742ADEDF952A722A04D27D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:f2:1f:c0:34:43:6c:db:b9:99:29:a3:e5:
                    48:2e:04:73:8d:b5:c5:75:28:86:75:df:88:43:ac:
                    8b:72:fe:3a:8d:2b:c3:8f:9f:ec:fd:64:46:1d:de:
                    a1:c6:d2:fb:04:ec:75:0d:56:64:94:7f:3c:4b:b8:
                    9d:d1:63:8c:47:a2:1c:fa:88:8e:7a:e5:8f:36:ee:
                    73:62:65:c1:de:c9:01:f1:55:47:73:43:e2:90:b5:
                    39:57:e3:6f:7b:cd:ed:89:cb:71:04:ff:1a:e1:50:
                    93:f9:d1:38:25:fa:75:be:da:9b:f5:1c:07:79:53:
                    db:a2:17:e7:51:0a:4a:95:59:c5:6e:41:60:e0:86:
                    81:71:fc:3d:12:9c:5a:22:fc:7e:80:6f:61:48:8e:
                    48:7e:d0:4c:0c:04:38:81:11:17:65:b1:6a:fd:59:
                    5e:e5:78:98:2c:c3:d7:f8:57:78:b3:71:dc:38:6a:
                    8b:38:23:bb:97:e6:94:d6:d2:cc:1a:88:c1:d5:d8:
                    cc:ca:c3:d2:f7:f0:e3:f6:47:0c:08:a7:bb:17:93:
                    97:09:ac:3c:e7:03:fb:92:35:7a:00:e6:7d:9e:e6:
                    d7:c7:66:79:19:6b:38:1d:e9:d9:bc:d9:f1:01:68:
                    66:b1:6d:22:7b:86:74:2a:de:df:95:2a:72:2a:04:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6A:3C:BA:7A:6A:83:67:D1:49:8D:A4:E7:74:CF:2C:1A:E9:4C:9A
            X509v3 Authority Key Identifier:
                keyid:1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f9:b2:bb:12:29:95:89:71:b0:1a:bd:2a:6c:f4:fc:bf:1b:
         ad:ec:b5:28:e1:97:20:49:92:1f:f7:a6:87:8f:07:f4:0f:e6:
         9b:67:6b:52:bb:35:93:93:50:3f:e7:cd:a6:f3:0b:c3:c1:5d:
         a3:b8:09:d9:b5:2d:c8:1d:5e:37:2b:14:fb:53:96:55:59:51:
         8d:90:de:2c:d7:58:a2:9a:39:b6:b4:41:a1:75:62:04:c0:a7:
         b2:1f:6e:13:ad:d6:68:d3:c4:63:49:50:02:ce:0c:77:66:08:
         c4:1d:8a:e0:91:dc:73:ac:cc:d8:f3:84:e1:6b:b4:e3:09:ce:
         35:66:81:f2:dc:42:b1:b1:4e:1f:8e:dd:bc:16:e7:ef:1a:95:
         5b:fe:f8:8b:ba:1c:0e:3b:93:0d:34:5e:3b:fc:90:32:0a:e6:
         82:98:2d:6e:46:75:41:86:56:e8:1e:da:9f:34:a5:79:05:5c:
         49:ca:31:47:3f:74:f2:c6:2b:7b:18:01:42:ed:5e:35:cd:2c:
         3d:57:48:3c:37:1b:d4:d9:67:d7:b7:db:ae:fa:b0:94:df:50:
         d2:c6:33:01:05:c6:b4:61:10:f9:53:2f:93:78:90:63:2b:bc:
         e3:93:08:55:72:51:16:c8:54:e9:17:94:12:92:87:cf:9d:ed:
         b7:38:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org