Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/34352e3137372e3133362e302f32322d3234203d3e20323638393833.roa
File:                     34352e3137372e3133362e302f32322d3234203d3e20323638393833.roa (raw, json)
Hash identifier:          X3jlz/EjzmovsuvxQ9U10aOsFNlPBS6EGUPOg7fPc64=
Subject key identifier:   CE:70:C6:C0:07:2C:1B:9D:14:A4:2D:C5:64:29:8A:DE:E9:69:02:71
Certificate issuer:       /CN=2A790B703FC57FE302B0FA296C3687361CFE41E3
Certificate serial:       7CBBA39CDF4B26F552EDBAB0C48D97B4A6E45F48
Authority key identifier: 2A:79:0B:70:3F:C5:7F:E3:02:B0:FA:29:6C:36:87:36:1C:FE:41:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A790B703FC57FE302B0FA296C3687361CFE41E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/34352e3137372e3133362e302f32322d3234203d3e20323638393833.roa
Signing time:             Tue 30 May 2023 18:42:00 +0000
ROA not before:           Tue 30 May 2023 18:37:00 +0000
ROA not after:            Tue 28 May 2024 18:42:00 +0000
asID:                     268983
IP address blocks:        45.177.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bb:a3:9c:df:4b:26:f5:52:ed:ba:b0:c4:8d:97:b4:a6:e4:5f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A790B703FC57FE302B0FA296C3687361CFE41E3
        Validity
            Not Before: May 30 18:37:00 2023 GMT
            Not After : May 28 18:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:97:b0:96:da:9e:be:7e:9b:a2:66:7d:3e:
                    da:d5:63:31:33:34:b3:f5:8e:72:d0:2a:37:2c:88:
                    c8:0e:57:c2:d2:de:f2:c1:34:4d:89:11:61:0d:e0:
                    2e:c2:8e:3c:8e:9d:19:96:fa:7a:8a:72:72:6d:ab:
                    05:b9:74:99:f2:94:73:1c:b8:b7:49:47:f3:f0:13:
                    35:94:99:ee:74:f8:ab:8a:de:7a:ec:7a:de:33:8c:
                    02:14:68:5c:67:7d:a9:e4:b6:1a:f1:e5:59:ba:0e:
                    29:f1:56:ac:61:b4:06:f4:13:d4:82:61:c7:69:1d:
                    8f:0d:20:19:b0:a8:a2:93:e1:2f:5f:79:2b:e3:f5:
                    5c:62:56:41:da:ce:09:b4:5b:cd:91:83:01:a3:54:
                    06:09:cd:6e:4a:a4:58:ea:c2:ab:ad:30:4f:0e:3d:
                    8e:9a:ab:94:2b:99:74:59:25:3e:07:45:75:a6:ff:
                    b4:63:56:35:14:60:01:2a:18:7d:13:a1:5c:a4:4a:
                    1f:27:13:64:95:ca:14:a3:ba:ce:c3:82:d5:82:d3:
                    12:bd:5d:92:ba:64:e8:51:a7:ff:e4:0f:f5:07:fe:
                    62:70:69:dd:11:69:0a:cc:9a:04:fe:5c:a1:06:f1:
                    13:35:49:53:fa:8a:3f:79:d8:0b:7d:13:10:16:7b:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:70:C6:C0:07:2C:1B:9D:14:A4:2D:C5:64:29:8A:DE:E9:69:02:71
            X509v3 Authority Key Identifier:
                keyid:2A:79:0B:70:3F:C5:7F:E3:02:B0:FA:29:6C:36:87:36:1C:FE:41:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/2A790B703FC57FE302B0FA296C3687361CFE41E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A790B703FC57FE302B0FA296C3687361CFE41E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/34352e3137372e3133362e302f32322d3234203d3e20323638393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:03:91:31:71:28:e5:4e:51:90:23:b0:a5:aa:e9:c5:8a:
         af:d9:09:aa:64:da:d0:89:95:7f:ea:e2:83:90:97:db:3d:dc:
         9c:d3:b8:f4:2b:0f:a6:45:61:a0:45:79:66:38:35:20:f5:00:
         0f:ed:d8:17:d4:94:06:55:43:c9:6e:08:01:f4:5b:88:df:b7:
         d3:d2:81:30:b9:f7:6c:17:e4:cb:a6:37:e1:b4:fd:b2:98:9b:
         0c:c9:42:66:67:41:d4:f9:ef:c3:51:3f:0b:1c:3f:c3:4d:c5:
         26:70:47:80:f6:0a:86:38:9d:42:67:ee:02:34:9b:5b:ca:62:
         b0:64:fc:12:b2:5d:80:03:57:58:21:40:13:cc:ec:3a:66:60:
         4f:25:83:0e:f7:fe:ba:8d:07:6d:96:39:c6:fa:47:d8:04:94:
         26:05:f2:bf:d9:09:cb:07:aa:12:47:3b:c9:04:86:60:ce:b6:
         27:ce:4a:9c:3b:18:1e:89:fe:14:6d:95:b3:45:ea:e7:ad:ed:
         11:32:d0:f2:56:93:38:c6:6a:18:da:dd:b7:9f:0e:f9:d3:ec:
         24:e4:ff:ac:d3:2c:8c:4a:37:23:17:ba:7f:99:b4:d7:f8:a4:
         47:43:91:e8:c4:ac:df:86:b5:e7:07:65:99:e1:d5:13:2f:5e:
         a3:26:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org