Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131372e302f32342d3234203d3e20323637393536.roa
File:                     34352e3136362e3131372e302f32342d3234203d3e20323637393536.roa (raw, json)
Hash identifier:          ApXtLNw7qAo7yup3bflfxCpHTqKg7fXRP5uk1474Nis=
Subject key identifier:   75:F8:06:BD:39:B1:9D:A1:6F:58:1E:19:3C:2F:33:02:90:EE:D7:0E
Certificate issuer:       /CN=0B298E028BDDBEDE2A0ED25356B61E0F9368446D
Certificate serial:       21700384CA065B0D33376E4E4439AE468BA5808E
Authority key identifier: 0B:29:8E:02:8B:DD:BE:DE:2A:0E:D2:53:56:B6:1E:0F:93:68:44:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131372e302f32342d3234203d3e20323637393536.roa
Signing time:             Wed 24 Aug 2022 19:08:36 +0000
ROA not before:           Wed 24 Aug 2022 19:03:36 +0000
ROA not after:            Wed 23 Aug 2023 19:08:36 +0000
asID:                     267956
IP address blocks:        45.166.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:70:03:84:ca:06:5b:0d:33:37:6e:4e:44:39:ae:46:8b:a5:80:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B298E028BDDBEDE2A0ED25356B61E0F9368446D
        Validity
            Not Before: Aug 24 19:03:36 2022 GMT
            Not After : Aug 23 19:08:36 2023 GMT
        Subject: CN=75F806BD39B19DA16F581E193C2F330290EED70E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5e:97:48:fa:fd:62:fe:0f:af:60:46:6a:a4:
                    38:73:63:85:57:5a:51:0d:e1:3d:89:18:73:f1:65:
                    af:82:ea:18:4a:b7:5c:b7:64:63:13:9d:d9:b8:ed:
                    a5:13:0c:a8:c2:ae:47:64:a8:3d:2c:3c:dd:35:d9:
                    e5:cf:22:2c:78:c7:38:9e:f2:d2:43:4f:71:17:cd:
                    1f:5b:1b:7e:33:bc:10:dc:c4:07:fc:e6:b0:71:71:
                    19:b6:ac:b3:a8:e7:e3:65:a9:da:4e:12:44:e8:77:
                    12:23:30:bc:8e:ce:7c:ba:19:23:58:d9:e9:8b:35:
                    fb:66:c5:cb:44:5c:69:b0:70:ba:f7:a5:b5:46:e9:
                    2d:e8:3d:de:45:68:88:7c:3a:33:63:fc:62:84:74:
                    ce:21:e5:2b:52:41:39:28:43:26:4c:85:1f:e7:c9:
                    73:32:d6:74:42:ea:ae:d4:a6:03:2c:65:c9:19:5a:
                    56:2e:f2:b9:74:b8:9a:cd:e1:fd:75:b8:b5:58:fc:
                    2a:43:4c:2a:48:3a:88:64:7b:43:f6:3c:c3:ea:95:
                    31:35:a1:ad:5c:4c:28:58:37:03:ea:96:e1:22:4d:
                    43:ae:87:a2:74:c5:8f:a7:72:7c:2e:b9:41:9a:2c:
                    d9:c4:ba:d0:a7:9b:2e:e2:b5:e0:93:0c:1f:72:af:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F8:06:BD:39:B1:9D:A1:6F:58:1E:19:3C:2F:33:02:90:EE:D7:0E
            X509v3 Authority Key Identifier:
                keyid:0B:29:8E:02:8B:DD:BE:DE:2A:0E:D2:53:56:B6:1E:0F:93:68:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131372e302f32342d3234203d3e20323637393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:82:e8:bd:60:da:7b:8b:b2:98:1c:89:29:fd:99:fb:46:ea:
         53:4c:20:68:31:63:6b:79:a8:03:8e:5b:51:48:c8:5a:fe:e5:
         3a:9b:30:3d:be:fc:3a:17:68:c5:8f:df:f9:91:da:55:f5:20:
         69:40:8e:df:43:e6:fc:41:fd:7e:5c:a4:fe:86:65:18:3b:3e:
         1f:0b:38:09:7d:23:3b:2c:ac:ed:31:91:d5:4e:fa:e3:ac:5f:
         11:05:a5:cf:ec:77:e6:bd:7f:6c:47:21:d5:11:ed:65:42:17:
         d7:57:13:f1:2d:93:59:d1:d9:53:a2:7e:f5:30:a8:a2:23:a6:
         5f:7a:9e:bc:74:9a:1b:f0:5f:15:1a:32:ce:31:5f:9d:d4:37:
         80:89:a2:85:ca:fd:a4:40:7e:1b:01:ac:ee:15:35:ea:e4:34:
         2d:33:70:9f:14:16:8a:e5:75:5c:12:8d:71:b6:5c:1b:49:4c:
         22:70:a3:ff:6d:6f:f1:d9:15:56:f4:91:f4:ca:8f:4e:af:70:
         ff:65:c7:f1:d7:e2:dd:69:e2:e7:b6:57:ef:1a:b4:42:97:c9:
         e5:76:04:c6:78:7c:14:a5:ef:c7:ea:74:37:bc:73:69:dd:5a:
         d0:c5:0c:56:9b:68:f8:68:0b:e4:e9:62:11:a1:ed:75:f6:ae:
         32:a4:fb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org