Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa
File:                     34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa (raw, json)
Hash identifier:          LXx9gfMXdBK3jciIpVKMkumw0PhicKmdbi4EkCroPOc=
Subject key identifier:   A5:C0:CB:9C:38:DE:DF:7A:7C:EF:B4:F6:7D:C6:94:EF:C1:FA:00:EE
Certificate issuer:       /CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
Certificate serial:       64F139CCFB85E15B001D414A22A84E3757F5919E
Authority key identifier: 17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa
Signing time:             Wed 26 Jul 2023 14:12:16 +0000
ROA not before:           Wed 26 Jul 2023 14:07:16 +0000
ROA not after:            Wed 24 Jul 2024 14:12:16 +0000
asID:                     268070
IP address blocks:        45.167.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f1:39:cc:fb:85:e1:5b:00:1d:41:4a:22:a8:4e:37:57:f5:91:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
        Validity
            Not Before: Jul 26 14:07:16 2023 GMT
            Not After : Jul 24 14:12:16 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:2a:13:c5:5d:86:80:c9:a3:a2:29:16:fd:
                    07:74:2b:90:db:95:3e:e6:44:20:1c:76:1f:25:38:
                    c0:d4:42:5d:1c:5e:10:0f:e5:14:b2:0a:f9:e3:1b:
                    43:d9:0d:fe:3a:d6:5c:5b:58:16:14:10:b9:3f:a8:
                    08:d7:89:b9:c7:d0:d7:17:68:ab:4b:fb:5e:85:90:
                    67:03:1a:55:fe:3d:40:b0:23:26:36:c7:e8:8c:79:
                    6f:d6:15:b5:6d:7f:3f:08:9e:04:8f:ff:2d:8d:8e:
                    64:40:63:1e:b8:ab:b6:31:61:b3:f8:63:9c:15:91:
                    4d:c0:ad:c2:10:a7:8d:0f:9e:43:05:1d:7e:1d:bc:
                    81:58:a9:52:d1:b3:33:8b:bf:28:71:69:3a:f3:0d:
                    cf:fb:b6:6b:6a:3a:f4:b2:5b:6e:95:9c:3f:71:07:
                    85:25:75:b8:25:b5:f7:46:bc:cd:f6:c6:29:38:da:
                    d4:49:ec:be:73:eb:10:cb:7c:55:ad:c5:94:77:85:
                    73:09:84:75:6a:9d:c2:be:3b:dd:4b:99:f0:d1:83:
                    11:d8:ac:28:4b:1b:7a:8e:23:85:92:0d:cf:02:a4:
                    c8:b7:06:9d:34:7d:b2:ff:f5:f3:88:a9:9c:4c:5e:
                    e4:c9:2c:83:bf:ab:2d:46:75:0f:1d:25:5c:38:a5:
                    10:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C0:CB:9C:38:DE:DF:7A:7C:EF:B4:F6:7D:C6:94:EF:C1:FA:00:EE
            X509v3 Authority Key Identifier:
                keyid:17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:bd:1c:63:9e:c7:71:78:6c:84:2e:0f:49:a1:c4:29:a8:
         e8:03:43:f5:ef:0d:91:70:4b:92:17:5f:7d:33:d8:12:c2:f9:
         d3:d2:a8:51:bc:6e:ec:7a:70:5a:90:7b:ea:d8:29:14:03:0f:
         62:62:97:29:d4:79:1d:c4:68:ef:3e:75:68:21:39:44:aa:bb:
         f7:22:90:05:ee:8d:e1:a0:2a:08:f0:45:bc:d9:04:90:59:c5:
         0b:89:9d:ea:5e:ca:fb:6e:05:2a:7f:17:ae:81:37:75:61:7c:
         7a:a7:f9:40:b2:b5:6e:72:35:d6:52:83:d6:59:ef:ba:d1:36:
         e6:0f:3f:c9:66:0a:f0:00:11:0c:3e:12:24:48:a5:ee:3e:e6:
         16:a0:88:12:b2:a9:52:33:6e:af:9d:89:79:64:9e:b7:8a:62:
         92:85:99:f8:b6:d0:98:02:35:cc:47:4b:a1:7c:22:a7:4a:ab:
         4c:50:3c:04:b1:98:d9:b3:fa:44:21:48:8e:3b:8c:b3:a9:76:
         40:54:ad:0d:0e:b3:16:5b:f7:55:4f:11:fa:aa:bc:d4:75:c8:
         c5:98:98:4c:30:de:83:b8:cd:b1:85:4e:ac:05:06:57:75:a6:
         05:25:a4:66:d1:c4:9e:73:9f:a3:7f:3a:6a:54:16:36:55:6f:
         9a:1e:a7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org