Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32322d3232203d3e20323638383432.roa
File:                     34352e3137342e34302e302f32322d3232203d3e20323638383432.roa (raw, json)
Hash identifier:          15znT6TaCN7Qt49LfDFhrPGbl+9emcjlFE+naQ/T2JE=
Subject key identifier:   8C:CA:BF:B0:5A:66:D5:E1:FA:65:F6:B0:FB:21:3D:73:1F:B0:87:7F
Certificate issuer:       /CN=C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277
Certificate serial:       558BF446794DEE9415CC6DC0C1B5A4395FFD8C1C
Authority key identifier: C7:A1:F2:F4:04:4B:C3:97:33:2A:A8:FD:BE:7B:5E:47:FC:C6:B2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32322d3232203d3e20323638383432.roa
Signing time:             Thu 07 Mar 2024 15:54:56 +0000
ROA not before:           Thu 07 Mar 2024 15:49:56 +0000
ROA not after:            Thu 06 Mar 2025 15:54:56 +0000
asID:                     268842
IP address blocks:        45.174.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8b:f4:46:79:4d:ee:94:15:cc:6d:c0:c1:b5:a4:39:5f:fd:8c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277
        Validity
            Not Before: Mar  7 15:49:56 2024 GMT
            Not After : Mar  6 15:54:56 2025 GMT
        Subject: CN=8CCABFB05A66D5E1FA65F6B0FB213D731FB0877F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:cf:41:32:93:b4:1a:98:db:6e:8b:64:90:
                    a8:d0:ad:d4:74:69:7c:7a:f9:e2:b5:86:b6:ca:f9:
                    d0:56:56:e0:39:37:ff:00:54:24:0c:f3:e9:21:7a:
                    8a:51:2c:6c:75:73:74:2a:4c:d4:08:d3:ff:97:c3:
                    82:81:32:b4:ac:cf:73:fd:a9:54:cb:a4:64:a3:87:
                    ab:00:f7:76:ef:5b:05:ff:93:84:e0:2b:ce:51:2d:
                    52:f2:7b:81:7d:29:d3:8c:8c:64:c4:f2:bd:5c:6e:
                    37:cd:2f:68:48:ca:97:4c:e8:e2:4f:c1:24:30:00:
                    ea:23:69:ea:b9:81:fe:63:41:0a:c3:0f:e6:f3:47:
                    d2:74:e8:df:7e:c0:52:7f:f3:f4:82:6e:88:d2:6c:
                    33:6f:ef:50:3b:20:82:9e:c3:82:0a:9b:5f:c4:3b:
                    f5:15:78:83:78:0d:26:da:26:e5:bd:a8:43:75:bb:
                    b6:37:a7:e6:2e:62:50:e6:56:6b:f5:88:ba:be:4e:
                    90:77:fd:bc:da:56:05:18:ac:8c:49:54:21:80:c6:
                    62:10:70:70:66:d1:8d:7a:91:82:a3:b4:1f:0d:43:
                    78:80:8d:8f:ce:9d:35:21:ba:8e:d4:00:70:2f:b0:
                    cf:d2:c3:75:2e:41:8e:7d:c4:03:3e:36:03:98:5a:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:BF:B0:5A:66:D5:E1:FA:65:F6:B0:FB:21:3D:73:1F:B0:87:7F
            X509v3 Authority Key Identifier:
                keyid:C7:A1:F2:F4:04:4B:C3:97:33:2A:A8:FD:BE:7B:5E:47:FC:C6:B2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7A1F2F4044BC397332AA8FDBE7B5E47FCC6B277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32322d3232203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:25:b6:5a:df:37:78:a1:a3:01:8d:39:c2:af:61:8b:b2:84:
         a3:c7:f0:1b:ff:3f:81:c2:c8:98:44:e6:04:50:4e:3a:50:d9:
         5d:3c:5e:02:65:eb:a5:af:a5:f0:63:44:4e:4a:d4:28:85:c9:
         54:b8:c3:52:51:5a:0b:5d:89:ca:c0:f2:02:ab:f1:11:50:2d:
         2f:c3:85:26:55:03:a4:92:41:2a:65:05:50:7a:42:11:65:12:
         42:32:43:39:8f:22:4e:f2:bd:8f:21:ed:0e:84:13:a1:f5:d9:
         1b:02:a3:8f:e7:d2:85:c4:e1:8c:f9:65:84:4d:dd:69:78:dc:
         0a:89:c6:b1:f2:67:1e:78:f1:79:f9:fb:42:af:3f:ba:b1:54:
         60:31:1f:75:1e:47:65:a2:2c:7a:2a:c3:08:bd:3c:15:1d:0c:
         19:0f:45:49:f6:87:d4:6d:1f:00:29:cb:b7:0f:29:56:f1:e4:
         7a:2c:40:25:0f:ef:c8:1f:b0:c6:59:33:66:fe:f3:99:bb:02:
         f1:f5:93:2d:6b:d8:18:b7:14:9b:83:6b:d5:f0:c1:04:d5:c2:
         0b:73:ab:1e:39:d3:ef:ae:29:f0:98:2a:b6:c9:06:c1:da:c3:
         ca:cc:a9:61:03:15:78:14:66:e2:8e:e4:da:45:25:49:a4:7b:
         de:8b:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org