Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3136362e3230362e302f32342d3234203d3e20323632343831.roa
File:                     34352e3136362e3230362e302f32342d3234203d3e20323632343831.roa (raw, json)
Hash identifier:          Czqp1fQUyY1+/O78F+DfREd4wAP2GDHMm6WsofVymJI=
Subject key identifier:   29:09:55:D2:3E:F9:68:A7:03:A3:3E:78:86:14:02:5C:7F:E7:D6:D8
Certificate issuer:       /CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
Certificate serial:       73C7693973DB74CB2677C0D655C34B569869C88C
Authority key identifier: E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3136362e3230362e302f32342d3234203d3e20323632343831.roa
Signing time:             Tue 21 Jun 2022 12:56:00 +0000
ROA not before:           Tue 21 Jun 2022 12:51:00 +0000
ROA not after:            Tue 20 Jun 2023 12:56:00 +0000
asID:                     262481
IP address blocks:        45.166.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c7:69:39:73:db:74:cb:26:77:c0:d6:55:c3:4b:56:98:69:c8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1AA65A5271D31B148602437AC6385FE96B4AC60
        Validity
            Not Before: Jun 21 12:51:00 2022 GMT
            Not After : Jun 20 12:56:00 2023 GMT
        Subject: CN=3082010A0282010100CF61EF6759DBA97B7F2F9F6215495E1CB6D634AFE254F8B2134E81C8EFAA238B62C7FD13203A22F291B3180B88F095AF349D6B9D1B112B429E12A27677ACAD4E28819398AC25206EE5CC02AAE0E5930E2A0DDCC20544F12BC55BFC11B77F4090F15A569A74BECA89567D5D55F9E5F22641E0D02224C738E587CE356BB2B1502E5E70BF49DCC08A4D6E81854776BEDAB33D1AD75046F408E9C9C1DFA0C12D9A56CE63ECEE1CD8521409DD0269A2CCDA4F6FEA35612658E80D23F04FBB914F64DE86B7B3129ED3606B42C7D780C31D2C9AE1AF467272DB815618886890FC4C5C1554372DE6DEA3318126B129AE8FB6832D7D8AC6569CDE4A72817F33587C2F26550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:ef:67:59:db:a9:7b:7f:2f:9f:62:15:49:
                    5e:1c:b6:d6:34:af:e2:54:f8:b2:13:4e:81:c8:ef:
                    aa:23:8b:62:c7:fd:13:20:3a:22:f2:91:b3:18:0b:
                    88:f0:95:af:34:9d:6b:9d:1b:11:2b:42:9e:12:a2:
                    76:77:ac:ad:4e:28:81:93:98:ac:25:20:6e:e5:cc:
                    02:aa:e0:e5:93:0e:2a:0d:dc:c2:05:44:f1:2b:c5:
                    5b:fc:11:b7:7f:40:90:f1:5a:56:9a:74:be:ca:89:
                    56:7d:5d:55:f9:e5:f2:26:41:e0:d0:22:24:c7:38:
                    e5:87:ce:35:6b:b2:b1:50:2e:5e:70:bf:49:dc:c0:
                    8a:4d:6e:81:85:47:76:be:da:b3:3d:1a:d7:50:46:
                    f4:08:e9:c9:c1:df:a0:c1:2d:9a:56:ce:63:ec:ee:
                    1c:d8:52:14:09:dd:02:69:a2:cc:da:4f:6f:ea:35:
                    61:26:58:e8:0d:23:f0:4f:bb:91:4f:64:de:86:b7:
                    b3:12:9e:d3:60:6b:42:c7:d7:80:c3:1d:2c:9a:e1:
                    af:46:72:72:db:81:56:18:88:68:90:fc:4c:5c:15:
                    54:37:2d:e6:de:a3:31:81:26:b1:29:ae:8f:b6:83:
                    2d:7d:8a:c6:56:9c:de:4a:72:81:7f:33:58:7c:2f:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:09:55:D2:3E:F9:68:A7:03:A3:3E:78:86:14:02:5C:7F:E7:D6:D8
            X509v3 Authority Key Identifier:
                keyid:E1:AA:65:A5:27:1D:31:B1:48:60:24:37:AC:63:85:FE:96:B4:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E1AA65A5271D31B148602437AC6385FE96B4AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SbCXj9i7tQ1FcXGm65oFTG1kueJjRDwdKNs9kPq8yMN/0/34352e3136362e3230362e302f32342d3234203d3e20323632343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:39:26:e9:2c:76:e4:10:87:a0:57:c4:3f:05:fc:08:97:1d:
         70:ad:aa:3e:3a:09:f8:ba:e3:b4:49:6f:fb:b7:b6:e9:49:23:
         22:b8:fb:4e:7c:67:d8:ae:df:ff:2a:ef:7b:66:ed:08:6c:be:
         35:11:cc:d4:c7:fe:45:d4:d2:18:e0:88:18:8f:95:4a:3b:f7:
         0d:a5:d9:09:6e:6b:15:9e:8f:87:ee:c7:f6:4c:b6:ea:f2:2d:
         3a:3c:7b:9e:d5:3d:90:ec:66:86:4d:f0:c0:31:71:4f:a9:f6:
         d4:41:1f:f7:e9:a0:b1:14:9b:da:26:27:d7:54:69:bd:0c:5e:
         01:30:e8:e9:78:c7:33:b5:36:06:57:66:26:2d:c2:3c:82:eb:
         81:88:ec:0f:17:e8:e5:1c:bb:ad:2e:bb:08:a5:fa:29:e2:9e:
         76:be:f2:89:e0:de:e4:42:35:85:73:1d:66:e2:41:6e:9c:46:
         43:34:fc:a2:75:36:fe:52:7e:75:85:db:21:47:4b:92:86:22:
         10:a5:4b:e0:ba:03:1e:e5:04:40:f6:2a:d8:9f:e1:eb:0f:0b:
         5d:74:bc:47:8a:56:06:81:3f:6b:3d:c2:d1:d4:89:ba:fe:bb:
         96:3c:bf:6d:00:20:14:4f:44:a8:7a:e7:26:2e:11:20:84:0c:
         2c:cb:7c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org