Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33362e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          1upJ79JK0BfCi1WSBnoH7z1H0LqgkkzRYnBvcUz0A1A=
Subject key identifier:   43:E4:CB:0B:AA:D0:86:80:D6:0E:20:94:1A:FE:07:0C:8B:0B:E9:6D
Certificate issuer:       /CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
Certificate serial:       6CECE9C27C1653AD2AA6D8707C37CE69D35855D2
Authority key identifier: D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa
Signing time:             Wed 02 Aug 2023 01:06:01 +0000
ROA not before:           Wed 02 Aug 2023 01:01:01 +0000
ROA not after:            Wed 31 Jul 2024 01:06:01 +0000
asID:                     268790
IP address blocks:        45.173.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ec:e9:c2:7c:16:53:ad:2a:a6:d8:70:7c:37:ce:69:d3:58:55:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
        Validity
            Not Before: Aug  2 01:01:01 2023 GMT
            Not After : Jul 31 01:06:01 2024 GMT
        Subject: CN=3082010A0282010100BA19735188F1DBB2EB4F3B066F5D845F6DAAC17EE9B6D77BD7B5F957379733281583D88EE5DAC74BD172E396A088DEADEAF51566D8DB92196EF8EC3AE7EA59C9A75C486395D0B773607B1BCF27A9E6E9CEB110AD3FD2CCA7388EB5E54302A016CD17B219E0BBBE4A48AEC69A4F1493072E77147AFE94DC44C824E3F148B6D0F737A176DED40FE9C4D2D90E66774F6336EE0DC44E31EE2B0963E154604CD0010F21062550988E5AAD045A72E0582FDDF27ECD568AA3F7731E10234F76FE0EF3C3AD5EA1A521AA9F768229565BB6D9AE7C759D5196A787896BCCBFFDF5B577F0D91C24E3642AEDF27053EF901824CFCA630EA838AC9445272300C8717AD42646C10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:73:51:88:f1:db:b2:eb:4f:3b:06:6f:5d:
                    84:5f:6d:aa:c1:7e:e9:b6:d7:7b:d7:b5:f9:57:37:
                    97:33:28:15:83:d8:8e:e5:da:c7:4b:d1:72:e3:96:
                    a0:88:de:ad:ea:f5:15:66:d8:db:92:19:6e:f8:ec:
                    3a:e7:ea:59:c9:a7:5c:48:63:95:d0:b7:73:60:7b:
                    1b:cf:27:a9:e6:e9:ce:b1:10:ad:3f:d2:cc:a7:38:
                    8e:b5:e5:43:02:a0:16:cd:17:b2:19:e0:bb:be:4a:
                    48:ae:c6:9a:4f:14:93:07:2e:77:14:7a:fe:94:dc:
                    44:c8:24:e3:f1:48:b6:d0:f7:37:a1:76:de:d4:0f:
                    e9:c4:d2:d9:0e:66:77:4f:63:36:ee:0d:c4:4e:31:
                    ee:2b:09:63:e1:54:60:4c:d0:01:0f:21:06:25:50:
                    98:8e:5a:ad:04:5a:72:e0:58:2f:dd:f2:7e:cd:56:
                    8a:a3:f7:73:1e:10:23:4f:76:fe:0e:f3:c3:ad:5e:
                    a1:a5:21:aa:9f:76:82:29:56:5b:b6:d9:ae:7c:75:
                    9d:51:96:a7:87:89:6b:cc:bf:fd:f5:b5:77:f0:d9:
                    1c:24:e3:64:2a:ed:f2:70:53:ef:90:18:24:cf:ca:
                    63:0e:a8:38:ac:94:45:27:23:00:c8:71:7a:d4:26:
                    46:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E4:CB:0B:AA:D0:86:80:D6:0E:20:94:1A:FE:07:0C:8B:0B:E9:6D
            X509v3 Authority Key Identifier:
                keyid:D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33362e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:43:36:cf:97:2f:d1:ab:f4:af:a0:13:4d:c6:45:36:47:e5:
         ab:08:b0:f7:3a:ca:80:2a:4c:b2:35:46:de:b5:84:6b:f1:4c:
         d0:57:d1:8a:6a:95:39:4c:c5:01:3d:b7:38:c1:05:a6:f0:92:
         51:d9:56:bf:c7:e9:b6:89:8c:18:e4:05:ef:15:a3:8c:e7:ff:
         e8:66:0e:5a:b9:61:8a:d8:6b:5d:da:cd:a9:f1:e1:30:d4:4f:
         d7:16:7e:69:98:42:74:ba:9f:b0:e5:1a:7d:15:be:3c:70:04:
         8a:58:31:d1:08:e0:fe:41:ad:1f:96:c3:09:25:0f:20:36:20:
         19:40:3e:53:d7:dd:05:ba:1c:fd:97:f7:42:14:c4:08:f4:47:
         1a:c7:33:a2:06:4e:3d:38:5f:d8:fd:b0:65:67:14:6b:71:11:
         2e:8d:0e:c7:1f:16:57:9e:56:2c:79:65:93:d2:3b:20:ba:5f:
         21:d6:0d:63:1e:fa:aa:ae:54:65:ed:56:d2:eb:ac:8f:5d:c7:
         75:7f:e8:1e:96:66:57:18:52:04:c2:e3:f6:d6:ef:f6:02:dd:
         38:0d:08:bf:4b:dd:b4:6a:57:34:8e:2f:1b:a8:9f:4a:a3:16:
         61:96:de:8c:85:4d:71:dd:cb:80:44:3c:ce:68:e3:f0:b1:86:
         1f:91:cf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org