Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          Jk+NsBnNN3HO7OcNPOwiWTyldbPytqB9ImBAVsyXGC0=
Subject key identifier:   7C:25:18:00:00:BB:44:A8:CE:0E:D7:3F:C3:4B:64:75:BB:25:D0:C5
Certificate issuer:       /CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
Certificate serial:       2C16FA2A7F1823E0B3E2A36018ED387AEA1B6DD3
Authority key identifier: 16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa
Signing time:             Wed 14 Feb 2024 20:09:45 +0000
ROA not before:           Wed 14 Feb 2024 20:04:45 +0000
ROA not after:            Wed 12 Feb 2025 20:09:45 +0000
asID:                     268678
IP address blocks:        45.165.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:16:fa:2a:7f:18:23:e0:b3:e2:a3:60:18:ed:38:7a:ea:1b:6d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Validity
            Not Before: Feb 14 20:04:45 2024 GMT
            Not After : Feb 12 20:09:45 2025 GMT
        Subject: CN=7C25180000BB44A8CE0ED73FC34B6475BB25D0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:34:8f:66:31:e4:15:0d:25:39:51:c2:8d:f6:
                    88:18:0e:f9:f5:43:af:3f:52:c4:5d:bf:e1:2b:4b:
                    0e:a4:87:78:1b:46:72:51:6f:c7:81:92:e6:16:b3:
                    20:45:53:c2:d0:ab:36:ba:cf:c5:e8:7f:94:0a:81:
                    a0:64:1e:ff:70:17:9b:90:10:c8:d0:99:b6:fe:84:
                    5a:e6:67:f5:27:57:6d:ba:37:3b:43:ec:c3:ed:65:
                    7f:1a:9e:4f:ae:6c:dd:50:f1:d9:90:21:dd:b9:61:
                    3b:5a:6c:00:d9:ed:c8:77:0b:f5:10:eb:1a:56:2f:
                    d1:d6:c8:e8:8f:d6:f0:6c:61:3b:b2:10:a8:98:74:
                    2c:97:69:45:5a:d3:35:9d:00:05:3e:b3:8a:6d:6b:
                    d5:30:a1:69:7a:1e:8a:5e:d9:72:a4:54:5b:19:e9:
                    ce:2d:fb:1c:ee:94:f2:1b:75:1a:6e:fc:07:5c:e5:
                    4e:f3:2b:78:08:35:49:1e:a1:46:47:db:33:4f:0e:
                    0d:dc:92:57:d2:79:08:47:b5:5a:00:26:4e:b1:f2:
                    37:38:f4:0c:87:6c:df:18:10:4f:f2:89:54:bb:a6:
                    8e:a7:a4:3b:d9:0c:1a:f2:82:e1:cc:7f:e5:09:cd:
                    89:cc:f0:8f:98:43:a3:95:45:8b:18:22:b9:47:fa:
                    53:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:25:18:00:00:BB:44:A8:CE:0E:D7:3F:C3:4B:64:75:BB:25:D0:C5
            X509v3 Authority Key Identifier:
                keyid:16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:5b:36:7e:dc:7b:86:d8:df:7e:ed:5a:5f:7b:68:b7:da:9a:
         cb:a1:97:3b:76:65:7f:e9:89:56:23:59:35:0e:74:1a:d0:f1:
         d8:5e:8c:e9:41:a9:15:63:20:54:9c:9e:77:2c:2b:25:5b:30:
         43:2b:f3:6f:54:86:91:54:91:a4:12:60:07:74:6b:26:52:e1:
         30:5b:33:d6:e6:96:5c:9f:1f:ab:db:28:6e:c8:24:7d:78:1d:
         57:47:d4:0e:82:52:64:fb:c0:44:da:1c:c8:4d:34:6a:e8:48:
         62:d7:da:38:0e:78:4c:62:76:d7:7a:eb:fa:06:f5:85:76:06:
         fd:bf:4f:9e:14:f0:37:db:7e:bd:70:52:b1:37:cb:03:72:b5:
         a2:78:f1:71:ed:79:16:22:47:04:4e:cc:76:b6:fe:06:66:ab:
         90:c9:b1:74:a9:90:6d:e5:a9:05:69:1d:c5:a4:07:6c:7a:4a:
         7b:d6:d9:6f:40:8c:60:c9:9e:39:39:2c:47:ea:97:c3:4b:00:
         44:59:28:13:eb:79:78:94:1e:fd:ac:01:b6:cf:52:1b:04:26:
         3f:5b:b0:e9:fa:2e:8e:1a:29:5f:da:86:8b:e4:8d:92:94:b1:
         87:10:35:93:cf:d1:d5:63:b0:7d:01:52:80:19:a8:cc:91:66:
         c4:d3:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org