Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34322e302f32342d3234203d3e20323638383432.roa
File:                     34352e3137342e34322e302f32342d3234203d3e20323638383432.roa (raw, json)
Hash identifier:          eeLsi+2d+xjuFIyCrsj5U057VBLUca1QYqPlUk1+Nls=
Subject key identifier:   30:74:7D:99:D4:76:D6:CA:5E:1A:F1:58:42:AC:A5:44:2F:C3:7E:83
Certificate issuer:       /CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
Certificate serial:       134422D06B1F896FFB24D1CDE238191E1B30405B
Authority key identifier: B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34322e302f32342d3234203d3e20323638383432.roa
Signing time:             Wed 20 Jul 2022 15:51:17 +0000
ROA not before:           Wed 20 Jul 2022 15:46:17 +0000
ROA not after:            Wed 19 Jul 2023 15:51:17 +0000
asID:                     268842
IP address blocks:        45.174.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:44:22:d0:6b:1f:89:6f:fb:24:d1:cd:e2:38:19:1e:1b:30:40:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1DC8A4583119FD74615E8A11D8796C0EFFD183E
        Validity
            Not Before: Jul 20 15:46:17 2022 GMT
            Not After : Jul 19 15:51:17 2023 GMT
        Subject: CN=30747D99D476D6CA5E1AF15842ACA5442FC37E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:9b:99:b9:78:ae:c9:4d:86:0d:44:43:b5:
                    bd:97:78:f3:8d:19:22:a0:b0:8f:b0:bc:16:7a:b4:
                    61:d9:88:a3:71:69:34:c2:87:07:96:85:2d:d6:35:
                    52:eb:fc:b4:38:4b:7d:1f:91:0b:e0:f0:ae:dc:95:
                    6e:36:ef:b1:a3:ab:7f:21:26:cd:cb:9b:5e:83:e2:
                    b6:f7:78:1a:4a:7c:e2:3e:47:6b:84:52:92:df:57:
                    f0:04:85:1f:a7:6e:a9:65:cf:50:b9:5e:9c:37:0d:
                    4b:a6:3a:f4:ef:1f:96:26:5b:0b:3b:ac:b5:20:a9:
                    3e:92:b1:8c:fc:e8:a6:34:cd:4e:19:72:fc:8d:71:
                    b1:e4:59:67:39:9a:d4:39:15:54:7e:79:45:a1:8d:
                    3a:7f:d9:be:f2:af:74:fc:cc:e5:7d:cc:67:5f:85:
                    d4:30:2f:8d:03:a0:cd:00:9f:db:00:51:63:cc:99:
                    a9:4c:a4:3a:fe:f4:ea:22:41:45:19:f0:37:22:6d:
                    80:05:a0:72:46:76:89:d6:e4:e9:65:af:d5:5f:f1:
                    61:c8:98:af:03:58:30:1d:1c:ee:5e:ab:23:95:cc:
                    26:84:85:35:85:f5:21:74:cc:5e:d1:96:34:fd:3e:
                    76:dd:d2:1a:dd:aa:16:21:e1:10:76:ee:da:a0:87:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:74:7D:99:D4:76:D6:CA:5E:1A:F1:58:42:AC:A5:44:2F:C3:7E:83
            X509v3 Authority Key Identifier:
                keyid:B1:DC:8A:45:83:11:9F:D7:46:15:E8:A1:1D:87:96:C0:EF:FD:18:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1DC8A4583119FD74615E8A11D8796C0EFFD183E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34322e302f32342d3234203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:64:24:87:b5:85:fb:e8:a1:d6:ab:06:5f:40:12:e1:2f:2d:
         12:d4:bc:91:13:e6:fa:1f:6c:b8:9c:b8:c0:42:b5:ad:72:d4:
         9d:67:83:db:8f:43:bc:53:17:a3:0f:f8:54:06:b8:05:f7:4e:
         56:27:da:21:29:6a:26:65:01:d1:4f:af:71:ee:f6:07:b3:ca:
         e7:58:63:dc:e5:59:40:a1:9e:ad:34:df:c2:1e:7e:8a:65:01:
         a0:84:f8:94:74:ea:47:80:96:3f:71:c7:c5:99:d0:1f:17:71:
         17:73:80:27:ad:f6:9a:57:9f:0f:f4:ce:f8:37:02:8e:8e:5c:
         c8:0b:f6:6d:c4:2a:44:7a:7c:3b:7d:6d:cd:3d:95:2b:62:3f:
         7f:fc:5a:07:45:9a:26:ed:91:12:d0:46:5d:fb:f5:e0:5f:df:
         ec:3e:83:8d:01:35:97:9e:61:55:49:89:be:cc:54:91:30:d2:
         5b:24:44:a7:c6:74:1f:ef:97:a6:d7:27:49:52:01:db:c4:37:
         79:9e:ba:82:7f:57:52:a5:55:84:ca:20:ea:e3:c0:a5:5a:b8:
         95:e6:21:11:9b:a4:55:6c:1d:c4:4c:52:58:72:2f:18:df:65:
         41:2e:94:6d:6c:cf:69:61:f0:49:c6:da:c9:7e:6c:34:23:ea:
         26:9f:cb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org