Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33372e302f32342d3234203d3e20323638373930.roa
File:                     34352e3137332e33372e302f32342d3234203d3e20323638373930.roa (raw, json)
Hash identifier:          2+YJErL5m6LP0BY0nFtvEE8H+mq6JX+vMArxORZzZzE=
Subject key identifier:   7B:F1:5C:61:A5:33:B3:48:74:7B:A9:44:EA:5E:57:A3:F8:C1:C3:46
Certificate issuer:       /CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
Certificate serial:       5AD3E2FC5B1B3B395FAD9D0DAA1727AC0101BF6C
Authority key identifier: D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33372e302f32342d3234203d3e20323638373930.roa
Signing time:             Wed 02 Aug 2023 01:06:01 +0000
ROA not before:           Wed 02 Aug 2023 01:01:01 +0000
ROA not after:            Wed 31 Jul 2024 01:06:01 +0000
asID:                     268790
IP address blocks:        45.173.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d3:e2:fc:5b:1b:3b:39:5f:ad:9d:0d:aa:17:27:ac:01:01:bf:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EEF27FD4FA2A0ED52A88082B8835A1A2326718
        Validity
            Not Before: Aug  2 01:01:01 2023 GMT
            Not After : Jul 31 01:06:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:fb:ef:4e:bc:23:2b:ed:07:4e:48:1f:06:
                    04:86:0e:73:9d:eb:59:48:9e:90:7a:ea:2f:da:c1:
                    d4:2c:fe:34:07:e1:ce:33:03:1e:78:e9:4c:49:ef:
                    d7:23:29:f8:cb:e5:24:dd:87:3a:c5:c7:85:c6:ca:
                    82:99:2b:ac:af:95:fe:e6:cf:ea:f0:79:e2:95:b3:
                    77:8f:2d:0d:86:17:16:5f:cf:56:f3:58:bf:54:b0:
                    fc:45:aa:af:d5:13:62:52:6d:60:61:91:f9:3c:7e:
                    c8:66:da:5e:5f:4c:74:15:b5:fb:12:21:ea:a5:3f:
                    6a:b0:ee:57:a1:68:db:23:75:0d:72:10:10:2d:7f:
                    d2:2e:5b:ff:42:8d:55:b4:fd:99:42:dd:5c:f5:cd:
                    66:db:cb:1c:02:03:bb:1f:68:fd:47:51:25:e6:41:
                    bd:c9:47:ff:cd:9e:3e:bd:8a:17:d6:a3:8f:0d:37:
                    6a:fa:fb:e7:16:cb:e0:f9:5d:fb:5f:91:a7:26:d1:
                    79:86:cf:be:cc:b6:0f:65:3d:0b:3e:40:09:74:df:
                    8b:93:8e:14:8b:ea:bd:9e:1b:ff:ac:f9:68:87:e9:
                    a8:90:df:c7:3e:9d:2a:f6:63:d3:f5:19:d8:96:87:
                    89:d8:5b:28:e4:c3:bb:7d:67:01:ea:8f:ce:a9:8e:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F1:5C:61:A5:33:B3:48:74:7B:A9:44:EA:5E:57:A3:F8:C1:C3:46
            X509v3 Authority Key Identifier:
                keyid:D1:EE:F2:7F:D4:FA:2A:0E:D5:2A:88:08:2B:88:35:A1:A2:32:67:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1EEF27FD4FA2A0ED52A88082B8835A1A2326718.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/0/34352e3137332e33372e302f32342d3234203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:51:31:9d:d1:1f:42:ab:3f:6c:d5:2e:7a:dd:a9:70:a7:6b:
         ed:04:f3:d7:af:96:47:6d:d5:f9:5a:df:6b:5f:52:25:68:91:
         be:be:c3:43:81:3c:f1:7f:b5:2e:29:e6:11:4f:94:2a:cf:0f:
         ee:b6:22:41:bb:32:f7:88:67:e2:61:98:74:59:b5:a1:c6:1e:
         b4:d7:82:35:c5:7e:ab:69:5b:bf:6a:d9:75:81:43:3b:46:16:
         83:86:b7:3c:49:3c:39:9e:5b:f9:c5:90:fc:23:bd:c9:ca:b0:
         3b:db:45:7d:54:e5:0d:08:27:d8:ee:18:6d:b5:bb:4e:40:6d:
         ee:d7:df:8d:b6:78:d7:75:e0:0d:be:7f:f9:46:4b:23:a1:cc:
         9d:9e:be:80:4d:23:d6:80:73:d6:60:b0:a6:cd:ca:29:24:36:
         2d:39:f6:74:ce:1a:5b:e0:0b:9b:15:91:24:13:6f:45:35:2a:
         fb:c8:5c:10:26:a6:29:91:85:2f:30:d2:e1:6b:ad:ad:73:c3:
         13:3d:4a:60:34:35:cd:81:1b:86:cb:73:9d:7f:28:33:38:ba:
         8e:93:ee:92:5c:e1:b0:08:d3:aa:45:f3:0f:4a:46:4f:88:31:
         3c:a9:4e:06:b1:2a:c7:ee:d0:a3:e1:fb:d5:63:9d:60:30:bb:
         06:b9:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org