Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37332e302f32342d3234203d3e203631353931.roa
File:                     34352e3233372e37332e302f32342d3234203d3e203631353931.roa (raw, json)
Hash identifier:          T8wqE9htg8WGF24vlx81EiogsJGEMnioSxq+pAzyw/I=
Subject key identifier:   AD:AA:6F:17:FC:76:5E:E8:A1:47:1C:F0:77:54:0A:59:28:82:45:BE
Certificate issuer:       /CN=177534573015FFF667FEFF6833F132D1839610DB
Certificate serial:       229610B340B391A998C2D7AA53FF47AC49838FDE
Authority key identifier: 17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37332e302f32342d3234203d3e203631353931.roa
Signing time:             Wed 29 Nov 2023 19:00:00 +0000
ROA not before:           Wed 29 Nov 2023 18:55:00 +0000
ROA not after:            Wed 27 Nov 2024 19:00:00 +0000
asID:                     61591
IP address blocks:        45.237.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:96:10:b3:40:b3:91:a9:98:c2:d7:aa:53:ff:47:ac:49:83:8f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177534573015FFF667FEFF6833F132D1839610DB
        Validity
            Not Before: Nov 29 18:55:00 2023 GMT
            Not After : Nov 27 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:53:c4:e0:3d:da:31:14:81:f4:ce:34:61:
                    fb:e4:d2:fb:f5:f8:88:b4:57:2f:80:a8:1f:5d:35:
                    ab:5c:62:d2:4c:50:51:fa:86:b9:0d:e2:bc:f6:84:
                    24:91:05:76:7c:89:49:4b:14:0d:89:12:2a:79:2c:
                    51:9b:70:ef:51:77:66:af:8d:6c:0f:89:a8:09:98:
                    43:d0:18:04:ed:eb:d7:42:d0:b8:a9:25:b2:d6:2a:
                    82:bb:18:46:bd:74:13:b5:d1:fb:44:5a:b6:4d:fd:
                    76:c6:6b:c3:87:8b:ca:07:fa:3e:3d:79:a2:3e:6c:
                    d5:96:6e:05:89:5b:aa:87:d6:b4:dd:44:7f:86:15:
                    e0:96:f2:6b:7b:8f:c7:d0:83:0f:5d:bd:1d:5b:be:
                    1e:3c:b6:6a:8b:e0:fc:48:bd:c4:4e:db:86:a3:83:
                    7b:10:d3:b3:76:56:de:f5:bb:79:0e:b7:14:5b:c7:
                    47:d9:ff:20:45:bf:ee:b5:04:00:e6:26:ea:e5:52:
                    5c:44:17:5b:70:79:50:5b:ac:e0:2e:64:27:b6:31:
                    cf:13:f4:b7:ab:5d:08:aa:5a:44:31:23:48:4d:3d:
                    50:52:d8:ed:33:ac:ab:c9:62:ce:34:11:d9:e7:18:
                    35:df:c8:7d:d4:4c:c5:54:d3:98:1b:86:14:c3:93:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AA:6F:17:FC:76:5E:E8:A1:47:1C:F0:77:54:0A:59:28:82:45:BE
            X509v3 Authority Key Identifier:
                keyid:17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/177534573015FFF667FEFF6833F132D1839610DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/34352e3233372e37332e302f32342d3234203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:20:9f:53:e9:ed:98:81:a4:e3:f0:a7:8d:48:96:a0:27:38:
         ac:39:aa:91:00:9b:a7:74:a1:1b:d6:27:80:96:c6:44:51:49:
         5d:67:f7:2a:e5:51:7c:cd:fc:4e:50:ce:3e:b4:2c:98:af:50:
         2f:a8:78:13:33:aa:7e:22:97:e7:2e:c0:5e:c5:80:b1:77:06:
         54:93:39:5b:f8:bb:c9:0e:56:58:76:c4:b1:ac:64:f9:2a:62:
         b7:7e:02:2e:eb:e9:ee:5e:af:81:f7:7e:ed:fd:59:b7:aa:c5:
         ed:7b:74:93:9d:f3:dd:7a:99:36:ac:8e:3b:ec:5f:82:42:93:
         18:c9:35:a0:de:42:6c:35:a4:f1:47:27:d0:2a:72:66:7a:0f:
         21:5b:0c:00:e8:ff:2a:4e:e6:55:4e:22:a8:bd:9c:08:52:e7:
         df:07:3c:30:c9:1d:9f:09:7d:20:8a:c9:d5:3f:7a:5a:ad:aa:
         e6:e7:cc:53:5e:f5:c2:3e:fa:b2:83:35:e2:bd:8d:62:5a:36:
         fc:7a:40:cc:df:98:49:99:a7:99:c4:68:a7:a9:52:8e:22:73:
         87:e0:97:d0:31:96:ae:54:6e:0a:1b:c3:9a:90:f3:47:11:a2:
         ea:22:83:6e:cb:54:a5:27:2d:aa:c0:7e:0c:34:51:a4:cb:22:
         af:f0:45:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org