Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32342d3234203d3e20323638303237.roa
File:                     34352e3136382e33362e302f32342d3234203d3e20323638303237.roa (raw, json)
Hash identifier:          mDEI5p4s3TVu5+WMwuN4BJkchuQPRjt0qqNsm+azqVY=
Subject key identifier:   08:48:F9:3A:9B:9B:88:4F:1B:5B:69:09:FC:00:E2:C8:19:19:99:11
Certificate issuer:       /CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
Certificate serial:       615C97F7080DAE9EC094235FF416A887D1AF438F
Authority key identifier: AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32342d3234203d3e20323638303237.roa
Signing time:             Tue 18 Apr 2023 12:34:16 +0000
ROA not before:           Tue 18 Apr 2023 12:29:16 +0000
ROA not after:            Tue 16 Apr 2024 12:34:16 +0000
asID:                     268027
IP address blocks:        45.168.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5c:97:f7:08:0d:ae:9e:c0:94:23:5f:f4:16:a8:87:d1:af:43:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF36C02867146BE4C9A8983F670F14A3CFFF8A0
        Validity
            Not Before: Apr 18 12:29:16 2023 GMT
            Not After : Apr 16 12:34:16 2024 GMT
        Subject: CN=0848F93A9B9B884F1B5B6909FC00E2C819199911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:5c:9d:c7:4e:33:a9:98:71:fc:c4:eb:90:
                    c5:77:b5:97:87:fc:ea:f0:9f:b9:87:53:8b:69:05:
                    aa:95:23:9c:62:68:22:10:90:38:7b:67:a7:bf:2e:
                    22:ae:40:cf:ad:a0:a6:f2:21:c3:dc:66:5c:51:c0:
                    53:5e:e4:8c:2c:cf:2b:6e:6b:43:9e:b4:7a:52:7b:
                    27:78:ca:87:64:04:a9:b2:64:d9:4a:6c:ba:7b:6a:
                    f4:b7:e5:0f:b0:d0:fc:e5:99:34:9b:48:9b:7b:2e:
                    9a:3c:ea:95:8a:9b:c3:55:ac:d2:a6:8e:6e:23:b9:
                    6d:75:b8:1d:ad:65:d6:a7:e3:bb:85:0c:f8:07:a3:
                    5c:2c:77:6b:a2:11:39:c8:73:b4:57:0d:16:08:f6:
                    dc:d6:47:47:71:a1:1c:82:a7:66:46:0d:74:a8:8d:
                    8a:88:58:1a:70:ed:06:92:42:67:2e:4f:48:d7:2f:
                    0b:21:9b:c7:1a:36:f6:82:ca:3e:38:a6:1b:8c:13:
                    8f:7a:db:96:77:55:ff:55:b0:13:f8:8b:95:44:e8:
                    9b:43:cd:e2:e9:73:ec:23:d3:84:42:1a:9d:41:40:
                    7e:bf:fb:97:5e:ab:74:33:6e:11:db:e0:ca:0c:ad:
                    57:bb:f2:a8:91:e2:f1:26:71:ac:23:91:8d:d6:5b:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:48:F9:3A:9B:9B:88:4F:1B:5B:69:09:FC:00:E2:C8:19:19:99:11
            X509v3 Authority Key Identifier:
                keyid:AB:F3:6C:02:86:71:46:BE:4C:9A:89:83:F6:70:F1:4A:3C:FF:F8:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ABF36C02867146BE4C9A8983F670F14A3CFFF8A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33362e302f32342d3234203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:b5:64:b4:fa:7f:36:a6:37:f9:7b:63:37:d7:51:1b:42:8b:
         27:c9:a3:c7:59:18:5e:58:f4:4e:7f:b3:fd:df:94:29:7f:c4:
         6b:39:5d:fb:ad:4f:70:74:c4:47:3c:8c:47:4b:b2:45:59:d5:
         02:e9:73:30:74:f5:15:4b:7e:ea:33:bd:3a:6f:e6:cc:46:24:
         f0:67:f5:1c:2a:98:b5:92:cf:3b:65:06:bc:49:3c:62:3b:fd:
         97:96:56:91:41:9c:46:b0:0d:30:13:4b:ce:b8:1d:c3:79:6f:
         97:cc:17:b6:1f:cf:5e:f0:58:71:1e:44:b2:88:f5:19:b0:2b:
         4a:2a:02:05:ea:bd:01:4a:89:03:44:64:2a:64:b9:c0:77:67:
         a3:09:de:6e:d7:ae:44:37:f8:e8:ce:c6:b5:66:2f:2f:ce:86:
         5c:35:e0:ac:8c:be:bb:5b:a7:8e:9e:0d:77:df:84:51:5b:c8:
         39:b3:cc:1c:7d:a6:26:ea:f7:67:78:69:4e:4b:57:4a:7d:df:
         34:64:bf:cd:4c:c9:b1:94:a6:ed:25:86:55:2a:35:1c:54:21:
         c4:a3:33:a5:87:70:a3:58:65:ec:26:b7:53:21:35:d5:9c:29:
         7b:55:dc:da:26:90:1a:0a:6e:58:d7:1b:b2:1d:db:4c:66:09:
         b9:33:7e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org