Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/34352e3137352e37322e302f32322d3234203d3e20323638383838.roa
File:                     34352e3137352e37322e302f32322d3234203d3e20323638383838.roa (raw, json)
Hash identifier:          J9vmI/FnvQueTWxWWQzU38z+kWC8BvJKi3jV7T/vt+Y=
Subject key identifier:   37:A1:2E:B8:14:F9:FE:12:3C:1E:D6:0A:5D:85:49:9D:54:C3:17:B6
Certificate issuer:       /CN=644F0E6C277C2D5FE0F38192DD116F10AC91E33A
Certificate serial:       0EBAA374A7C5CB2EDF789FC5A37F1777FA61F16F
Authority key identifier: 64:4F:0E:6C:27:7C:2D:5F:E0:F3:81:92:DD:11:6F:10:AC:91:E3:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644F0E6C277C2D5FE0F38192DD116F10AC91E33A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/34352e3137352e37322e302f32322d3234203d3e20323638383838.roa
Signing time:             Fri 22 Sep 2023 18:12:00 +0000
ROA not before:           Fri 22 Sep 2023 18:07:00 +0000
ROA not after:            Fri 20 Sep 2024 18:12:00 +0000
asID:                     268888
IP address blocks:        45.175.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ba:a3:74:a7:c5:cb:2e:df:78:9f:c5:a3:7f:17:77:fa:61:f1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644F0E6C277C2D5FE0F38192DD116F10AC91E33A
        Validity
            Not Before: Sep 22 18:07:00 2023 GMT
            Not After : Sep 20 18:12:00 2024 GMT
        Subject: CN=37A12EB814F9FE123C1ED60A5D85499D54C317B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:92:bf:30:19:5d:f5:d6:88:ac:f2:99:b5:
                    3f:a8:56:3e:76:6d:7c:4c:70:0f:5d:02:57:27:18:
                    ca:db:20:fb:41:a9:77:03:b4:03:f3:1d:e5:14:d3:
                    a7:8b:03:8f:df:5f:96:92:6e:ca:e7:57:27:34:55:
                    89:3b:3e:e9:30:2a:5a:ef:2d:51:b4:d4:1d:fb:ca:
                    2b:9e:67:4b:0f:a5:96:b6:52:f2:05:a1:38:b7:e8:
                    15:f0:6f:f2:82:eb:24:ad:c4:4b:04:41:15:82:df:
                    d3:2b:d8:e6:f1:70:98:61:41:fc:8a:f6:06:45:a7:
                    33:40:da:22:d2:9f:34:e8:58:c9:b6:23:a8:80:6d:
                    de:fc:79:c7:23:f0:cc:e5:33:84:3a:37:80:50:18:
                    33:97:7c:a6:c1:ca:d6:50:ba:e0:a6:d0:3f:7b:e6:
                    ff:f6:b4:25:5a:a1:aa:13:af:f9:a2:1a:c2:d1:54:
                    3e:64:43:8d:8b:2d:d2:27:4b:5c:b8:05:72:38:bb:
                    65:2e:61:a7:32:19:3c:f3:bd:47:93:6e:da:91:05:
                    df:16:b5:ba:e4:4c:d7:78:68:2d:82:d5:2d:81:c5:
                    79:cb:ce:4e:06:f9:2b:89:bb:60:f1:e8:49:ed:6e:
                    34:2f:ea:55:43:e9:e7:d3:67:11:b2:a4:10:dc:37:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A1:2E:B8:14:F9:FE:12:3C:1E:D6:0A:5D:85:49:9D:54:C3:17:B6
            X509v3 Authority Key Identifier:
                keyid:64:4F:0E:6C:27:7C:2D:5F:E0:F3:81:92:DD:11:6F:10:AC:91:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/644F0E6C277C2D5FE0F38192DD116F10AC91E33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644F0E6C277C2D5FE0F38192DD116F10AC91E33A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36kVjZs1trcbSWpZ7ayEt1ZgCiJxKbAJhSWX8ZQ2vYpi/0/34352e3137352e37322e302f32322d3234203d3e20323638383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:c1:ef:d2:b9:06:0a:02:a8:6c:d9:a6:4d:db:04:34:40:c4:
         33:d8:42:14:ee:8b:72:06:ea:2c:a4:42:a6:0e:6b:11:99:91:
         19:e0:c9:2c:37:fb:8a:e3:1b:a1:b5:4e:75:1f:bb:9d:3b:e9:
         e4:3c:94:93:6e:6b:8f:64:2b:56:44:59:6c:ed:1a:91:78:9f:
         ef:46:a5:ea:1c:1f:4c:e3:f2:9a:ef:9a:6c:bf:cf:b5:d4:0b:
         5f:46:d9:0f:5c:e7:f2:50:1a:80:6c:ce:d1:fd:db:27:8c:13:
         85:80:e9:07:c4:7a:c0:88:e2:f2:6e:39:98:82:6a:87:c6:7c:
         f7:57:30:9c:51:02:8b:25:2d:dc:d1:f4:92:bd:67:74:2e:88:
         9a:fb:b2:fc:eb:e2:af:57:00:e7:2c:31:01:62:23:5d:e1:fb:
         b8:3a:b0:f9:25:0b:47:d0:bf:5c:e1:a3:0a:67:09:89:65:8e:
         53:95:56:d6:68:09:89:44:42:cd:cc:00:96:93:bd:dc:b0:96:
         04:9b:59:70:0b:d9:78:f4:e0:f2:cf:35:ad:fa:9e:4c:4d:22:
         82:3c:74:3a:17:a7:bd:3c:4a:ca:26:1f:17:3f:b5:e7:57:84:
         fb:e8:4f:bf:bf:7b:ac:a2:ac:a4:cc:66:22:ae:30:b1:9f:6b:
         b6:df:82:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org