Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/34352e3136312e3134342e302f32322d3234203d3e20323638353130.roa
File:                     34352e3136312e3134342e302f32322d3234203d3e20323638353130.roa (raw, json)
Hash identifier:          HyG5Bjs2+tLb0q+yGrTkTAKOld7Ypz9dWawhFgqVTcM=
Subject key identifier:   67:9A:A3:9F:6C:4D:91:3A:08:08:6E:86:15:96:E4:4D:12:34:CB:F2
Certificate issuer:       /CN=7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68
Certificate serial:       2AC96E7FDA1013C1D288CC87ED2EDA6B7D859BB4
Authority key identifier: 7E:60:45:AB:7A:15:F2:07:3A:2C:CE:34:ED:D7:C6:A6:EB:04:DC:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/34352e3136312e3134342e302f32322d3234203d3e20323638353130.roa
Signing time:             Fri 19 May 2023 02:02:42 +0000
ROA not before:           Fri 19 May 2023 01:57:42 +0000
ROA not after:            Fri 17 May 2024 02:02:42 +0000
asID:                     268510
IP address blocks:        45.161.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c9:6e:7f:da:10:13:c1:d2:88:cc:87:ed:2e:da:6b:7d:85:9b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68
        Validity
            Not Before: May 19 01:57:42 2023 GMT
            Not After : May 17 02:02:42 2024 GMT
        Subject: CN=679AA39F6C4D913A08086E861596E44D1234CBF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1c:00:f3:9a:3d:d3:bb:78:3e:c2:f1:75:6d:
                    6e:c8:ff:c3:79:f0:ef:c6:b5:ea:8f:72:a2:d1:64:
                    1f:a2:fb:a8:eb:dd:eb:d8:ef:ef:84:7a:bc:e0:28:
                    6f:23:e3:b6:e8:a2:ed:7e:24:65:12:a1:db:ec:75:
                    1d:9c:57:c0:44:ae:b4:25:1b:f0:67:b6:f5:8c:15:
                    4d:3d:e4:9c:3e:15:56:7d:fe:bb:f9:72:87:63:c9:
                    e3:f6:94:eb:d8:f8:dd:5f:e2:c1:17:db:14:03:eb:
                    ed:00:87:de:8c:f9:82:af:e0:ae:eb:2b:df:53:be:
                    00:ee:e5:eb:18:5e:73:eb:a6:90:12:28:3e:ca:b5:
                    47:12:85:00:30:3d:9d:e7:ea:3d:89:7f:22:9e:c1:
                    ee:75:88:ad:08:a8:a0:cb:bc:22:67:0e:6c:75:b6:
                    3a:ed:bb:02:97:66:46:d7:73:9f:dd:12:43:41:fb:
                    1e:d2:0f:94:3f:c7:b1:06:34:ba:b8:95:b7:70:4b:
                    f7:b4:8f:92:c1:91:25:f0:13:bf:dd:72:59:d0:89:
                    2d:ca:77:a7:67:a5:21:85:70:48:1c:f3:1c:91:20:
                    02:ec:9a:c4:c5:24:e8:c1:95:b5:37:57:de:69:6c:
                    31:e8:52:3a:61:46:07:1c:8d:3a:8b:44:fa:be:a6:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9A:A3:9F:6C:4D:91:3A:08:08:6E:86:15:96:E4:4D:12:34:CB:F2
            X509v3 Authority Key Identifier:
                keyid:7E:60:45:AB:7A:15:F2:07:3A:2C:CE:34:ED:D7:C6:A6:EB:04:DC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E6045AB7A15F2073A2CCE34EDD7C6A6EB04DC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5Fmj9EGcbrrt88ZA1gK9hMej3mzrX5ktxAj9L4ureWm/0/34352e3136312e3134342e302f32322d3234203d3e20323638353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:db:e3:91:92:2d:9e:fd:4d:7d:82:30:7b:9d:8a:4d:d7:8e:
         ce:3f:0b:f5:b7:3b:c9:9e:fc:9f:d1:05:1f:ea:75:5b:05:74:
         da:51:c2:7e:55:8c:35:03:0f:4d:8c:1e:75:cc:f4:d3:0f:d0:
         aa:72:8d:c7:49:16:14:fd:7b:09:a0:bd:28:e1:f6:8b:e9:93:
         b0:ce:c4:e1:77:d4:1c:70:56:04:b3:7c:c2:51:90:4f:71:38:
         6e:88:ff:32:44:88:09:3e:64:43:26:b9:2e:f4:9f:f1:24:97:
         d2:69:45:49:d4:ce:64:fa:3a:e3:c8:67:fa:b4:98:41:7d:8d:
         43:79:a0:c7:47:55:da:5e:1d:16:ee:37:de:5c:d1:2c:04:4f:
         a7:6e:d8:13:f0:30:5f:8e:ae:a7:90:0c:d4:3f:b9:b8:ce:62:
         a5:a2:c8:69:69:80:67:a3:35:4a:01:32:bf:cc:69:ab:75:aa:
         70:46:7b:5f:aa:ec:5d:30:4d:02:bb:a3:c1:1c:dc:23:32:ff:
         ef:0c:91:a0:88:1c:e3:0a:9e:77:73:a2:e9:5a:75:3a:cc:f6:
         d8:3d:7d:27:bb:9f:ea:8f:c2:a0:56:6c:c2:e7:28:92:3f:29:
         7c:51:f0:a1:10:16:e7:39:b0:1a:bc:ed:ef:93:5d:1d:dc:8c:
         6f:fe:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org