Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/34352e3137322e36342e302f32322d3234203d3e20323638373931.roa
File:                     34352e3137322e36342e302f32322d3234203d3e20323638373931.roa (raw, json)
Hash identifier:          qR4sn6cILapKewytAOnsyGdIe+JjOQitTY+/a8LIBCU=
Subject key identifier:   35:42:69:2B:CD:F3:DF:18:EF:59:65:D4:87:D0:CC:AA:58:82:B9:60
Certificate issuer:       /CN=AF919E5DD91249FEC8AC8474B557DF7E72490802
Certificate serial:       567C5368CD3791D8E70803248FE086782E532AD1
Authority key identifier: AF:91:9E:5D:D9:12:49:FE:C8:AC:84:74:B5:57:DF:7E:72:49:08:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/34352e3137322e36342e302f32322d3234203d3e20323638373931.roa
Signing time:             Wed 05 Jul 2023 02:00:00 +0000
ROA not before:           Wed 05 Jul 2023 01:55:00 +0000
ROA not after:            Fri 05 Jul 2024 02:00:00 +0000
asID:                     268791
IP address blocks:        45.172.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7c:53:68:cd:37:91:d8:e7:08:03:24:8f:e0:86:78:2e:53:2a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF919E5DD91249FEC8AC8474B557DF7E72490802
        Validity
            Not Before: Jul  5 01:55:00 2023 GMT
            Not After : Jul  5 02:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:13:c9:67:28:f1:2a:d8:03:0b:75:98:bb:
                    32:85:56:d0:88:80:8b:b0:a5:6c:69:86:90:1d:74:
                    6b:ca:88:14:a9:a1:5c:3e:48:76:88:2f:40:0b:22:
                    d4:d7:70:50:2b:bd:6c:2c:82:1e:c6:94:f4:a7:1e:
                    ac:50:c3:1b:bb:28:45:e8:98:99:70:90:dc:da:68:
                    5a:09:d8:7a:ad:fd:2c:11:59:e9:5b:78:dd:7c:2b:
                    af:c3:97:c0:38:c6:b5:0a:d0:55:0c:2f:42:b5:fb:
                    87:47:83:7b:9d:7c:48:00:51:bd:82:37:d9:95:30:
                    c6:d5:70:11:02:a0:c6:75:07:d8:a4:5c:d8:85:c5:
                    30:f7:60:f3:78:f3:24:a5:53:fe:9e:d3:78:89:5f:
                    29:37:a9:81:d5:36:75:be:3d:3b:c6:f0:61:f5:86:
                    02:95:89:95:43:e4:98:a1:5c:c5:f4:8e:49:85:7c:
                    8b:66:df:b8:09:cb:d5:87:e6:95:ea:21:76:e1:a0:
                    41:25:4c:b6:20:7d:c6:9d:d1:7c:06:8e:c1:26:85:
                    bc:c5:7b:74:b2:9e:0e:b6:5f:64:a6:f9:e0:3c:15:
                    ab:65:1e:7b:47:d5:e1:08:da:b2:51:6d:41:26:18:
                    f8:c3:f4:03:9c:21:22:a9:b1:96:ac:f8:66:53:1f:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:42:69:2B:CD:F3:DF:18:EF:59:65:D4:87:D0:CC:AA:58:82:B9:60
            X509v3 Authority Key Identifier:
                keyid:AF:91:9E:5D:D9:12:49:FE:C8:AC:84:74:B5:57:DF:7E:72:49:08:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF919E5DD91249FEC8AC8474B557DF7E72490802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/34352e3137322e36342e302f32322d3234203d3e20323638373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:ee:e5:f5:c0:4f:65:3d:3a:d9:56:09:03:29:0f:b2:d8:ef:
         a8:de:f8:7a:01:f9:7e:3e:16:ed:36:7e:f4:40:68:74:31:d2:
         35:b4:3a:27:ca:27:b4:c6:09:49:97:e0:dd:8f:0a:4b:38:71:
         64:eb:2b:41:1e:ac:24:43:65:4e:be:81:a2:3b:a7:70:d4:98:
         88:0b:2a:33:97:9f:f0:5f:65:30:f5:44:02:93:fa:bf:66:94:
         e1:8f:86:97:bd:73:f1:9e:9e:f4:81:40:36:33:1c:74:85:c8:
         59:e4:ef:a5:3c:88:50:95:9d:d6:ec:9a:e6:69:e4:01:94:d6:
         51:88:13:44:0a:91:c2:73:ae:38:50:b3:33:7d:f6:ce:4e:19:
         1e:3c:bb:91:85:9a:67:a4:94:74:88:ac:93:a0:4a:fa:a2:f8:
         11:f0:e6:9a:9f:5f:b3:4a:6b:04:f0:c9:76:e7:05:23:06:dd:
         0b:1d:11:6d:b3:a4:52:9e:8f:e7:a3:01:eb:57:fb:31:01:ea:
         a1:29:45:9e:40:31:71:e6:78:f3:1b:e7:a7:d3:6b:ec:23:fc:
         98:9d:da:c8:e9:88:51:fb:c1:be:d5:a2:59:2f:9f:8f:34:07:
         17:fb:d9:20:d3:bf:ca:6e:27:30:6a:d8:c0:c7:0a:6b:72:6e:
         d2:46:c1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org