Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/1/34352e3137362e33362e302f32322d3234203d3e20323638393638.roa
File:                     34352e3137362e33362e302f32322d3234203d3e20323638393638.roa (raw, json)
Hash identifier:          D/69hD/x4Mo/aPsuG/FcsPvrYV6lYFEq4A0CwGcOEhs=
Subject key identifier:   20:60:56:E3:E8:85:26:09:B2:49:60:84:D5:05:5D:F0:36:5B:CB:BB
Certificate issuer:       /CN=087BBD75E05DD6CA3A4ABAAFF5B092CC2B593244
Certificate serial:       659ABB89D86B551BC3D7C40E6405FB276DE0FB8E
Authority key identifier: 08:7B:BD:75:E0:5D:D6:CA:3A:4A:BA:AF:F5:B0:92:CC:2B:59:32:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/087BBD75E05DD6CA3A4ABAAFF5B092CC2B593244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/1/34352e3137362e33362e302f32322d3234203d3e20323638393638.roa
Signing time:             Sat 03 Jun 2023 22:52:48 +0000
ROA not before:           Sat 03 Jun 2023 22:47:48 +0000
ROA not after:            Sat 01 Jun 2024 22:52:48 +0000
asID:                     268968
IP address blocks:        45.176.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9a:bb:89:d8:6b:55:1b:c3:d7:c4:0e:64:05:fb:27:6d:e0:fb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087BBD75E05DD6CA3A4ABAAFF5B092CC2B593244
        Validity
            Not Before: Jun  3 22:47:48 2023 GMT
            Not After : Jun  1 22:52:48 2024 GMT
        Subject: CN=206056E3E8852609B2496084D5055DF0365BCBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:07:36:16:be:d2:53:9c:f6:eb:dc:02:45:
                    a2:66:23:89:00:18:31:be:69:e5:62:92:cc:b9:4a:
                    3f:ef:a4:a2:9a:86:bc:ea:0c:44:0d:ab:a9:e1:b1:
                    7c:89:92:02:16:8a:a0:38:44:15:1d:e4:5f:c6:d0:
                    36:af:e2:68:03:af:cd:2c:88:d7:e5:71:e6:d4:9b:
                    17:3e:b1:76:84:e5:d3:00:5c:d8:92:ef:7b:6c:01:
                    e6:ee:dd:fe:44:4d:c5:4b:53:c0:d2:58:da:e1:d1:
                    d6:3d:b5:d6:10:83:3c:84:4e:eb:80:cb:f4:4a:c6:
                    87:37:f5:62:b3:d2:f5:1b:87:85:23:1b:0a:55:38:
                    0f:ee:92:03:b1:e1:8b:59:b4:c2:9e:92:f5:cf:11:
                    6f:71:c0:48:b1:be:d3:77:fd:53:ae:fd:ed:8f:03:
                    29:91:cd:61:39:30:7e:9a:cf:41:75:f5:6c:2e:d8:
                    11:61:10:0a:a5:e3:eb:c6:58:67:f8:a9:f0:8b:86:
                    0d:33:a6:50:ad:0d:46:3e:47:cb:cf:d4:5c:cc:7b:
                    45:85:54:bd:32:54:c4:24:43:fb:6b:5f:29:5b:00:
                    99:0f:5d:61:1b:7b:72:e0:32:1c:6a:ab:d4:d7:bf:
                    76:fe:72:71:b5:e9:de:2b:e9:ed:2d:6b:84:f0:3a:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:60:56:E3:E8:85:26:09:B2:49:60:84:D5:05:5D:F0:36:5B:CB:BB
            X509v3 Authority Key Identifier:
                keyid:08:7B:BD:75:E0:5D:D6:CA:3A:4A:BA:AF:F5:B0:92:CC:2B:59:32:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/1/087BBD75E05DD6CA3A4ABAAFF5B092CC2B593244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/087BBD75E05DD6CA3A4ABAAFF5B092CC2B593244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/1/34352e3137362e33362e302f32322d3234203d3e20323638393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:73:c5:d1:86:df:51:47:6b:35:ba:9d:44:62:8b:e7:99:76:
         8c:2a:47:de:1a:99:c2:25:9f:e6:4a:8b:99:e6:2f:f2:58:35:
         32:cb:c6:4c:79:c4:0f:54:09:c1:37:a2:10:fe:69:6a:60:55:
         33:f6:88:2a:9b:96:98:a4:52:bf:93:85:2d:f9:2d:72:e3:be:
         31:48:b2:51:7d:bc:f1:b5:4b:12:e9:a4:fa:7c:8e:40:76:06:
         28:92:d7:b9:3f:ab:0d:42:e0:e9:b6:40:92:7d:a2:9a:0c:ba:
         99:f2:da:77:15:0f:59:ec:2e:cb:07:d1:82:be:e7:66:3d:0f:
         10:51:a7:54:7f:db:bb:44:06:d8:53:c9:59:59:f4:29:52:7f:
         e1:38:91:56:80:26:a1:33:59:0b:ba:2e:17:c3:37:3b:98:8a:
         ab:8d:1f:99:5c:8d:c5:c3:f4:0d:5c:12:14:07:d1:9a:53:d9:
         6b:1e:e4:1a:28:cf:c2:74:f8:a7:ec:dc:61:c9:0b:57:f4:b4:
         c9:02:b7:aa:91:88:6c:1d:da:c1:c6:14:ae:35:b4:c9:d1:ea:
         80:65:8f:8e:a5:99:af:94:f7:21:d6:0e:98:b4:c4:3e:e8:d2:
         54:88:b6:27:ca:b2:ce:83:11:d3:a6:f5:82:a1:1b:19:3e:61:
         a2:4c:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org