Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/34352e3136352e31322e302f32322d3234203d3e20323638363633.roa
File:                     34352e3136352e31322e302f32322d3234203d3e20323638363633.roa (raw, json)
Hash identifier:          cgyzTWCRTf2ALMKqlgepE11Q4V9HwyuGHUjfnphc9Is=
Subject key identifier:   87:7B:F8:F2:65:A1:A8:00:69:A9:37:BE:10:44:48:42:5D:03:A6:1F
Certificate issuer:       /CN=7E560DCC8A6B6EBDE98B1162591E415D8174DEA2
Certificate serial:       325FFD1D590C45082357AB8EB88E2B71B1C5F21A
Authority key identifier: 7E:56:0D:CC:8A:6B:6E:BD:E9:8B:11:62:59:1E:41:5D:81:74:DE:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/34352e3136352e31322e302f32322d3234203d3e20323638363633.roa
Signing time:             Tue 05 Mar 2024 21:25:17 +0000
ROA not before:           Tue 05 Mar 2024 21:20:17 +0000
ROA not after:            Tue 04 Mar 2025 21:25:17 +0000
asID:                     268663
IP address blocks:        45.165.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5f:fd:1d:59:0c:45:08:23:57:ab:8e:b8:8e:2b:71:b1:c5:f2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E560DCC8A6B6EBDE98B1162591E415D8174DEA2
        Validity
            Not Before: Mar  5 21:20:17 2024 GMT
            Not After : Mar  4 21:25:17 2025 GMT
        Subject: CN=877BF8F265A1A80069A937BE104448425D03A61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:d4:1e:5e:5b:d4:9d:e3:69:c4:4d:96:6d:
                    b6:96:f9:39:7f:a3:23:dc:41:12:3e:6d:d1:ac:c5:
                    81:f4:da:5a:09:93:5e:82:05:4d:1d:0f:8d:97:9e:
                    14:09:b9:3d:0c:bc:48:4a:00:d3:92:93:2a:22:70:
                    46:cb:ad:46:0a:a6:82:09:f2:30:0c:4f:2b:72:fe:
                    c5:28:b9:22:41:55:26:ec:6e:ff:5c:ae:ef:c9:ac:
                    09:72:48:92:ce:97:bd:09:2a:6b:ca:5f:51:24:1f:
                    67:17:ef:d7:98:84:7a:65:70:da:e8:98:bd:97:20:
                    16:ba:8f:48:2b:b1:f9:0d:1d:1b:5f:c6:96:30:9e:
                    70:f1:16:7c:dc:28:e9:34:16:56:d3:ca:a2:47:88:
                    cf:30:e9:b1:5e:16:60:ea:d0:48:96:92:06:6c:30:
                    34:0f:96:cd:ba:c1:1e:64:20:6d:23:a5:ef:23:1a:
                    33:5b:b2:73:72:43:a3:ed:d7:68:57:54:14:23:28:
                    18:2f:3c:86:fb:70:2f:79:52:1f:24:26:1f:35:51:
                    9e:a9:a7:64:08:58:a7:e9:14:d1:98:a7:3d:16:16:
                    e8:b8:a1:ac:b9:bd:43:cf:11:f5:76:99:ed:7c:23:
                    e8:f3:78:c5:58:fc:16:e9:ce:02:17:06:13:02:d9:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7B:F8:F2:65:A1:A8:00:69:A9:37:BE:10:44:48:42:5D:03:A6:1F
            X509v3 Authority Key Identifier:
                keyid:7E:56:0D:CC:8A:6B:6E:BD:E9:8B:11:62:59:1E:41:5D:81:74:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E560DCC8A6B6EBDE98B1162591E415D8174DEA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/34352e3136352e31322e302f32322d3234203d3e20323638363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:e5:96:7f:b7:7b:4b:54:13:1f:83:9c:c5:0b:de:0a:c6:11:
         1c:58:61:be:1a:89:0f:33:4f:2b:7f:a4:a7:77:0e:a0:c7:12:
         f6:0d:c3:14:a2:06:84:b1:3d:db:05:fd:61:c7:a2:ea:a1:5f:
         ad:f3:66:aa:2a:da:1a:ff:ea:51:9e:05:7b:b2:d9:92:5e:7e:
         31:16:e3:f8:30:8b:f7:86:96:9a:db:01:ba:7f:99:a6:96:38:
         19:0d:d1:30:1b:fa:46:02:ba:2d:24:b8:71:70:73:31:89:71:
         0a:e7:d8:39:29:0d:7b:6e:fd:f3:ba:d3:86:32:cd:9f:1b:85:
         39:28:89:c0:b0:d7:68:f0:c3:17:2a:ce:ab:13:2f:6a:1b:76:
         5c:e0:90:d7:27:77:05:f1:ab:f5:40:23:a2:1b:34:68:4e:22:
         5e:48:c6:4f:af:26:39:3a:87:27:d1:4f:33:ae:71:2c:5e:2e:
         41:2c:71:1e:53:e0:d5:f3:99:21:a2:d8:af:43:b7:00:6f:35:
         bb:ec:91:fc:0e:e3:25:2d:c6:11:97:2d:37:60:8a:29:49:d5:
         ae:7a:e7:04:65:97:dd:af:3e:bb:72:38:a8:ad:6d:3b:41:3c:
         f9:76:9a:27:a4:58:c3:f0:2a:35:26:6f:6e:3f:32:db:ef:ac:
         09:a3:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org