Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa
File:                     3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa (raw, json)
Hash identifier:          I+318JZ61krGf/cQv2+7ngmbHWzP5/XoySkJsA7XKyg=
Subject key identifier:   42:66:81:94:55:3C:19:41:77:81:58:A5:86:65:E7:B3:56:0F:F2:79
Certificate issuer:       /CN=323408F4A08085567D2BEEC5D6976D62865EE349
Certificate serial:       0D302D62BC358C627E953D8F5A2477BDB030CF4A
Authority key identifier: 32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa
Signing time:             Thu 28 Mar 2024 12:09:18 +0000
ROA not before:           Thu 28 Mar 2024 12:04:18 +0000
ROA not after:            Thu 27 Mar 2025 12:09:18 +0000
asID:                     266439
IP address blocks:        170.81.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:30:2d:62:bc:35:8c:62:7e:95:3d:8f:5a:24:77:bd:b0:30:cf:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323408F4A08085567D2BEEC5D6976D62865EE349
        Validity
            Not Before: Mar 28 12:04:18 2024 GMT
            Not After : Mar 27 12:09:18 2025 GMT
        Subject: CN=42668194553C1941778158A58665E7B3560FF279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:3f:05:a4:3d:7a:3e:86:cb:ab:7f:d5:81:
                    68:7e:7f:42:23:6a:ef:cb:e3:0b:d6:bb:62:64:af:
                    a1:2f:87:6e:8b:ec:0e:f1:ca:e1:cb:5f:de:ae:d0:
                    b4:18:db:f0:01:e6:e6:e9:b7:14:87:74:7f:28:e0:
                    ed:ef:86:ab:02:34:dd:da:c1:58:9d:92:f6:a9:e6:
                    49:bc:e5:78:34:dd:c6:f7:e1:68:42:9b:43:6a:a2:
                    ae:52:79:8c:73:7a:ba:28:87:19:3b:4d:73:e5:97:
                    27:6e:32:28:9b:f3:3a:21:6b:ac:8d:69:0d:5e:65:
                    77:a3:eb:11:41:9b:e6:c6:d5:48:cb:ef:56:81:27:
                    86:f5:2f:12:76:67:fb:f4:74:24:17:49:d0:f3:65:
                    67:b0:c0:9f:35:ce:24:f4:00:7e:43:d0:73:32:d0:
                    32:e3:d4:b4:a8:51:83:4e:05:67:9b:07:e0:16:01:
                    8e:0c:e4:7e:07:71:98:8b:96:be:c1:0c:30:a0:a9:
                    5c:c6:93:6c:da:22:f3:a7:50:93:73:6e:fd:b9:17:
                    62:36:46:25:cd:64:dd:97:c2:07:a1:b4:de:5a:37:
                    78:dd:22:fb:9f:2d:75:ca:07:f0:54:be:3e:12:fa:
                    1e:a3:6a:ba:e8:59:91:e3:87:ed:00:fa:44:e6:45:
                    1a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:66:81:94:55:3C:19:41:77:81:58:A5:86:65:E7:B3:56:0F:F2:79
            X509v3 Authority Key Identifier:
                keyid:32:34:08:F4:A0:80:85:56:7D:2B:EE:C5:D6:97:6D:62:86:5E:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/323408F4A08085567D2BEEC5D6976D62865EE349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/323408F4A08085567D2BEEC5D6976D62865EE349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/0/3137302e38312e3234382e302f32322d3234203d3e20323636343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:65:1d:41:60:45:60:d1:67:49:04:08:d7:ca:a2:dc:df:
         d1:91:38:f2:23:60:37:08:44:5d:88:56:7c:48:85:67:15:cd:
         d9:ec:7a:ce:7d:42:42:b7:5d:93:ad:6b:08:e5:d9:59:3c:0f:
         dc:28:4a:1a:b0:c8:4c:22:fa:6a:a6:c8:b6:8c:c3:80:53:37:
         9d:40:ba:a8:0a:37:70:03:cf:d8:87:fa:b6:bd:a7:41:2c:1c:
         ac:77:e4:cb:6a:36:33:a4:69:96:f7:cc:55:f5:83:02:7f:5b:
         a7:ee:98:69:59:2a:9c:af:0c:d8:51:0e:34:72:7e:13:c5:16:
         92:f0:07:d5:74:21:e3:6b:95:55:e2:a1:43:26:8f:ee:3d:f0:
         75:f5:dc:5b:3f:a3:14:b9:8e:c5:4c:1d:7c:b3:bb:f4:e3:9c:
         0f:cd:96:7a:cd:a7:8a:29:92:15:26:36:8a:cf:2c:06:19:d2:
         56:21:f2:9e:f3:59:dd:2b:00:b7:6c:e8:5b:6f:8e:46:a3:84:
         81:d7:67:02:33:5c:49:db:31:a9:bd:5b:ce:92:2c:51:3c:b2:
         b5:90:7b:52:f6:2b:7a:fa:41:a2:46:00:1e:31:4e:8c:59:e0:
         db:f7:cd:8e:5e:22:2e:86:01:90:77:8d:63:d9:52:5d:3a:71:
         c0:a6:e0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org