Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa
File:                     34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa (raw, json)
Hash identifier:          r/aX/fvzQLsZBBNVleMTaUwisde+5r7xAMXEJ+00tj8=
Subject key identifier:   29:39:51:F3:44:8C:B1:E3:D7:5D:99:FE:6B:CE:DD:91:CC:91:56:CB
Certificate issuer:       /CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Certificate serial:       0C0091C36DDB79254AA96BD836CFD3D0285C5DE3
Authority key identifier: CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa
Signing time:             Fri 14 Jul 2023 18:58:04 +0000
ROA not before:           Fri 14 Jul 2023 18:53:04 +0000
ROA not after:            Fri 12 Jul 2024 18:58:04 +0000
asID:                     268101
IP address blocks:        45.168.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:00:91:c3:6d:db:79:25:4a:a9:6b:d8:36:cf:d3:d0:28:5c:5d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
        Validity
            Not Before: Jul 14 18:53:04 2023 GMT
            Not After : Jul 12 18:58:04 2024 GMT
        Subject: CN=293951F3448CB1E3D75D99FE6BCEDD91CC9156CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:0b:0c:1d:98:62:21:4c:a6:a8:33:cc:d3:
                    63:6a:fb:5a:3b:df:a3:e1:19:59:48:c6:b5:b1:10:
                    c2:ac:1e:98:56:95:d3:be:39:86:a1:d1:ba:44:d9:
                    be:e2:70:a1:83:10:e4:3d:a2:45:17:2b:17:22:a7:
                    36:42:89:ca:1b:98:35:c9:47:8b:7a:91:84:b2:8a:
                    52:22:e2:93:78:ce:38:5a:20:fb:58:a6:47:c4:5e:
                    0a:3a:22:da:3b:d3:9a:a6:9e:cd:2f:a4:f0:17:78:
                    9c:69:8d:fc:32:79:60:84:94:aa:7c:a3:d5:9d:4f:
                    5b:d2:ac:f3:f9:a4:6f:c6:c0:49:7f:51:bd:6b:39:
                    45:57:c3:eb:e9:82:b9:9b:59:53:a9:5b:c7:2f:15:
                    ed:46:ca:9f:90:02:47:20:3d:f5:18:98:5d:de:f0:
                    d0:45:5c:35:7e:86:f3:b6:a6:99:ac:ab:b5:f2:72:
                    06:e2:b6:40:9e:6b:74:54:d4:0d:c7:fb:c6:16:48:
                    73:fc:c8:c7:c1:02:8c:a8:66:f0:66:87:48:c3:0b:
                    b7:47:c6:f2:06:90:98:fe:54:37:4a:2f:4c:12:76:
                    28:11:0e:fb:c1:fb:e5:fa:d1:35:b6:e6:af:5e:56:
                    d6:51:2c:13:7c:0f:04:27:55:03:b9:29:8b:18:a6:
                    31:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:39:51:F3:44:8C:B1:E3:D7:5D:99:FE:6B:CE:DD:91:CC:91:56:CB
            X509v3 Authority Key Identifier:
                keyid:CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:35:3f:4f:04:29:2b:e3:b9:25:3b:c3:e0:6b:4c:88:2d:26:
         0e:95:e9:17:6f:23:eb:a1:71:a0:f8:79:1c:28:0b:c9:97:8e:
         aa:c1:cb:ab:7d:c7:c1:a6:9f:4f:65:23:2c:97:49:95:6b:1f:
         93:3f:6b:1c:31:c1:8e:98:f1:2a:e4:0e:0c:64:30:d2:67:79:
         e1:cb:96:ee:26:a4:44:36:d6:4e:92:15:4e:86:11:f1:11:68:
         32:e2:44:26:4d:52:e3:fe:a3:65:0b:8b:62:ad:69:d0:eb:55:
         6d:cf:75:3f:f5:f9:8a:aa:9c:82:03:03:25:eb:87:e4:64:30:
         a0:e8:3b:62:69:a0:e0:74:74:6d:9c:1d:37:0d:4a:74:59:75:
         48:f4:52:64:40:f1:3e:37:b6:8b:1f:23:7e:eb:d5:8a:da:6d:
         83:f1:1c:34:f5:02:20:15:76:41:32:9d:03:b1:68:af:70:07:
         bd:54:45:1e:b4:27:1c:25:e9:fa:61:8d:a5:5e:a5:13:fc:63:
         6f:40:a6:ee:bf:c6:c9:a3:9b:81:a0:43:01:2f:f0:92:0f:af:
         0a:cc:1d:13:51:03:70:3d:ed:75:c2:07:04:a9:ad:56:64:d9:
         3e:fa:45:38:2e:ab:02:b4:85:20:47:23:fe:b0:72:f8:af:d3:
         cf:de:57:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org