Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32322d3332203d3e20323638343837.roa
File:                     34352e3136312e3234382e302f32322d3332203d3e20323638343837.roa (raw, json)
Hash identifier:          sTCz0kpMz0lcWC8FCzv9ffdY0Nypyv6OZml42/FHgo4=
Subject key identifier:   73:C7:01:62:26:B7:E4:BD:8F:9E:7A:5B:7B:9D:D0:81:51:43:3F:77
Certificate issuer:       /CN=97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A
Certificate serial:       48FBC0732BEBB7AB2452F1724A42A92CB5D3BC43
Authority key identifier: 97:A1:1D:CC:2B:F9:05:A9:53:B5:DA:BF:2E:0E:2D:7A:85:C9:F2:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32322d3332203d3e20323638343837.roa
Signing time:             Wed 27 Sep 2023 18:36:53 +0000
ROA not before:           Wed 27 Sep 2023 18:31:53 +0000
ROA not after:            Wed 25 Sep 2024 18:36:53 +0000
asID:                     268487
IP address blocks:        45.161.248.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fb:c0:73:2b:eb:b7:ab:24:52:f1:72:4a:42:a9:2c:b5:d3:bc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A
        Validity
            Not Before: Sep 27 18:31:53 2023 GMT
            Not After : Sep 25 18:36:53 2024 GMT
        Subject: CN=73C7016226B7E4BD8F9E7A5B7B9DD08151433F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:84:9c:aa:7a:7c:d7:49:b4:a9:e6:fd:d3:
                    25:2c:07:0c:a8:4d:49:37:74:25:39:75:15:a7:4f:
                    e6:97:a8:06:b7:86:3a:89:a3:b1:e5:4e:5b:05:ed:
                    0d:e6:67:0e:18:02:d4:47:ea:b5:47:05:46:5e:01:
                    bd:7b:31:e8:6b:b4:58:d3:b0:6a:5f:0a:b2:ee:bb:
                    6a:a0:9a:81:04:e7:2d:c0:22:42:a6:96:6e:95:12:
                    cc:9f:8b:65:9a:c1:e7:86:ba:e3:ef:bd:49:a1:e4:
                    a7:76:66:d5:4b:21:db:04:11:2a:ec:88:f8:a9:3e:
                    d1:f7:7b:35:98:6e:e1:94:66:da:46:fe:e0:bb:45:
                    1a:63:dd:f8:6a:d9:23:94:17:e2:f4:8c:2a:8e:22:
                    6d:ab:ec:9b:bc:30:38:52:66:c9:80:77:88:56:07:
                    35:01:6a:24:de:b6:5f:c1:95:6e:f5:69:1a:d1:96:
                    be:d3:31:79:07:bb:3b:ac:9a:5b:7e:43:55:71:e0:
                    6c:cc:dc:55:f5:9d:be:b9:bd:b0:fd:c0:98:2b:28:
                    ac:86:18:82:3f:51:d4:7f:97:6b:18:a3:7b:db:2d:
                    cf:8d:51:ad:fa:52:2b:76:93:69:c2:2f:77:89:80:
                    d6:74:28:69:e5:b1:75:56:0c:72:bc:ba:e2:17:21:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C7:01:62:26:B7:E4:BD:8F:9E:7A:5B:7B:9D:D0:81:51:43:3F:77
            X509v3 Authority Key Identifier:
                keyid:97:A1:1D:CC:2B:F9:05:A9:53:B5:DA:BF:2E:0E:2D:7A:85:C9:F2:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97A11DCC2BF905A953B5DABF2E0E2D7A85C9F27A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32322d3332203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:e4:c4:ad:39:49:0a:9a:ba:ab:36:f2:b8:6c:88:5f:1e:ce:
         a4:46:77:28:ca:94:33:34:57:0e:fc:3d:7f:fb:37:aa:46:1d:
         a9:fe:1d:13:96:76:04:c2:ff:c4:6c:86:e7:7e:02:24:fd:2d:
         3c:11:92:71:13:a7:47:38:77:a7:bd:0b:fd:f9:0a:6d:05:79:
         64:5e:a1:09:3a:c0:7d:29:5f:6a:96:14:ff:0c:9f:14:e8:b8:
         47:40:cd:0d:a7:1f:78:90:37:cf:e6:35:84:a7:6a:54:f4:fe:
         4d:7a:e5:52:34:47:3d:3e:50:e8:4e:78:ba:78:f1:10:37:c2:
         3b:20:b7:40:94:ba:5e:47:af:e9:50:52:e7:4d:15:a8:63:fc:
         28:30:78:b8:6f:ef:b7:21:b5:ec:ac:40:19:c6:4d:e1:f7:8f:
         e6:9d:3a:75:f0:74:75:dd:43:56:79:5e:87:72:20:52:54:ed:
         de:85:dc:fb:24:da:07:83:c0:d9:1b:11:43:5a:67:ea:29:da:
         6b:0e:05:09:77:66:03:b3:f9:c5:cd:29:8f:44:31:b3:26:8f:
         16:62:01:44:71:81:f0:dc:fb:48:b3:f6:60:44:c1:a5:a9:e3:
         fc:bd:e3:5d:85:f0:de:09:48:1b:bc:04:ec:d1:19:79:88:b4:
         ae:dc:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org