Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32322d3234203d3e20323639363637.roa
File:                     34352e3139312e36302e302f32322d3234203d3e20323639363637.roa (raw, json)
Hash identifier:          VAl4c/xBPaaCZ9Fq/sZY91jM53qIrJ1VS9uC/bZ3uHs=
Subject key identifier:   F9:1D:11:70:D4:53:70:B7:0B:00:A9:34:72:CF:3E:7B:F2:51:18:7D
Certificate issuer:       /CN=1C7D3973B001C126A2DDD8239CD138E09A85FC78
Certificate serial:       6E8CA1BEBFE6A1A830F09D15FB1EF939C70EECA6
Authority key identifier: 1C:7D:39:73:B0:01:C1:26:A2:DD:D8:23:9C:D1:38:E0:9A:85:FC:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32322d3234203d3e20323639363637.roa
Signing time:             Sat 28 Oct 2023 16:03:42 +0000
ROA not before:           Sat 28 Oct 2023 15:58:42 +0000
ROA not after:            Sat 26 Oct 2024 16:03:42 +0000
asID:                     269667
IP address blocks:        45.191.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8c:a1:be:bf:e6:a1:a8:30:f0:9d:15:fb:1e:f9:39:c7:0e:ec:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D3973B001C126A2DDD8239CD138E09A85FC78
        Validity
            Not Before: Oct 28 15:58:42 2023 GMT
            Not After : Oct 26 16:03:42 2024 GMT
        Subject: CN=F91D1170D45370B70B00A93472CF3E7BF251187D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:71:c9:a6:9d:08:89:6d:31:d0:c2:43:6e:
                    e4:d0:0d:3e:db:0b:ff:08:69:62:a9:17:a8:f6:d2:
                    b3:07:9a:1c:fc:59:63:24:a2:5f:dc:52:b6:32:f0:
                    49:bb:26:5c:e1:86:7d:ea:69:9c:c1:47:25:2b:12:
                    46:2a:da:d3:91:7e:39:fd:15:26:fc:6b:9c:43:ff:
                    f3:97:ce:63:ca:95:96:41:03:6e:53:fd:2c:db:f1:
                    3e:34:fb:ab:59:68:89:e3:20:96:51:27:bf:23:af:
                    74:78:eb:16:cc:29:bf:7d:ae:1c:54:da:57:e4:6b:
                    96:6f:35:6f:5d:c6:fb:11:86:b9:9b:da:70:7e:21:
                    a8:30:dc:e9:ed:6e:f8:c2:a1:d4:6e:d1:1b:61:87:
                    c9:6e:bd:62:c1:39:b1:a2:52:2e:b1:27:88:5a:39:
                    37:de:fc:a1:c2:7d:45:60:22:ed:52:af:26:74:07:
                    59:50:a8:43:72:35:ea:e3:4e:41:d0:29:e8:2f:ee:
                    4c:a4:94:eb:0a:b6:03:69:cf:4b:fe:05:ae:11:ec:
                    ab:33:e4:ec:4a:7b:bb:d4:7d:ea:1c:02:6b:c0:b8:
                    88:a6:d0:da:45:c9:60:1b:30:73:20:b7:93:b6:ea:
                    7a:eb:89:74:27:49:b1:78:87:ed:38:76:43:14:48:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1D:11:70:D4:53:70:B7:0B:00:A9:34:72:CF:3E:7B:F2:51:18:7D
            X509v3 Authority Key Identifier:
                keyid:1C:7D:39:73:B0:01:C1:26:A2:DD:D8:23:9C:D1:38:E0:9A:85:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C7D3973B001C126A2DDD8239CD138E09A85FC78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32322d3234203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:3c:a5:ac:bc:69:39:1f:86:ea:c1:ba:cc:cb:77:33:de:87:
         5a:c7:e6:ad:b0:3f:1e:ef:d9:63:89:3b:09:b9:8f:e9:47:b8:
         af:b4:59:6f:5e:98:e7:e9:f6:2c:ff:e0:05:93:c9:91:66:82:
         a1:62:dd:e2:a2:e2:e4:b7:e9:34:b1:61:dc:a4:f7:06:11:ee:
         be:4f:c8:86:85:47:72:04:db:f4:7a:6e:17:d4:13:76:3d:c8:
         ef:50:5c:cf:0b:44:08:f3:8b:7a:a3:93:6b:fe:f7:82:89:42:
         5b:0f:4b:bc:27:60:1c:b6:ea:41:dd:73:6d:50:11:2b:c7:d9:
         80:d8:e1:64:00:0c:86:38:66:f5:ae:b0:8f:64:51:2d:0b:80:
         05:fb:1a:f4:da:42:9e:56:28:45:a1:5f:8f:7d:d9:57:f5:22:
         f0:2e:b9:07:30:1f:e2:8d:e9:36:94:f5:77:f1:d1:d3:0a:43:
         3f:9c:2b:94:83:f5:97:2a:98:0e:6c:c2:e9:9a:80:0d:e6:53:
         a4:dc:c6:55:c3:6d:9e:f4:aa:f6:a5:43:69:a4:65:88:89:29:
         ac:d7:d7:3c:64:60:5d:7d:8d:22:64:8c:52:eb:d7:45:14:9b:
         28:d5:3c:0d:9f:34:62:62:38:30:d9:d0:ea:8d:78:ad:3a:75:
         41:22:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org