Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa (raw, json)
Hash identifier:          TxVrwM3vL4okvYXk5iFHYkqXUW7vjZ8AfZvLZmS1VhE=
Subject key identifier:   2A:F9:8A:A6:7C:15:CB:DD:64:8F:01:57:F4:E3:75:47:37:3C:33:85
Certificate issuer:       /CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
Certificate serial:       7A45A04E31531CC6E4CFCA5CC03F0EB38CC9FA8C
Authority key identifier: 16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa
Signing time:             Wed 14 Feb 2024 20:09:51 +0000
ROA not before:           Wed 14 Feb 2024 20:04:51 +0000
ROA not after:            Wed 12 Feb 2025 20:09:51 +0000
asID:                     268678
IP address blocks:        45.165.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:45:a0:4e:31:53:1c:c6:e4:cf:ca:5c:c0:3f:0e:b3:8c:c9:fa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Validity
            Not Before: Feb 14 20:04:51 2024 GMT
            Not After : Feb 12 20:09:51 2025 GMT
        Subject: CN=2AF98AA67C15CBDD648F0157F4E37547373C3385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:79:f9:8b:2a:d8:4c:a4:b7:00:e2:53:79:
                    9c:1b:8c:3f:30:3b:c8:71:93:94:3c:22:a7:8f:dd:
                    11:ea:e6:54:1e:69:37:a7:85:68:ef:a6:94:ba:f5:
                    f5:f7:10:27:5f:a6:05:0c:c9:62:ad:c5:a2:d4:ec:
                    99:45:dc:2e:7e:93:ea:69:67:a3:3f:56:dc:91:89:
                    10:b1:5b:d7:64:17:fb:02:68:c4:1a:5e:86:9c:d8:
                    26:ad:db:17:af:b9:52:77:1f:14:a1:29:5e:6f:58:
                    96:ff:4b:10:ad:af:31:ba:8f:69:6a:af:94:f1:6d:
                    a9:86:0e:10:c0:db:35:61:90:5c:96:db:e5:c6:92:
                    40:37:36:7b:93:ba:f5:ad:6c:6a:8f:0c:cd:48:6d:
                    34:ac:03:76:d5:0d:01:44:de:7c:f0:34:19:09:85:
                    ff:41:5c:66:e9:2d:bc:92:9e:28:82:f1:7c:86:b6:
                    a5:d8:9a:10:86:7c:55:de:db:b7:b7:ef:e2:ce:39:
                    5b:9f:a3:37:b2:f1:fd:14:4a:3f:50:f9:02:8a:b5:
                    15:c9:aa:94:69:b7:59:da:38:36:08:0e:a5:45:e2:
                    26:b1:c0:e7:f2:f6:22:b6:63:16:dc:08:73:2c:a4:
                    f3:e9:f7:70:a3:b0:39:6c:8f:31:c3:fe:61:a7:e7:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:8A:A6:7C:15:CB:DD:64:8F:01:57:F4:E3:75:47:37:3C:33:85
            X509v3 Authority Key Identifier:
                keyid:16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:0d:b7:15:0c:ba:45:0e:d9:5a:5f:52:a7:05:a4:8f:ad:f4:
         d7:6b:a3:52:e9:18:85:ab:a3:9e:da:cf:fb:29:1d:e5:3f:5b:
         1a:f5:7a:46:75:a6:52:d9:5a:80:c9:7e:bf:ef:46:a5:fb:5a:
         f8:86:ba:22:3a:ad:83:da:34:dc:06:b3:5a:e2:a3:49:07:af:
         ce:1e:01:1c:a6:16:1a:64:84:43:76:85:84:5f:6c:b8:ac:07:
         c0:f0:e8:02:2d:70:ec:44:5a:40:71:af:1b:ea:b1:8a:86:6f:
         a3:85:78:c5:ae:a1:25:74:cf:f6:f7:c6:4d:e3:0c:3e:16:f5:
         ce:f7:b4:45:a4:cf:d8:5a:17:9a:de:4e:55:f9:66:91:ac:ae:
         24:79:b0:d9:29:9d:2a:5f:06:96:d9:66:ed:03:fd:bf:d1:b3:
         db:14:0e:7c:37:92:df:da:f9:c1:e8:51:c8:f1:28:d6:68:6c:
         a6:f0:34:ba:43:8b:a7:1f:c1:3b:a4:1b:ac:71:b2:0e:d1:19:
         ca:cc:a9:06:8f:c8:59:9a:8e:ad:66:55:8e:1b:1c:bb:80:fe:
         2e:ec:52:23:ef:40:9c:09:fa:29:ee:82:c1:88:84:06:ae:a6:
         83:ea:3d:9e:f5:5d:c0:71:61:6c:d1:e6:d6:c1:de:15:e5:8e:
         52:7a:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org