Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37322e302f32322d3232203d3e203631353931.roa
File:                     34352e3233372e37322e302f32322d3232203d3e203631353931.roa (raw, json)
Hash identifier:          I1Y6QPIsXvoP1x5+360gzW6sONwsuubRDL6RnjlQ2dI=
Subject key identifier:   E5:A1:FD:4B:C5:71:FC:6E:9B:8C:B7:56:29:74:BF:C4:96:1A:FF:30
Certificate issuer:       /CN=177534573015FFF667FEFF6833F132D1839610DB
Certificate serial:       0AB99E51D1036E8BEC40DD0C32BB178BDD2B37FD
Authority key identifier: 17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37322e302f32322d3232203d3e203631353931.roa
Signing time:             Sun 26 Nov 2023 19:00:00 +0000
ROA not before:           Sun 26 Nov 2023 18:55:00 +0000
ROA not after:            Sun 24 Nov 2024 19:00:00 +0000
asID:                     61591
IP address blocks:        45.237.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b9:9e:51:d1:03:6e:8b:ec:40:dd:0c:32:bb:17:8b:dd:2b:37:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177534573015FFF667FEFF6833F132D1839610DB
        Validity
            Not Before: Nov 26 18:55:00 2023 GMT
            Not After : Nov 24 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:88:84:cb:5b:78:dc:f0:f9:dc:c2:5c:0a:9a:
                    67:3a:ac:45:f0:55:bb:36:ce:b9:7d:69:2c:15:af:
                    53:a7:56:af:fd:70:c3:25:15:05:b2:e0:8c:d5:1d:
                    da:a1:bd:d3:91:f7:da:04:38:f2:3d:cd:d8:a0:1c:
                    36:69:be:f2:82:41:17:93:6d:ef:d4:cd:6e:ec:ef:
                    11:a1:b6:f7:84:1f:d4:bf:f2:5e:ee:1a:8c:aa:2b:
                    a6:22:ca:8f:d1:6d:f4:00:0d:c6:53:45:a6:a6:58:
                    4e:c0:81:4b:73:73:4d:8e:72:a3:f7:1a:2a:b1:b4:
                    67:cf:cf:3e:1d:92:b8:e8:06:1a:17:79:3b:e9:f3:
                    ad:63:69:93:bf:a6:cd:12:80:07:86:56:19:4e:58:
                    88:7b:bd:20:01:4c:32:a4:ce:bc:5d:f4:0d:55:51:
                    14:21:f4:db:ce:be:a7:5a:11:e1:2f:52:c8:56:a0:
                    29:87:b8:21:24:df:5c:5f:01:19:d0:85:8e:d3:8e:
                    bd:40:3c:c7:8d:fa:3f:21:06:b5:ed:a6:85:f9:72:
                    e5:0a:d3:37:6a:71:c2:76:59:60:f0:0e:d7:b4:90:
                    67:85:61:50:55:27:e6:00:a1:f1:44:a3:08:06:63:
                    fd:b0:67:fb:5f:27:97:ae:3b:f7:ff:83:db:d4:0c:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A1:FD:4B:C5:71:FC:6E:9B:8C:B7:56:29:74:BF:C4:96:1A:FF:30
            X509v3 Authority Key Identifier:
                keyid:17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/177534573015FFF667FEFF6833F132D1839610DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37322e302f32322d3232203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:14:2d:2b:56:eb:04:d3:8b:c8:8b:6b:a9:95:33:51:66:
         ae:f1:63:d3:82:18:55:ad:fc:00:ec:c9:03:f9:ed:2a:f0:0e:
         c3:0c:b5:a8:0a:fc:98:6e:68:16:f1:fe:16:bd:18:f0:f6:a4:
         4c:df:bc:5c:5e:66:10:83:aa:0e:3f:e1:12:fa:8b:d6:1e:47:
         5b:70:5f:76:a7:ae:b1:7e:03:b5:9a:98:38:0d:38:39:bf:15:
         c5:a9:cb:2d:8e:83:28:62:46:65:6a:c9:e3:ca:48:2e:b5:82:
         19:c8:07:4e:41:ed:3c:77:fc:cd:7f:9c:ab:05:7d:44:c2:fb:
         ea:dd:f6:91:1d:91:8f:ac:dc:d5:a3:43:a0:9d:91:3d:78:75:
         ec:a7:97:7e:0f:a4:5f:2b:7a:32:e2:fa:44:88:62:f8:c4:64:
         3c:ad:0d:b6:c1:a1:ec:73:c8:94:0f:a5:f9:6f:25:cc:a4:b6:
         1b:77:b2:8f:83:31:89:09:be:a0:7c:95:f5:b6:d2:09:0a:01:
         30:3b:f3:22:54:f5:19:34:44:c2:39:3c:ac:95:8c:07:bb:59:
         6c:0e:f0:f0:8e:99:40:a5:66:b3:70:7b:7c:31:03:70:6b:eb:
         d5:a4:f5:8c:ea:a1:62:77:6a:7d:6d:84:e7:18:5c:29:e4:89:
         75:b1:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org