Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/0/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa
File:                     34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa (raw, json)
Hash identifier:          73SGf9fJC7VYgAtUAgQdJ+DO+lTwJjEmRAOJBok/Kzs=
Subject key identifier:   D8:24:67:43:E3:48:C7:14:0D:26:33:E1:42:50:A7:62:7C:B2:C4:73
Certificate issuer:       /CN=D617A39796495A7CB63E719476CBBABD2A1BF3E2
Certificate serial:       6F38AD5CF80189DCF260F248B7060145B29805B5
Authority key identifier: D6:17:A3:97:96:49:5A:7C:B6:3E:71:94:76:CB:BA:BD:2A:1B:F3:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D617A39796495A7CB63E719476CBBABD2A1BF3E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/0/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa
Signing time:             Tue 26 Mar 2024 17:00:00 +0000
ROA not before:           Tue 26 Mar 2024 16:55:00 +0000
ROA not after:            Tue 25 Mar 2025 17:00:00 +0000
asID:                     269449
IP address blocks:        45.186.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:38:ad:5c:f8:01:89:dc:f2:60:f2:48:b7:06:01:45:b2:98:05:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D617A39796495A7CB63E719476CBBABD2A1BF3E2
        Validity
            Not Before: Mar 26 16:55:00 2024 GMT
            Not After : Mar 25 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e3:4e:cf:4c:08:ae:dc:2a:0d:3a:fb:b0:28:
                    75:b6:8d:2f:87:8d:2b:0d:3b:8b:db:4e:18:17:5b:
                    b2:f4:f4:90:a4:c0:1d:0f:53:20:72:2c:6a:40:54:
                    a2:a9:83:28:ac:eb:24:bb:4a:47:95:1f:88:6c:1d:
                    f3:6a:14:c7:02:87:47:d2:43:1b:f8:ad:78:b9:55:
                    bf:80:d3:56:52:99:15:da:33:ba:9c:b3:4e:05:90:
                    c8:4e:36:8c:c3:9e:c2:38:66:15:d3:2e:28:7b:b5:
                    65:11:01:06:b4:2f:cd:ff:a2:28:37:ff:97:8c:eb:
                    7a:28:e2:a6:de:ca:a7:77:2a:99:a1:cf:80:dc:b4:
                    ad:09:69:c1:e3:31:98:4a:c6:1d:eb:61:d8:35:19:
                    e9:de:65:75:6f:0d:84:53:26:fc:b4:58:c0:e1:36:
                    e2:8d:75:7a:49:58:3c:6a:fc:da:be:16:a8:44:f5:
                    77:b3:d3:71:9c:4c:f7:60:cb:b1:65:f2:50:54:fd:
                    e4:30:f2:21:eb:4e:98:a1:ea:b0:9c:35:f0:f2:e5:
                    75:39:73:b7:25:93:ed:d7:cb:1a:de:28:c7:2b:f6:
                    c5:ee:34:d8:6d:bd:9d:37:49:69:c9:ca:58:1a:7b:
                    29:e5:a2:0c:74:ad:e8:5f:ee:f5:51:92:81:3f:fe:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:24:67:43:E3:48:C7:14:0D:26:33:E1:42:50:A7:62:7C:B2:C4:73
            X509v3 Authority Key Identifier:
                keyid:D6:17:A3:97:96:49:5A:7C:B6:3E:71:94:76:CB:BA:BD:2A:1B:F3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/0/D617A39796495A7CB63E719476CBBABD2A1BF3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D617A39796495A7CB63E719476CBBABD2A1BF3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/0/34352e3138362e3137362e302f32322d3234203d3e20323639343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:40:15:b6:81:9e:8d:02:4d:d0:4e:77:b5:1e:8e:94:fb:b5:
         b4:6c:45:e5:c4:62:75:54:59:00:06:3f:c7:2a:51:a1:1f:4e:
         ac:93:c5:3b:d6:cb:8a:b8:a4:88:fc:b2:cb:15:98:83:00:24:
         1a:96:af:1f:72:d9:93:4f:9e:41:01:83:1c:fa:57:68:9a:6a:
         a3:c7:3b:47:6b:18:48:33:dd:00:b8:30:1a:8f:e4:af:d1:15:
         ff:ef:6c:3e:1c:c4:ae:52:d7:fa:f6:16:59:22:2d:15:98:1c:
         c1:32:d8:45:f9:4a:d2:1b:4a:a4:19:2d:fa:94:41:4d:a2:d6:
         85:24:9d:a2:1f:40:79:b9:8a:5f:90:b1:4e:1f:63:58:60:00:
         82:6f:19:f8:72:fa:93:dc:42:0b:14:d3:20:3b:52:40:8e:d0:
         60:4e:9f:fb:a2:6e:50:eb:b2:6e:f0:19:a2:ea:97:eb:80:af:
         b0:a2:c7:2b:a9:e8:ee:11:d0:38:15:76:d1:65:9f:05:ca:cd:
         23:89:ca:22:43:fb:d9:18:74:9a:dc:56:75:ef:30:6c:0b:f9:
         5f:0f:a1:5f:72:01:3d:fb:57:0f:4f:24:ac:a2:f5:2b:12:c3:
         19:fa:a0:63:6e:2f:41:28:a6:55:e8:0b:b0:28:54:c4:55:d3:
         bf:07:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org