Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa
File:                     34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (raw, json)
Hash identifier:          b5UenwI2EOmjQo32ybaqof0lOM9V52hzDFCLRqy2f9k=
Subject key identifier:   61:B6:0D:7E:0A:5A:8E:AD:D1:84:CA:E7:9A:DF:A0:28:6C:BC:DE:97
Certificate issuer:       /CN=C422E0B8C0893646916FBC7155048940DBDE3512
Certificate serial:       554D5C01276FFC1E1A60BEF3C29240C8092E4EEC
Authority key identifier: C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C422E0B8C0893646916FBC7155048940DBDE3512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa
Signing time:             Wed 13 Mar 2024 20:01:55 +0000
ROA not before:           Wed 13 Mar 2024 19:56:55 +0000
ROA not after:            Wed 12 Mar 2025 20:01:55 +0000
asID:                     268727
IP address blocks:        45.171.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4d:5c:01:27:6f:fc:1e:1a:60:be:f3:c2:92:40:c8:09:2e:4e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C422E0B8C0893646916FBC7155048940DBDE3512
        Validity
            Not Before: Mar 13 19:56:55 2024 GMT
            Not After : Mar 12 20:01:55 2025 GMT
        Subject: CN=61B60D7E0A5A8EADD184CAE79ADFA0286CBCDE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:6f:52:ac:45:66:8d:59:c7:3c:26:cf:28:
                    8b:00:df:28:8f:a1:e2:e2:1d:7d:0e:cb:06:49:d2:
                    cd:5d:31:84:2e:f1:05:6b:98:94:b6:26:29:92:31:
                    4e:7a:69:f3:72:43:22:1d:d0:b2:e3:b0:c2:ef:39:
                    a5:2d:88:e7:88:5a:d2:95:da:37:f2:cd:48:d1:d0:
                    32:ca:f8:75:72:0d:48:6f:4c:0c:19:29:3a:f4:1f:
                    86:77:84:49:89:7b:51:0f:23:98:fc:f2:d5:92:9a:
                    47:28:7c:e5:6c:d2:a9:6c:13:2f:e9:9a:4c:d6:68:
                    9c:d0:6d:c1:c1:42:b3:be:4e:57:8a:48:44:8b:28:
                    bb:cc:90:74:32:d2:bf:07:57:b2:97:e8:9b:56:37:
                    70:1b:e8:e9:4d:a4:80:33:ee:ad:d2:2e:d8:b8:f2:
                    df:53:14:10:07:a6:14:c2:79:64:5f:3f:49:e4:da:
                    c8:25:7e:44:a5:4a:c5:42:c1:e5:9c:de:cd:da:af:
                    cd:ed:2a:75:ed:25:87:83:19:1f:12:41:ed:98:e5:
                    31:e3:9b:57:84:9d:96:9d:d9:28:74:ef:7e:d0:87:
                    7c:23:6a:c7:95:3d:60:c5:ce:a2:86:12:74:e3:ff:
                    d7:74:6d:1e:57:26:86:ed:0c:e7:e4:1d:9b:6c:11:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B6:0D:7E:0A:5A:8E:AD:D1:84:CA:E7:9A:DF:A0:28:6C:BC:DE:97
            X509v3 Authority Key Identifier:
                keyid:C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/C422E0B8C0893646916FBC7155048940DBDE3512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C422E0B8C0893646916FBC7155048940DBDE3512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:54:aa:5b:71:77:8c:70:da:04:55:3b:bb:07:3d:c2:d9:74:
         4f:44:c7:b8:9c:ed:16:a4:ff:0d:26:67:b0:df:c7:74:97:86:
         42:1d:9f:fb:60:bd:07:c4:ec:de:94:48:54:d5:16:0e:09:77:
         d6:b3:ee:6c:56:23:c5:ca:e6:70:93:13:7e:8d:55:5a:d7:98:
         a0:df:7e:a4:6e:49:a7:e7:cf:c4:30:83:6a:5d:bc:b4:42:d9:
         c5:f2:b5:e9:e8:35:9d:0c:6f:31:9e:99:38:9c:73:b3:bd:d0:
         2f:fd:96:a7:c3:1d:78:09:49:b7:3f:4a:b4:89:0b:01:27:13:
         b7:6a:4d:ac:b8:16:35:db:ab:0e:bc:4c:df:9e:d4:93:6b:36:
         b7:e3:0c:dd:7f:67:5a:e8:86:ca:e2:6d:48:32:9c:fa:62:c5:
         f4:00:82:7f:12:5e:67:f2:81:ac:a8:a5:1d:bd:46:e3:11:82:
         9e:3c:9d:50:3a:58:69:7f:fd:62:db:1f:37:0c:c6:9a:1d:26:
         32:bb:40:72:a1:7c:0c:51:50:87:20:1c:d6:59:59:05:fe:89:
         63:95:ae:01:fd:1b:bd:96:48:1b:7a:94:9e:9e:c0:1f:cb:4b:
         88:66:43:df:de:3f:eb:7d:b8:ce:43:96:7b:2c:59:d2:f6:41:
         d3:e5:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org