Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32322d3234203d3e20323638303931.roa
File:                     34352e3136392e32342e302f32322d3234203d3e20323638303931.roa (raw, json)
Hash identifier:          6+WMp1gC1jr/2gsjxJy1bb4HVydpvPwrYAF+d4l9QXA=
Subject key identifier:   7B:09:26:CB:31:23:BE:C1:01:FA:DB:D2:F8:FD:35:F9:F7:EA:6E:E8
Certificate issuer:       /CN=01DA1E43F6D4F3A79AA3177669D6EDBBA31CD64C
Certificate serial:       63F94E89B719F8C61C298BDA31B69B4FF395E9F7
Authority key identifier: 01:DA:1E:43:F6:D4:F3:A7:9A:A3:17:76:69:D6:ED:BB:A3:1C:D6:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01DA1E43F6D4F3A79AA3177669D6EDBBA31CD64C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32322d3234203d3e20323638303931.roa
Signing time:             Sun 10 Jul 2022 05:00:31 +0000
ROA not before:           Sun 10 Jul 2022 04:55:31 +0000
ROA not after:            Sun 09 Jul 2023 05:00:31 +0000
asID:                     268091
IP address blocks:        45.169.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f9:4e:89:b7:19:f8:c6:1c:29:8b:da:31:b6:9b:4f:f3:95:e9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DA1E43F6D4F3A79AA3177669D6EDBBA31CD64C
        Validity
            Not Before: Jul 10 04:55:31 2022 GMT
            Not After : Jul  9 05:00:31 2023 GMT
        Subject: CN=7B0926CB3123BEC101FADBD2F8FD35F9F7EA6EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:42:71:1b:b3:3d:b3:dd:ee:3c:63:04:40:
                    dd:78:dd:6b:4c:35:44:97:19:55:d1:5f:20:55:90:
                    10:1b:c4:00:64:bb:65:34:be:12:2a:0b:83:47:e4:
                    a3:ed:28:d8:6a:d7:93:49:7b:b9:85:0d:11:5c:7c:
                    1c:e9:f9:e9:15:69:01:b1:c0:70:80:17:73:a8:5c:
                    00:f1:d2:5e:8b:2b:b4:5c:2d:17:2f:37:70:ca:20:
                    46:f0:1f:f4:17:b7:d1:c2:b9:04:f3:7f:ea:eb:b8:
                    85:96:37:fe:d4:50:cf:b5:59:cc:31:6d:6b:b9:cb:
                    d1:81:00:f7:36:04:e8:17:f0:e7:07:8c:96:ab:21:
                    b9:de:d2:d8:43:08:e9:25:0c:87:32:fc:dc:29:9e:
                    0f:37:a8:69:eb:0e:c2:2a:d3:e6:23:1d:3b:72:f3:
                    c9:92:5d:2d:41:f7:7f:e1:73:d5:3c:41:80:d5:3a:
                    2e:09:50:06:b5:a6:3d:9a:36:a5:bb:f5:65:2d:04:
                    76:99:49:fb:61:df:cb:61:b2:03:e7:b1:7e:8d:27:
                    40:10:bd:5d:42:fd:14:5b:70:f9:de:6f:1e:2c:76:
                    0d:ea:60:21:64:3b:4c:3f:16:58:c2:27:1c:8c:2d:
                    fd:02:85:a4:c3:57:4e:de:5b:3c:14:2b:db:69:94:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:09:26:CB:31:23:BE:C1:01:FA:DB:D2:F8:FD:35:F9:F7:EA:6E:E8
            X509v3 Authority Key Identifier:
                keyid:01:DA:1E:43:F6:D4:F3:A7:9A:A3:17:76:69:D6:ED:BB:A3:1C:D6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/01DA1E43F6D4F3A79AA3177669D6EDBBA31CD64C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01DA1E43F6D4F3A79AA3177669D6EDBBA31CD64C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32322d3234203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:7a:ab:18:c3:51:af:71:af:b4:6f:5e:f9:b4:7f:4e:6b:
         b2:b0:ce:d5:06:91:bd:c8:dc:d4:60:5a:26:d8:0f:6f:56:f4:
         cd:74:9d:69:c4:25:25:92:54:7d:93:4f:35:49:08:6f:fb:c6:
         14:db:72:bb:d3:d3:a7:14:3c:e0:a6:94:78:b9:38:80:6d:11:
         04:76:20:b3:24:5f:c9:f3:e2:47:5f:9f:fd:1e:18:ae:5c:cd:
         8a:29:03:e2:4d:ea:3b:fc:4a:35:9f:05:7b:6f:98:7e:a6:41:
         11:1d:16:1f:88:48:33:02:59:a8:bb:29:c4:cb:66:1c:62:a2:
         85:4b:c9:8f:67:f5:07:98:f9:92:f1:e2:11:69:0d:5f:57:af:
         49:90:31:97:47:7d:39:a6:39:54:cc:45:8a:60:4f:7b:22:8d:
         53:03:d5:c2:50:af:50:55:e0:9d:cd:37:46:fb:22:d0:f7:a1:
         42:06:0f:10:e0:fe:f7:47:55:55:2e:e7:af:74:ec:0d:4a:8a:
         4c:02:94:64:67:8b:7d:05:47:a5:9f:76:e4:9b:c3:f6:bc:b7:
         a0:01:40:f1:02:d1:32:bc:83:51:2e:ed:06:e2:f2:af:b4:71:
         16:07:f6:d9:0d:e1:e5:fe:fc:45:bb:dd:46:64:98:20:e6:68:
         a5:34:4a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org