Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134372e302f32342d3234203d3e20323638313630.roa
File:                     34352e3137302e3134372e302f32342d3234203d3e20323638313630.roa (raw, json)
Hash identifier:          lVTvK9pvjCdtsVbzaI1Pmz9Pz8w/O2PfA/pHtSEs/zU=
Subject key identifier:   95:D4:EA:3B:D3:0B:8B:92:09:63:95:8C:35:E1:32:34:88:7A:77:5D
Certificate issuer:       /CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
Certificate serial:       3FBBF4CD55FBC132937AFF45979B341AE5AF726F
Authority key identifier: 1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134372e302f32342d3234203d3e20323638313630.roa
Signing time:             Tue 06 Dec 2022 15:22:48 +0000
ROA not before:           Tue 06 Dec 2022 15:17:48 +0000
ROA not after:            Tue 05 Dec 2023 15:22:48 +0000
asID:                     268160
IP address blocks:        45.170.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bb:f4:cd:55:fb:c1:32:93:7a:ff:45:97:9b:34:1a:e5:af:72:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
        Validity
            Not Before: Dec  6 15:17:48 2022 GMT
            Not After : Dec  5 15:22:48 2023 GMT
        Subject: CN=95D4EA3BD30B8B920963958C35E13234887A775D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:7f:ed:8d:b0:03:9b:1c:dc:8d:3b:e4:56:
                    96:00:40:d3:9f:ec:fe:c2:dd:1d:4b:99:f7:75:a7:
                    51:2d:be:61:7f:36:f0:5d:8d:af:82:c8:4d:aa:32:
                    a5:f8:77:e3:7d:14:22:43:f1:e4:16:d8:1d:17:07:
                    20:1f:8d:19:45:52:52:99:da:71:a6:27:4f:34:4a:
                    74:c8:78:17:61:ab:59:5c:27:d7:0b:75:3a:4d:d2:
                    4b:da:8f:5f:34:e7:fe:4d:68:a8:6e:23:75:8c:c0:
                    7c:a4:70:13:22:e8:bf:ac:91:57:9e:31:12:74:3e:
                    6f:54:08:b9:d3:ee:5b:3d:2a:61:be:a1:53:5d:90:
                    cb:70:dc:53:f9:01:e1:55:e2:47:41:83:3a:72:61:
                    ee:a0:c9:a3:0f:ce:99:e4:e4:76:13:30:38:61:5f:
                    e6:52:a5:13:29:ad:3d:13:02:0a:7b:3d:a8:16:4e:
                    a9:f9:54:f1:1f:ad:da:62:04:cf:7a:a3:f0:4a:9b:
                    a8:a9:75:9a:0c:d1:dd:e8:71:15:f4:8b:09:28:ec:
                    22:00:52:2b:43:19:31:ae:32:fa:ca:c6:6e:be:18:
                    a8:76:76:d4:1a:a3:0b:b8:b2:ad:ad:b7:5e:fa:c9:
                    29:64:c6:26:9f:7b:be:d7:12:83:6a:fd:8c:3c:09:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D4:EA:3B:D3:0B:8B:92:09:63:95:8C:35:E1:32:34:88:7A:77:5D
            X509v3 Authority Key Identifier:
                keyid:1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134372e302f32342d3234203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:7a:d4:da:b5:bd:1e:19:54:b5:96:00:db:dc:01:db:08:c3:
         66:3b:15:1f:54:95:dc:1e:96:ad:9c:1a:af:72:fa:33:73:14:
         4a:5f:80:db:f3:49:35:3b:15:fd:c8:a2:c6:0f:9a:e9:f2:39:
         c7:56:40:53:e6:b5:77:2c:86:5f:65:59:80:a0:c4:7f:d3:51:
         04:66:ec:eb:97:29:53:f1:2c:16:68:ba:c0:5c:9d:76:b0:20:
         19:25:36:af:cd:e6:a7:18:2d:e2:3b:e0:7d:83:a3:6b:3b:f2:
         7d:bd:2e:3f:48:35:42:a0:c4:32:95:7c:2c:c8:bc:95:9d:f9:
         83:89:82:1c:56:bb:ab:9c:54:00:a5:f5:91:56:4e:4c:49:98:
         50:02:51:51:55:90:d0:08:4f:ef:df:a5:c3:25:d5:15:09:a9:
         b0:0c:4c:8a:f0:ee:65:5d:38:17:f3:1f:bb:9c:bb:93:d0:d5:
         b9:b7:8a:9d:ef:93:78:59:17:b4:3c:71:f7:15:2e:be:bf:bb:
         1b:25:82:ab:67:55:b5:0e:8f:ae:2a:a5:66:b0:d7:e4:0a:7d:
         de:26:e4:0a:62:84:35:15:1f:c6:f3:3d:4c:2d:c3:6b:50:39:
         91:28:4f:4d:8d:59:ad:b6:09:75:e1:80:fd:60:a3:9c:70:92:
         ea:5a:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:34 2023 by rpki-client on console-ams.rpki-client.org