Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          fQFnlaX8HcowGifLjqapiSUO0obumrpFZFJ9vVtYf+k=
Subject key identifier:   E1:F2:F8:E6:DD:D2:B2:BB:41:BB:D1:82:55:F4:63:C3:2D:E7:26:28
Certificate issuer:       /CN=B776754A2C8B100218B061AA79BE9186F191500D
Certificate serial:       573C1D8DEEB5213D61E6C95AA69B3FBB5B588DC2
Authority key identifier: B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa
Signing time:             Sat 11 Nov 2023 20:59:18 +0000
ROA not before:           Sat 11 Nov 2023 20:54:18 +0000
ROA not after:            Sat 09 Nov 2024 20:59:18 +0000
asID:                     267027
IP address blocks:        45.227.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3c:1d:8d:ee:b5:21:3d:61:e6:c9:5a:a6:9b:3f:bb:5b:58:8d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Validity
            Not Before: Nov 11 20:54:18 2023 GMT
            Not After : Nov  9 20:59:18 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0a:3c:8e:14:02:2f:29:76:ce:cf:68:cd:b4:
                    59:e8:7f:80:e6:d4:37:77:d3:a8:18:32:65:1a:3d:
                    e4:00:f0:ec:7f:0c:20:12:f6:2b:34:7a:4b:cd:9d:
                    fb:d7:68:12:22:35:0e:f2:88:95:27:62:bc:95:55:
                    93:f2:9b:0a:ac:2a:28:29:c8:48:48:fc:1f:d6:f0:
                    44:c2:20:5e:f3:cc:ea:36:9e:a2:07:d0:7e:49:ba:
                    df:d1:ab:3a:83:38:2a:16:a5:bb:0b:16:1a:1b:eb:
                    e7:90:4e:bf:b4:26:0b:a4:1f:f9:82:31:ad:8e:e8:
                    e9:c1:78:be:ee:9b:4c:67:4b:cb:68:9b:94:71:14:
                    76:5a:5d:28:61:8a:5d:1c:b0:1c:17:48:a0:7a:67:
                    2a:d0:8d:af:62:ca:68:c1:71:41:2a:3c:29:52:87:
                    31:db:80:08:6a:23:fe:7b:08:4b:b8:6c:b9:0e:76:
                    f2:c3:14:bb:0a:72:b0:f4:ad:6f:bc:94:8e:fd:2c:
                    c6:5d:f2:18:5d:ac:df:d5:f1:eb:53:b5:3b:8a:93:
                    a3:86:a8:4c:7c:75:6e:e0:f8:e5:7d:df:00:a3:5d:
                    6c:d6:c9:ed:2f:d1:7d:cc:d0:bb:8d:0f:0d:1f:3b:
                    c0:f9:9f:03:68:b4:a8:61:fe:be:36:7b:dd:35:7a:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:F8:E6:DD:D2:B2:BB:41:BB:D1:82:55:F4:63:C3:2D:E7:26:28
            X509v3 Authority Key Identifier:
                keyid:B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:61:14:e9:a8:54:84:56:c3:f2:4d:b5:87:5f:1e:6e:e2:10:
         91:b6:a6:a1:90:1e:83:18:72:8d:da:a7:e2:fd:a5:1c:bd:ca:
         db:b3:d9:af:18:f0:6b:6a:04:23:67:68:69:51:d7:b0:4c:c8:
         c3:e1:1a:10:3c:b8:8a:46:9c:82:d1:e2:c5:4c:f4:cd:5d:84:
         2c:c0:2e:7f:16:02:6e:a7:6d:5f:b9:28:65:4f:1c:28:04:99:
         32:b5:6e:c8:86:82:39:63:49:29:7f:5a:68:38:e0:54:48:dc:
         71:09:8b:f6:0d:91:fa:6e:67:49:f7:50:bb:57:d5:06:d3:fc:
         86:c1:9f:49:72:0b:f4:22:57:2c:ad:7b:40:3f:ed:01:84:1c:
         10:ba:8f:8c:5d:8a:29:a9:71:bb:18:36:a1:94:d8:26:db:b1:
         12:0e:9c:a8:db:59:74:a8:a3:bd:33:e5:af:77:20:f8:8e:c0:
         c8:e5:13:63:d1:34:b6:09:01:9b:5c:db:3b:6f:1b:ef:24:fe:
         34:d9:77:88:df:4c:11:fa:bc:a9:c3:34:15:a0:8d:26:6f:83:
         62:78:18:2f:bb:86:35:af:78:67:b0:7a:be:37:a9:5b:eb:2b:
         0d:7e:5c:c7:f1:b2:e8:5e:3e:32:b0:50:50:56:df:27:2b:77:
         07:bb:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org