Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa
File:                     34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa (raw, json)
Hash identifier:          ZeKz95R2PN1ocPt4yOoE1VYVGEhhZhLQkGbPXRwVwko=
Subject key identifier:   F8:8D:AF:55:A3:C8:4A:F7:82:D6:DA:C6:82:DE:79:65:FC:12:02:F0
Certificate issuer:       /CN=377733552CC0F10A9AB6B411FE215059EFF44286
Certificate serial:       56C9BA2C7E4555007DB54A9D9AB2BECF8B4F0169
Authority key identifier: 37:77:33:55:2C:C0:F1:0A:9A:B6:B4:11:FE:21:50:59:EF:F4:42:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/377733552CC0F10A9AB6B411FE215059EFF44286.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa
Signing time:             Thu 02 Feb 2023 12:43:23 +0000
ROA not before:           Thu 02 Feb 2023 12:38:23 +0000
ROA not after:            Thu 01 Feb 2024 12:43:23 +0000
asID:                     269183
IP address blocks:        45.181.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c9:ba:2c:7e:45:55:00:7d:b5:4a:9d:9a:b2:be:cf:8b:4f:01:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377733552CC0F10A9AB6B411FE215059EFF44286
        Validity
            Not Before: Feb  2 12:38:23 2023 GMT
            Not After : Feb  1 12:43:23 2024 GMT
        Subject: CN=F88DAF55A3C84AF782D6DAC682DE7965FC1202F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:f6:c1:8e:ea:df:fc:de:19:14:ea:14:51:
                    a1:1b:81:4d:bd:fa:af:cd:67:19:ea:91:d5:c5:a4:
                    75:fd:37:37:66:cc:3c:87:7b:0f:6e:13:79:27:ac:
                    4e:d0:28:7a:26:b3:ca:8a:68:63:55:4a:c1:2d:04:
                    3b:36:e8:23:ec:16:8c:ad:9a:90:8c:a7:75:f0:ce:
                    2c:7a:55:06:f5:77:85:01:29:0f:db:bf:cd:c0:f9:
                    09:9e:9e:8c:d2:83:46:75:f1:29:6c:c2:d0:da:2a:
                    f5:3b:77:44:7f:8d:61:4a:f0:f4:6b:ee:65:77:be:
                    c8:d6:a8:e5:3b:60:8b:07:36:ad:0a:ce:5b:a0:0d:
                    1c:1c:c5:83:30:e1:22:ea:d5:8d:f3:18:8c:b2:bf:
                    a8:b7:8e:67:ef:d7:4c:ed:30:df:24:a8:7d:c6:53:
                    1a:c0:9f:8b:07:75:f2:4c:84:b3:43:e5:79:e7:0a:
                    59:c9:ed:81:4c:b9:31:83:ca:a6:a8:39:d0:3f:60:
                    09:cd:f4:10:e7:5b:60:82:95:f3:25:03:36:38:36:
                    ac:1d:89:38:3b:6b:c9:77:2c:68:83:16:39:78:f0:
                    1f:4f:9e:33:3d:8d:f1:ae:5f:50:b5:5b:4a:10:e6:
                    e1:21:25:a6:9b:49:43:c5:f5:aa:d9:e1:5d:c6:ee:
                    6d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8D:AF:55:A3:C8:4A:F7:82:D6:DA:C6:82:DE:79:65:FC:12:02:F0
            X509v3 Authority Key Identifier:
                keyid:37:77:33:55:2C:C0:F1:0A:9A:B6:B4:11:FE:21:50:59:EF:F4:42:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/377733552CC0F10A9AB6B411FE215059EFF44286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/377733552CC0F10A9AB6B411FE215059EFF44286.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:29:31:1f:e5:3a:fb:c6:a3:ab:37:97:9a:99:26:e7:e2:05:
         15:48:dc:48:8d:77:64:f9:ee:73:5b:72:97:eb:9f:0d:7e:97:
         b7:ad:05:3d:0a:ac:86:a4:ab:cd:b4:64:3c:bf:f3:e5:18:ee:
         f8:d3:f2:06:2e:a8:f5:79:f0:69:4d:38:8e:80:f1:89:f0:2f:
         19:25:25:af:d0:3e:86:b5:36:87:04:4f:77:d3:95:10:6a:80:
         ec:ea:08:d4:c1:db:5a:aa:4c:fa:ec:2c:8f:47:b3:d6:f3:1f:
         f2:ef:16:fb:c0:16:c6:e3:0a:63:ac:d9:1f:e3:e8:98:36:6a:
         53:82:16:db:77:a7:73:31:94:e1:b6:94:43:4d:51:22:c4:bc:
         b5:15:f5:b6:ad:a5:e6:66:15:8b:4a:db:cf:0f:66:1c:80:d4:
         2f:69:80:45:2e:32:5f:ba:30:51:43:e3:eb:b3:74:e5:43:f4:
         6f:e3:5a:85:5a:84:8d:e2:54:5f:cd:ec:9e:3f:4d:e6:38:3c:
         ff:50:6f:85:d0:61:15:1b:cb:4d:45:40:45:0e:60:67:8c:94:
         a6:6f:f6:7d:24:6b:d4:8d:7e:da:fa:7d:a3:8e:d9:db:fc:49:
         70:3d:e8:12:42:b2:5d:c9:77:0f:ff:b0:42:ab:34:04:78:ef:
         d6:99:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org