Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa
File:                     34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa (raw, json)
Hash identifier:          rAdW+XyrYuLYJ1MRyXA0ngEG/Cq5KfBBppn7xqrQa5s=
Subject key identifier:   DA:4A:8C:78:A6:20:6E:C0:AB:29:5F:C6:C1:61:66:3C:E6:35:CA:9F
Certificate issuer:       /CN=891796811536F9E96F82342847EC5708FC1E88E7
Certificate serial:       05BC7F5132D5F80AFC708B570FA1B45DB0C6A1C9
Authority key identifier: 89:17:96:81:15:36:F9:E9:6F:82:34:28:47:EC:57:08:FC:1E:88:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/891796811536F9E96F82342847EC5708FC1E88E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa
Signing time:             Fri 12 Apr 2024 13:15:21 +0000
ROA not before:           Fri 12 Apr 2024 13:10:21 +0000
ROA not after:            Sat 12 Apr 2025 13:15:21 +0000
asID:                     267155
IP address blocks:        45.229.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bc:7f:51:32:d5:f8:0a:fc:70:8b:57:0f:a1:b4:5d:b0:c6:a1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891796811536F9E96F82342847EC5708FC1E88E7
        Validity
            Not Before: Apr 12 13:10:21 2024 GMT
            Not After : Apr 12 13:15:21 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:d1:5b:e0:15:e7:e4:4d:cb:fb:a5:cf:bb:
                    bc:80:8c:82:15:40:79:ff:e4:35:3d:95:c6:79:fa:
                    ed:ec:83:7a:8c:06:89:ca:87:bf:f6:c4:ff:c3:3e:
                    dd:93:f8:ce:fe:fc:98:49:d3:8f:85:95:7b:d2:d4:
                    6d:be:52:a3:08:84:b6:9f:11:88:ce:ca:a6:d8:a4:
                    a7:0c:39:0c:a2:3a:42:73:0c:af:16:a0:f4:f2:90:
                    e1:5e:26:94:06:cd:c9:3d:8f:ea:37:14:f7:a8:b8:
                    a8:df:39:8b:76:1e:ac:95:0a:46:5d:f3:47:20:f2:
                    9f:74:3f:16:a9:a1:f8:ea:ef:81:20:68:98:22:9d:
                    84:64:63:9e:f5:e8:c3:0e:ee:d9:b7:57:b9:46:8e:
                    da:45:d3:93:16:53:af:c0:06:a0:d6:4f:80:b2:4f:
                    9a:f2:ba:0c:07:1e:73:e1:47:c1:f4:c6:47:3e:ce:
                    c6:e9:73:9c:5f:00:5c:14:9a:60:0a:fc:25:89:bc:
                    38:17:47:32:83:12:95:ee:be:d2:3f:e3:54:5c:b1:
                    4b:1d:e2:48:2e:7d:29:41:1b:7e:ac:62:9b:d3:5d:
                    dc:85:94:0f:c3:52:c0:5e:fc:e4:36:56:81:58:5f:
                    f9:99:d6:3e:f6:cc:c1:f0:10:ee:f5:4f:d7:48:23:
                    f4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4A:8C:78:A6:20:6E:C0:AB:29:5F:C6:C1:61:66:3C:E6:35:CA:9F
            X509v3 Authority Key Identifier:
                keyid:89:17:96:81:15:36:F9:E9:6F:82:34:28:47:EC:57:08:FC:1E:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/891796811536F9E96F82342847EC5708FC1E88E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/891796811536F9E96F82342847EC5708FC1E88E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:f1:97:41:14:e6:32:99:5a:9e:9f:d6:70:32:d3:db:2a:55:
         b3:5e:07:85:03:ae:11:a9:1b:8a:5a:90:26:5a:42:fd:26:48:
         17:54:82:5c:47:bc:3c:f0:0d:03:9a:60:e7:e1:24:0a:d7:d8:
         1a:73:f9:aa:95:1b:93:fe:30:74:8e:17:8d:43:54:b3:13:81:
         ef:1f:c1:7e:1f:eb:25:5a:47:04:31:81:27:1c:eb:e1:7e:fc:
         7f:13:0d:f0:d3:6e:7a:a5:10:ad:69:cb:09:be:39:a0:eb:20:
         31:fe:a5:93:ae:d2:80:92:a1:8f:77:92:63:20:b4:3e:7c:a0:
         33:87:17:cf:60:63:f5:f7:73:98:0f:c4:d2:f0:60:e2:67:fd:
         89:e8:62:fb:e8:49:64:1f:5f:5c:fb:cf:a7:0a:8d:4f:83:28:
         a2:d2:8e:65:71:97:0b:89:d3:66:81:05:46:24:c6:c4:fd:0b:
         94:65:13:91:34:d9:35:94:83:d5:56:50:8f:00:79:59:1b:45:
         30:e9:19:7d:54:22:97:e9:cf:70:ec:02:b2:4a:cc:aa:33:e0:
         c0:8b:6d:44:a9:75:6e:d6:a7:6b:71:c5:6c:45:4e:84:61:e0:
         66:6a:67:9d:03:72:61:e2:2d:da:54:cd:b6:49:df:ed:bd:11:
         81:27:34:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org