Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32332d3233203d3e20323638383432.roa
File:                     34352e3137342e34302e302f32332d3233203d3e20323638383432.roa (raw, json)
Hash identifier:          x3AsrfuZOvuPw30O8ekaNdslCQUwyV8DquBGmOn70iA=
Subject key identifier:   77:AE:C4:CB:8E:D1:DD:2A:06:F3:50:57:6A:C1:6E:22:F0:86:19:2C
Certificate issuer:       /CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
Certificate serial:       7418244DF9F9356CE25F66B1FD0592971D82355B
Authority key identifier: B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32332d3233203d3e20323638383432.roa
Signing time:             Wed 20 Jul 2022 15:51:17 +0000
ROA not before:           Wed 20 Jul 2022 15:46:17 +0000
ROA not after:            Wed 19 Jul 2023 15:51:17 +0000
asID:                     268842
IP address blocks:        45.174.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:18:24:4d:f9:f9:35:6c:e2:5f:66:b1:fd:05:92:97:1d:82:35:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
        Validity
            Not Before: Jul 20 15:46:17 2022 GMT
            Not After : Jul 19 15:51:17 2023 GMT
        Subject: CN=77AEC4CB8ED1DD2A06F350576AC16E22F086192C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:41:84:db:fa:bb:46:50:82:5f:0e:3a:7d:
                    2a:99:67:4b:f7:bc:16:7e:60:ea:e2:70:f3:ea:f1:
                    a9:28:c8:8c:55:6e:21:f3:29:a7:8c:c5:33:af:46:
                    6c:1e:43:81:76:2d:36:dc:b2:c7:58:a2:8d:5e:71:
                    a5:18:c8:5f:f2:dd:e0:4d:ca:b7:fc:36:8a:0d:fe:
                    a9:3f:89:83:04:56:56:06:73:9a:21:4a:0c:ce:7b:
                    6a:67:8d:8f:77:ff:77:06:84:b1:07:b5:19:57:f5:
                    c6:f7:c4:72:b0:ea:e7:a6:e0:70:bd:71:3c:8e:73:
                    ac:9b:c6:be:13:68:eb:f8:89:65:5d:b6:a9:cd:65:
                    43:85:3f:99:b5:f8:4c:4a:eb:e2:25:63:63:91:be:
                    23:8c:ec:63:17:9b:fb:4c:65:07:33:c8:93:f6:4d:
                    da:9a:38:d0:48:31:45:b1:74:fe:48:6d:07:0d:cd:
                    d9:db:7a:fd:d6:75:10:19:a0:f7:83:8e:63:aa:1e:
                    82:cf:28:21:ac:9f:8d:99:1b:55:89:f5:92:ef:1b:
                    1d:c5:ce:38:51:fc:d5:f2:eb:3a:6d:04:54:a7:9d:
                    b2:5c:e5:e7:22:31:30:f5:a2:bc:02:f7:4f:29:81:
                    fa:27:15:36:03:eb:8b:42:bc:29:ba:da:6c:6e:0c:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AE:C4:CB:8E:D1:DD:2A:06:F3:50:57:6A:C1:6E:22:F0:86:19:2C
            X509v3 Authority Key Identifier:
                keyid:B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32332d3233203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:82:c4:80:46:c8:39:97:0f:70:b0:c8:17:7e:6c:9a:49:
         7f:40:67:c1:61:2e:de:90:2b:cb:6e:f1:c5:e4:e8:e5:f6:15:
         ee:30:e3:cb:4d:ef:d8:c1:d8:89:b1:c1:26:0d:de:04:ef:46:
         62:c2:b9:65:7f:e1:d0:04:e6:12:d3:a3:25:69:5a:27:8f:72:
         18:cc:05:eb:3f:1d:4b:3f:c2:1c:fc:d5:26:d9:48:25:a3:65:
         97:b6:d0:07:c6:25:54:96:cd:07:7e:21:f0:f1:9b:e1:47:29:
         b2:89:45:4d:09:51:d9:78:46:51:1d:07:27:ae:c5:b4:7e:45:
         60:25:ff:24:b0:0a:84:82:80:1c:e4:4e:02:11:18:95:38:a3:
         4b:21:6b:20:92:0b:07:03:1e:f0:b5:1e:11:f3:84:ac:53:fd:
         eb:14:9d:c1:15:9e:45:e9:d6:29:6d:5a:c5:0b:0d:a4:63:f7:
         dc:8b:64:d7:36:ce:7e:50:24:cc:ef:fa:04:59:97:54:37:af:
         85:14:6b:71:04:da:d5:b8:82:0b:f4:fb:9f:49:1e:23:fc:74:
         02:72:98:0e:d7:f2:14:25:ec:56:f0:a7:a6:2c:19:d9:08:c9:
         1c:18:e6:97:3c:71:02:db:c7:9a:4a:62:69:0e:68:74:c4:d0:
         d5:d5:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org