Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa
File:                     34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa (raw, json)
Hash identifier:          l2DoZQ/P84uhdA4Una960j4ghwWcka9LCsBO4+K+u6Q=
Subject key identifier:   E9:8B:F2:57:E6:0A:C7:5D:49:33:57:F4:17:A4:22:9C:36:97:0C:D6
Certificate issuer:       /CN=DE7B7A8E2C385C99F41541B73ADEF209C9460857
Certificate serial:       400980554C37AD36BCAAA1655FEC98C09D6686E4
Authority key identifier: DE:7B:7A:8E:2C:38:5C:99:F4:15:41:B7:3A:DE:F2:09:C9:46:08:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE7B7A8E2C385C99F41541B73ADEF209C9460857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa
Signing time:             Wed 14 Feb 2024 22:57:03 +0000
ROA not before:           Wed 14 Feb 2024 22:52:03 +0000
ROA not after:            Wed 12 Feb 2025 22:57:03 +0000
asID:                     269288
IP address blocks:        45.183.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:09:80:55:4c:37:ad:36:bc:aa:a1:65:5f:ec:98:c0:9d:66:86:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE7B7A8E2C385C99F41541B73ADEF209C9460857
        Validity
            Not Before: Feb 14 22:52:03 2024 GMT
            Not After : Feb 12 22:57:03 2025 GMT
        Subject: CN=E98BF257E60AC75D493357F417A4229C36970CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:94:81:32:22:0b:c5:ab:89:bd:e9:3a:38:
                    ae:56:92:ae:8d:a6:da:0f:2f:62:ce:99:e9:68:ff:
                    59:9d:3a:52:9f:d1:58:14:43:8d:ae:62:1f:45:c5:
                    38:5b:5e:49:b6:5c:db:d7:ab:b1:24:f1:50:cf:e0:
                    9a:50:33:cc:79:d7:a6:98:8c:9d:17:41:d3:ce:40:
                    d0:0d:8d:18:29:7d:8f:97:e2:db:b1:d1:8c:44:b0:
                    dd:f0:fe:71:74:9d:02:77:6d:a6:51:34:b3:a9:1c:
                    57:60:44:ac:97:5a:4e:77:ac:4c:20:bb:91:a7:b9:
                    11:b1:0c:ae:96:a0:00:bd:71:d2:6e:e8:19:b1:a2:
                    4c:83:8d:3a:f0:22:a2:b1:ba:bd:d0:de:9e:09:e9:
                    77:f0:1d:96:76:b7:eb:eb:b4:43:bd:de:18:23:d7:
                    53:c5:f7:e5:9c:14:b3:99:1a:dd:21:6b:dc:c5:c4:
                    51:12:95:b6:1d:72:cc:72:50:d9:36:fc:8f:2b:23:
                    b7:27:de:ce:88:86:e5:9d:54:94:ef:7b:a8:b6:c1:
                    46:54:df:9f:17:a0:77:85:40:d5:58:17:f7:dc:a0:
                    4a:72:69:86:d0:5f:67:8d:60:9e:3e:bd:68:a9:71:
                    91:8b:04:6e:05:1f:a4:80:4d:d1:7c:ee:75:97:bf:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8B:F2:57:E6:0A:C7:5D:49:33:57:F4:17:A4:22:9C:36:97:0C:D6
            X509v3 Authority Key Identifier:
                keyid:DE:7B:7A:8E:2C:38:5C:99:F4:15:41:B7:3A:DE:F2:09:C9:46:08:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/DE7B7A8E2C385C99F41541B73ADEF209C9460857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE7B7A8E2C385C99F41541B73ADEF209C9460857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:b4:ce:82:5e:88:fe:55:30:b1:6b:87:72:58:2f:d0:89:
         77:ab:d1:c3:64:33:89:e1:0e:08:1a:49:bf:b1:2a:7a:2c:9e:
         96:78:79:d9:3b:aa:6f:41:35:85:0b:83:da:d5:a3:7e:85:f7:
         17:cb:33:a3:02:14:11:b1:fd:7d:9f:29:ee:94:1c:00:70:d8:
         9e:2c:4a:47:43:e6:c0:48:00:6f:11:c6:d3:43:ba:45:6a:f8:
         5a:e6:fe:ee:7d:03:ed:a4:7a:2c:b0:f1:8d:8e:33:71:64:f1:
         31:9f:b5:d4:7c:f1:88:f6:1d:a3:b5:bf:85:64:0c:91:56:93:
         22:0c:09:da:3a:14:e6:53:6f:d5:3c:1b:90:d0:70:58:44:21:
         bb:05:e0:97:c3:d5:27:21:41:3a:4c:8d:bc:96:fe:da:e6:98:
         17:2b:de:50:8a:27:10:44:bb:d1:b5:03:1d:25:b4:68:94:60:
         9e:84:26:62:02:ab:d8:2b:0d:ee:2d:c9:42:bf:e9:aa:dc:43:
         70:86:9b:7a:c2:71:d2:32:5d:e3:a1:b3:6c:4b:85:83:8d:62:
         69:76:92:8f:47:3c:47:6c:e7:eb:a6:44:7e:e2:cc:2f:a1:11:
         cc:ea:b2:78:10:7b:e5:46:4e:2c:8b:04:d1:45:20:55:2d:9c:
         ab:f6:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org