Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3137382e34302e302f32322d3234203d3e20323632393037.roa
File:                     34352e3137382e34302e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          PXlDW5QKun8eIQHXM35mQodHMkHz3P2QGkSPywgkykQ=
Subject key identifier:   86:1C:98:08:D3:BD:0D:87:8A:17:BE:B0:DA:CA:F6:CC:EC:1E:BF:BB
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       2A96E7C42335D020714D8FD28ACBC207361E90F0
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3137382e34302e302f32322d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:20 +0000
ROA not before:           Sat 03 Feb 2024 12:48:20 +0000
ROA not after:            Sat 01 Feb 2025 12:53:20 +0000
asID:                     262907
IP address blocks:        45.178.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:96:e7:c4:23:35:d0:20:71:4d:8f:d2:8a:cb:c2:07:36:1e:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:20 2024 GMT
            Not After : Feb  1 12:53:20 2025 GMT
        Subject: CN=861C9808D3BD0D878A17BEB0DACAF6CCEC1EBFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:46:b9:06:1d:5f:54:5f:29:12:9c:e0:69:
                    39:61:c8:b6:47:36:be:7b:1c:c4:d4:c8:db:6b:07:
                    c0:64:28:6d:42:0a:73:26:06:54:7d:18:e1:65:19:
                    eb:c9:55:fd:08:41:e7:35:58:ad:0a:d6:f5:b5:d1:
                    b4:51:f7:55:c6:2b:2a:fa:59:91:6a:92:81:9d:df:
                    5d:7e:33:d7:c3:c6:e0:85:a2:ac:38:47:fa:4f:93:
                    c8:21:22:ce:92:41:aa:fe:20:4d:f8:23:8e:e5:f8:
                    58:82:4b:89:d0:54:ea:a3:b4:5f:f4:7e:d1:10:fd:
                    66:95:60:79:0a:3b:26:fe:0b:4c:c0:2f:a3:cb:2c:
                    09:ac:84:28:c2:86:de:20:a3:57:6d:48:23:74:28:
                    61:a6:6a:39:42:de:4a:b4:4c:21:72:37:dc:14:ce:
                    4a:c8:ed:d2:d0:00:2d:f0:94:6f:40:ff:5f:55:0a:
                    a5:37:70:a7:c0:a9:c2:f9:05:f6:c3:f7:a7:61:2e:
                    a7:83:61:3a:24:0a:67:27:4e:03:12:9a:05:a2:cb:
                    9b:05:4c:86:b8:de:36:fa:39:80:e4:fc:33:6f:b6:
                    5c:1a:83:74:be:58:5c:91:ff:65:62:fa:a3:3e:07:
                    f9:e2:7e:40:99:75:31:5c:39:bb:2c:77:15:97:28:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1C:98:08:D3:BD:0D:87:8A:17:BE:B0:DA:CA:F6:CC:EC:1E:BF:BB
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3137382e34302e302f32322d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:da:85:0f:20:6d:66:ad:33:66:73:f1:c3:8a:69:29:b0:53:
         3f:f9:65:ae:74:93:22:23:b5:e6:d0:66:3c:8d:6b:43:04:1f:
         2e:27:15:cf:41:68:22:b0:d7:73:59:55:bf:fd:09:07:0b:f7:
         29:b7:fc:67:a4:81:ba:8f:cf:8c:56:be:07:fc:88:92:a9:ef:
         3c:3c:8c:de:79:d8:da:1c:0d:46:90:a7:e1:b0:72:c8:bd:79:
         da:c4:f5:cb:4d:b0:97:73:61:51:f1:9c:47:0a:77:04:0a:25:
         99:21:c2:79:ed:41:08:0d:88:97:23:19:2d:66:87:f5:e2:24:
         77:68:46:a9:09:14:13:32:0e:d5:e2:79:55:00:a8:a8:f5:d2:
         af:6e:23:29:77:79:2b:f2:6d:af:a0:cc:23:5f:46:0e:1d:88:
         0d:92:94:ea:d9:b4:6e:1f:58:ca:e1:d8:e3:e8:e8:15:8d:8c:
         68:3a:0f:f3:27:e3:88:81:da:7e:b3:71:85:6d:7b:4c:ec:e8:
         5b:5d:a7:fc:fc:10:6f:4b:6a:de:f4:a3:8b:34:c8:24:37:34:
         5f:dd:ce:06:6b:30:2e:a0:99:32:d9:f2:05:8f:13:42:6b:b0:
         ee:7e:c4:db:99:64:95:35:f3:f0:02:1c:ba:6b:77:32:7d:ed:
         a0:ba:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org