Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          ysxDTCmbZZOin1wGKHcxDRqkFk7qlDPT6EVFB3ExOYA=
Subject key identifier:   E1:1C:7D:23:B4:FC:81:04:8A:A3:E7:9C:69:D2:29:2C:4A:87:FF:45
Certificate issuer:       /CN=0363C300551869E92BAF6218A3622188861DBE67
Certificate serial:       162F01503F65B7FF224F0735A77B76E2C51DA8A9
Authority key identifier: 03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa
Signing time:             Mon 15 Jan 2024 22:30:46 +0000
ROA not before:           Mon 15 Jan 2024 22:25:46 +0000
ROA not after:            Mon 13 Jan 2025 22:30:46 +0000
asID:                     271632
IP address blocks:        45.172.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2f:01:50:3f:65:b7:ff:22:4f:07:35:a7:7b:76:e2:c5:1d:a8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0363C300551869E92BAF6218A3622188861DBE67
        Validity
            Not Before: Jan 15 22:25:46 2024 GMT
            Not After : Jan 13 22:30:46 2025 GMT
        Subject: CN=E11C7D23B4FC81048AA3E79C69D2292C4A87FF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:01:4b:f7:a3:40:75:2e:71:92:b6:25:21:
                    5f:66:1f:27:23:db:ce:d8:d4:83:74:fd:1c:47:a3:
                    fe:23:96:95:04:5a:33:46:25:c5:c8:a6:ba:9c:6e:
                    2b:5e:58:21:38:21:22:64:39:e9:f4:66:9a:ce:68:
                    7f:26:ac:80:a5:d0:d2:70:58:bc:d8:b0:fd:45:49:
                    ce:56:ad:cf:59:8f:f3:fe:73:10:fa:d2:a8:0c:f8:
                    08:1b:f0:28:ee:61:19:21:48:d5:aa:aa:e6:e5:fa:
                    4e:91:ea:26:4c:11:af:fc:29:db:4d:ee:b3:b8:c5:
                    a2:f9:57:b0:4e:ed:f6:60:e6:1b:25:0e:5a:f4:d7:
                    3a:67:09:42:5d:c4:26:ad:b9:e1:d2:a8:d6:68:a8:
                    99:95:59:16:1d:6c:29:b4:7b:b3:2b:ad:da:7c:56:
                    55:2f:95:2e:b8:d6:56:26:53:a9:ab:ce:ab:f6:18:
                    17:aa:ae:f4:87:19:81:ff:fc:64:ba:ef:01:32:a8:
                    41:df:ae:8b:d7:8a:e2:4b:38:68:63:bd:2e:c2:0b:
                    f2:b4:2b:9a:bc:93:ca:7a:0a:43:cb:7b:42:f3:6f:
                    3a:75:55:cf:eb:42:be:52:e3:f9:1b:b6:b9:24:a7:
                    53:2a:25:f2:05:f2:c4:d7:56:63:5e:35:65:f1:64:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1C:7D:23:B4:FC:81:04:8A:A3:E7:9C:69:D2:29:2C:4A:87:FF:45
            X509v3 Authority Key Identifier:
                keyid:03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/0363C300551869E92BAF6218A3622188861DBE67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139332e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:64:cf:ff:fb:cd:22:55:9c:d5:b8:58:9e:7c:55:95:1a:98:
         d5:92:ce:f5:43:0f:47:a6:f4:11:9e:15:c1:e8:58:64:23:bc:
         d1:65:9c:59:72:54:5a:ca:cf:37:ba:c6:94:67:70:ef:e4:b3:
         37:40:a6:a7:84:b3:bc:96:bc:fb:9e:d4:35:00:80:19:fc:90:
         9e:27:27:8d:6d:0e:8f:61:b9:f8:7a:1d:e4:e0:60:e7:48:3d:
         d5:71:a8:24:12:2a:22:55:51:17:9c:ed:89:5e:04:a5:79:82:
         a4:05:49:b5:0a:ae:80:b0:4d:04:07:ed:59:ba:f9:c8:e9:ae:
         dc:0d:4c:0c:0a:12:e2:6a:ed:46:7d:3a:2a:fd:62:f6:48:62:
         4e:57:5c:c6:ce:a4:52:c3:00:e8:92:a5:4f:d6:5a:b1:5e:08:
         2b:56:5b:48:f3:e5:b5:eb:33:f3:04:43:44:32:67:3c:44:3a:
         b9:7c:d6:28:54:d3:78:90:56:3d:f1:ec:d0:95:7b:6d:cf:6c:
         0a:f1:f9:d7:38:86:ab:96:0b:9d:ff:d4:3e:00:3e:d0:0c:13:
         e5:8f:28:d3:ee:68:c6:2b:01:d9:c7:4b:71:13:7b:45:6f:1b:
         57:37:cc:6e:61:3e:8c:3f:f5:8a:28:af:a0:0e:82:92:88:58:
         dc:ad:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org