Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3332203d3e20323638303237.roa
File:                     34352e3136382e33362e302f32322d3332203d3e20323638303237.roa (raw, json)
Hash identifier:          1CtBLIoDiJqRJV/48Raw7+Td2w/yl34JMAwHLCEtGAs=
Subject key identifier:   73:0F:D2:12:6B:9F:F5:50:50:BF:96:4B:98:6D:9D:3A:9F:09:00:0B
Certificate issuer:       /CN=B7DB3E0A126651244960D7A1605514B31F2F15AE
Certificate serial:       55A490E4A3C51C11D87832A12EFB5A08CDE70C27
Authority key identifier: B7:DB:3E:0A:12:66:51:24:49:60:D7:A1:60:55:14:B3:1F:2F:15:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7DB3E0A126651244960D7A1605514B31F2F15AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3332203d3e20323638303237.roa
Signing time:             Fri 16 Feb 2024 16:48:03 +0000
ROA not before:           Fri 16 Feb 2024 16:43:03 +0000
ROA not after:            Fri 14 Feb 2025 16:48:03 +0000
asID:                     268027
IP address blocks:        45.168.36.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a4:90:e4:a3:c5:1c:11:d8:78:32:a1:2e:fb:5a:08:cd:e7:0c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7DB3E0A126651244960D7A1605514B31F2F15AE
        Validity
            Not Before: Feb 16 16:43:03 2024 GMT
            Not After : Feb 14 16:48:03 2025 GMT
        Subject: CN=730FD2126B9FF55050BF964B986D9D3A9F09000B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:c6:99:59:cf:fa:96:4b:04:89:bc:30:13:
                    16:3e:67:90:ed:3c:58:61:3f:d5:e9:3b:aa:08:71:
                    44:52:14:23:65:a4:3b:66:c6:c8:b6:67:38:b8:e3:
                    7a:81:56:db:58:79:2c:7d:3e:9f:bb:03:07:48:0d:
                    26:f8:80:da:49:f1:fc:91:19:88:b4:11:65:f0:85:
                    3c:cc:77:10:4a:8f:dd:51:4f:47:57:e7:be:23:c7:
                    a8:a2:34:41:4c:be:46:d9:75:cb:d1:39:30:10:f3:
                    29:a0:84:4c:da:4b:4d:43:84:7e:86:72:df:d3:ef:
                    73:70:ec:cf:b7:ee:9f:f7:d6:bb:95:b5:0f:b4:f3:
                    31:8c:44:5e:79:14:72:c1:f4:d7:65:ce:59:ac:60:
                    b0:2d:cf:68:7c:05:2d:b9:38:05:e4:a9:fb:3a:9f:
                    30:ff:b4:40:e8:7b:30:78:7f:66:17:47:93:cc:70:
                    ea:de:29:dc:58:18:9e:68:62:a8:2f:58:99:d5:8c:
                    33:19:4b:8e:e9:59:ff:68:0b:05:4d:41:54:f0:6e:
                    47:5b:3a:6e:2b:fd:81:f1:0b:98:4a:bb:bf:26:31:
                    18:8f:47:6a:b0:ac:ee:5a:d5:85:72:99:b3:05:23:
                    40:a7:7a:8d:6f:1c:9b:22:ec:a9:9f:96:a4:0c:0f:
                    bf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0F:D2:12:6B:9F:F5:50:50:BF:96:4B:98:6D:9D:3A:9F:09:00:0B
            X509v3 Authority Key Identifier:
                keyid:B7:DB:3E:0A:12:66:51:24:49:60:D7:A1:60:55:14:B3:1F:2F:15:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/B7DB3E0A126651244960D7A1605514B31F2F15AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7DB3E0A126651244960D7A1605514B31F2F15AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32322d3332203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:45:26:cc:94:62:86:ab:10:91:4a:ad:dd:21:b9:b8:28:
         1b:01:96:2d:cc:80:f9:a2:a1:0d:24:ec:a4:e1:be:de:71:e8:
         d5:ba:5d:96:7f:f4:8a:e9:3a:7e:fe:30:59:40:7b:8d:27:bb:
         89:7d:6d:db:36:7a:ad:cf:96:96:06:6f:f1:78:46:70:85:df:
         73:87:da:4b:57:05:eb:78:db:e2:9b:5a:d2:f5:de:91:5b:2f:
         e1:5c:4d:39:73:b3:e4:f0:16:ab:5d:72:b3:c2:1c:74:96:1d:
         48:05:f4:df:a5:ba:27:04:80:fe:d4:d6:58:7f:ec:2f:3b:e3:
         58:bc:50:94:f6:10:bb:54:8e:b2:e5:1c:84:b3:46:56:87:1c:
         b5:8c:ef:19:59:8b:96:0c:b4:eb:88:7a:ac:e9:7a:74:21:15:
         8f:85:3a:05:c9:50:01:6c:63:42:05:5e:be:da:87:e1:8b:91:
         de:7e:8e:11:ce:1a:94:42:89:73:6c:1f:8e:56:f1:8d:41:2d:
         e6:c0:c1:1a:ee:7d:f1:b8:35:e8:c1:6d:f6:a8:b8:bc:1c:a6:
         27:94:d1:93:0a:60:ad:c7:55:51:08:bf:78:ab:51:18:9e:7c:
         a6:00:44:d1:ea:32:95:6a:8a:5e:84:69:70:be:30:72:04:87:
         12:d9:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org