Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/34352e3137342e3233362e302f32322d3234203d3e20323638383733.roa
File:                     34352e3137342e3233362e302f32322d3234203d3e20323638383733.roa (raw, json)
Hash identifier:          /ASAtrK/DzBz25bFqpYBgWi3R95e6yFHdXcRpkIRX78=
Subject key identifier:   83:EE:0D:76:BA:88:F1:B9:8D:9E:F5:8E:16:7E:C0:97:97:03:D8:C1
Certificate issuer:       /CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
Certificate serial:       37D2F8F62AFDAE8F7EB20AD192506A74037915D0
Authority key identifier: 47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/34352e3137342e3233362e302f32322d3234203d3e20323638383733.roa
Signing time:             Mon 18 Mar 2024 19:15:15 +0000
ROA not before:           Mon 18 Mar 2024 19:10:15 +0000
ROA not after:            Mon 17 Mar 2025 19:15:15 +0000
asID:                     268873
IP address blocks:        45.174.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d2:f8:f6:2a:fd:ae:8f:7e:b2:0a:d1:92:50:6a:74:03:79:15:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
        Validity
            Not Before: Mar 18 19:10:15 2024 GMT
            Not After : Mar 17 19:15:15 2025 GMT
        Subject: CN=83EE0D76BA88F1B98D9EF58E167EC0979703D8C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:48:a3:43:24:5b:51:59:0f:75:b2:4c:d7:
                    a2:66:b9:04:19:c8:0f:cd:ef:9f:19:8f:e7:6d:b6:
                    12:0b:80:a3:0e:6b:7d:89:0b:9e:20:ad:65:72:b6:
                    5e:0d:a9:1e:97:c8:75:4b:d4:7d:2c:33:cb:b4:f8:
                    16:ae:99:05:45:98:e1:49:3b:d2:20:d5:67:0f:89:
                    ef:44:39:23:36:50:8f:3a:20:0a:d8:d2:3d:57:b5:
                    81:8a:92:69:3a:a5:28:05:6e:5e:8b:e9:1b:03:f8:
                    f5:7c:6e:66:bd:1f:81:9e:be:19:1f:cd:32:3f:77:
                    e9:26:71:9a:1e:a1:76:9f:75:3a:ae:bf:cf:98:8f:
                    3c:9e:b4:72:79:38:93:8d:5f:36:c9:70:54:14:0e:
                    9b:3b:16:ad:c0:57:ff:d6:a5:6e:f7:5e:53:eb:76:
                    8e:c3:d1:3c:cc:b5:f9:e1:89:96:b4:25:cf:52:2f:
                    5f:70:22:60:e7:ab:6e:d1:a7:a5:87:70:a5:61:54:
                    f1:cb:ff:9d:f1:21:bf:6d:c4:58:2b:bb:40:ae:e2:
                    c9:97:2d:16:85:f6:21:1e:4c:a5:88:4c:f6:02:5f:
                    4e:a8:0d:80:0f:55:dc:2e:06:1c:32:e6:98:cd:7f:
                    72:df:6f:f6:e1:8f:b1:21:3a:5e:e8:56:a2:60:92:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EE:0D:76:BA:88:F1:B9:8D:9E:F5:8E:16:7E:C0:97:97:03:D8:C1
            X509v3 Authority Key Identifier:
                keyid:47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/34352e3137342e3233362e302f32322d3234203d3e20323638383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:66:0a:9d:61:e1:49:58:40:0a:b2:15:f5:8c:ff:12:99:
         63:33:26:1e:75:f2:2e:99:c6:b9:9f:ae:6f:74:a6:f0:25:e5:
         9b:58:2b:b6:d0:4f:6e:d1:78:41:cc:43:dc:a8:d1:83:ae:0a:
         c0:b4:51:d8:c5:7c:71:3f:b3:8e:28:7a:98:11:db:1f:e4:27:
         50:fe:01:f9:7f:10:ab:e1:e4:7f:44:6e:1f:b7:bb:61:9c:fc:
         5b:70:6d:d8:8a:28:07:b7:9d:0b:0f:4b:a3:ae:a9:0d:61:b6:
         d6:60:bf:12:3a:c0:a7:4c:92:9d:fd:ed:6f:e4:15:c3:fe:c7:
         43:1f:d7:6a:39:1c:30:5e:23:be:31:dd:7e:28:94:43:2c:1f:
         b6:75:f1:61:be:e0:2a:4f:e8:e9:77:82:75:ec:af:f5:9b:52:
         17:f0:72:ab:6f:9a:c0:ab:54:e0:f6:a6:e2:e8:b5:21:cc:7a:
         af:23:2e:17:44:84:f2:5b:08:a6:a7:fd:2c:8b:d6:ff:d1:59:
         85:4f:d4:f4:f0:29:88:bb:59:97:95:0e:26:c6:ce:31:e2:af:
         06:77:c6:65:f7:11:6b:e9:09:7b:4e:52:a9:76:a3:19:23:7a:
         5f:24:77:e4:fa:75:e2:a2:fe:31:5e:59:9b:e4:99:5a:a1:9a:
         dc:6e:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org