Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32342d3234203d3e20323639313833.roa
File:                     34352e3138312e3130382e302f32342d3234203d3e20323639313833.roa (raw, json)
Hash identifier:          y3udumxIpvC0KifzLdUXBJheQ3i/Lq+Vn2+1Zz9d+uU=
Subject key identifier:   92:56:F2:D2:91:5C:C9:CA:08:A0:68:C1:B5:22:9A:46:D1:90:0D:84
Certificate issuer:       /CN=377733552CC0F10A9AB6B411FE215059EFF44286
Certificate serial:       7EA5F84BB93FFFE39660D560DC04D46C2F4DE9A3
Authority key identifier: 37:77:33:55:2C:C0:F1:0A:9A:B6:B4:11:FE:21:50:59:EF:F4:42:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/377733552CC0F10A9AB6B411FE215059EFF44286.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32342d3234203d3e20323639313833.roa
Signing time:             Thu 02 Feb 2023 12:43:13 +0000
ROA not before:           Thu 02 Feb 2023 12:38:13 +0000
ROA not after:            Thu 01 Feb 2024 12:43:13 +0000
asID:                     269183
IP address blocks:        45.181.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a5:f8:4b:b9:3f:ff:e3:96:60:d5:60:dc:04:d4:6c:2f:4d:e9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377733552CC0F10A9AB6B411FE215059EFF44286
        Validity
            Not Before: Feb  2 12:38:13 2023 GMT
            Not After : Feb  1 12:43:13 2024 GMT
        Subject: CN=9256F2D2915CC9CA08A068C1B5229A46D1900D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:71:d2:3c:aa:18:ea:c1:39:a4:d7:45:ff:
                    25:17:0a:b3:73:c1:84:92:d0:2e:f9:f0:f0:76:8b:
                    4b:3b:d0:a1:fb:59:c2:d0:48:ff:89:21:d5:ab:9f:
                    a4:41:3a:38:32:59:7f:6c:9f:a9:2b:3a:fb:4f:99:
                    d0:b5:f3:43:e8:a1:b5:b4:35:ec:c1:9c:ab:53:7b:
                    a8:5f:54:4b:bf:81:cd:5c:fd:4c:d1:3c:28:3a:10:
                    69:e2:59:a9:48:6d:0b:d9:77:1f:36:96:17:5d:36:
                    93:31:6e:2c:ec:1f:19:6b:db:db:e0:e9:81:4a:8c:
                    27:86:b5:57:36:60:8d:52:22:03:2c:d1:3a:16:38:
                    53:10:22:aa:4b:84:d0:7d:c4:4d:3f:72:cd:0e:52:
                    f0:ea:69:58:c0:8a:1e:04:bb:4e:94:de:41:d5:1f:
                    91:43:ea:1c:86:a3:2d:8a:79:03:52:da:7a:b7:0d:
                    ee:65:c4:b6:96:e5:83:be:c0:db:ea:95:26:a2:c9:
                    1f:b7:e7:c8:e4:a8:24:20:dd:85:e0:2f:62:a5:0e:
                    cf:ab:a7:b8:41:c3:da:0e:43:76:72:6a:66:8d:81:
                    8f:38:85:d1:0f:c5:74:a2:9f:6a:69:0e:e6:ef:0c:
                    38:49:fb:b9:1a:57:d9:42:85:35:05:64:24:d4:e1:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:56:F2:D2:91:5C:C9:CA:08:A0:68:C1:B5:22:9A:46:D1:90:0D:84
            X509v3 Authority Key Identifier:
                keyid:37:77:33:55:2C:C0:F1:0A:9A:B6:B4:11:FE:21:50:59:EF:F4:42:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/377733552CC0F10A9AB6B411FE215059EFF44286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/377733552CC0F10A9AB6B411FE215059EFF44286.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3130382e302f32342d3234203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:99:d2:c2:35:eb:c2:de:37:a0:5a:d7:35:2b:6a:e5:c3:3c:
         bd:ca:58:9c:98:2f:f9:33:bd:58:22:46:bd:2b:49:f8:7b:84:
         d6:f2:50:33:bf:93:1c:b6:8a:0d:da:2d:df:fe:c5:6f:40:f9:
         5d:5a:45:e6:a9:31:77:6e:4a:98:a5:b9:55:7b:b4:f1:87:ad:
         30:fe:67:71:d8:e4:c7:5c:c7:ab:d4:23:b7:9e:a6:f4:82:da:
         fd:26:a8:7a:18:e2:bf:b7:1d:55:c3:2b:1c:40:f9:7c:88:d4:
         80:de:e8:e1:8c:be:2d:a4:99:de:bc:24:89:e7:33:75:2f:b1:
         bc:ae:30:db:14:0d:25:ff:aa:4c:a1:d9:5a:e4:7f:63:34:c8:
         b6:f6:ba:86:08:36:5c:1e:74:19:00:9a:10:41:25:55:9a:70:
         bc:1f:27:5f:e2:cb:a6:1a:e0:d6:f6:e2:69:ad:90:72:63:92:
         e4:27:19:6d:b6:d1:22:c7:23:94:e6:48:6c:61:94:35:ff:b9:
         c9:4a:1a:9c:84:07:5b:72:4e:0e:22:bb:23:9c:ed:68:bc:82:
         ca:a5:17:e9:d6:5b:5d:ea:0e:f6:81:8c:35:d4:d0:6c:d9:e5:
         87:02:ba:04:28:4b:41:11:ec:65:fa:99:71:25:d0:7c:cb:c4:
         29:36:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org