Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa
File:                     34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa (raw, json)
Hash identifier:          vViiTPkRMtKpT9P2mw52/A2hrrQ49hanmKrjIqhhce8=
Subject key identifier:   7F:4A:DE:FD:DB:29:9B:5A:53:B7:FA:2A:A3:06:3E:71:74:61:B9:90
Certificate issuer:       /CN=A12218271B6A0EFA582616B7B5840154C85661CE
Certificate serial:       4B5160C5EBA4EC38995413946A0F26AB01F4133E
Authority key identifier: A1:22:18:27:1B:6A:0E:FA:58:26:16:B7:B5:84:01:54:C8:56:61:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12218271B6A0EFA582616B7B5840154C85661CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa
Signing time:             Wed 10 Apr 2024 13:18:55 +0000
ROA not before:           Wed 10 Apr 2024 13:13:55 +0000
ROA not after:            Wed 09 Apr 2025 13:18:55 +0000
asID:                     268728
IP address blocks:        45.171.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:51:60:c5:eb:a4:ec:38:99:54:13:94:6a:0f:26:ab:01:f4:13:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12218271B6A0EFA582616B7B5840154C85661CE
        Validity
            Not Before: Apr 10 13:13:55 2024 GMT
            Not After : Apr  9 13:18:55 2025 GMT
        Subject: CN=7F4ADEFDDB299B5A53B7FA2AA3063E717461B990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:4f:aa:b3:52:0f:1a:22:40:2d:17:af:c7:
                    a1:47:d8:87:99:a3:37:ca:88:9c:f6:db:0e:5a:31:
                    be:f3:46:93:1c:cc:ae:08:58:f5:30:e4:84:17:ae:
                    d7:b7:18:b1:0b:6b:e2:4b:e4:35:76:72:51:82:ba:
                    ce:76:85:2c:2c:e9:3c:f2:86:47:08:52:1e:67:ec:
                    30:fa:d5:eb:9d:62:f5:6f:bc:dc:3d:44:18:95:ca:
                    45:d2:67:60:ad:1e:61:4a:98:85:e6:a1:b1:b1:10:
                    55:73:af:a8:f1:32:6f:d2:09:3e:3f:22:51:4f:93:
                    2f:7a:44:18:11:64:72:97:5c:75:c9:a0:5f:84:7e:
                    1a:11:df:b9:b7:73:e9:f6:d2:c4:37:64:e1:59:16:
                    78:42:79:3f:00:a0:3a:5d:5f:ae:f1:44:42:bb:d3:
                    8b:25:85:23:6c:4f:39:57:de:cf:02:07:d7:11:92:
                    84:34:01:ed:e3:9f:dc:0a:5e:90:83:d5:46:ed:56:
                    f0:ad:55:d1:a8:da:f5:bc:ae:2d:94:a2:d8:35:99:
                    5b:9d:47:b4:10:94:74:d6:67:60:10:8b:4c:a4:00:
                    ca:87:70:89:ad:11:f5:0a:59:aa:f1:66:96:11:e9:
                    ce:e6:55:f9:dc:8e:43:39:e6:02:4e:47:52:fc:38:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4A:DE:FD:DB:29:9B:5A:53:B7:FA:2A:A3:06:3E:71:74:61:B9:90
            X509v3 Authority Key Identifier:
                keyid:A1:22:18:27:1B:6A:0E:FA:58:26:16:B7:B5:84:01:54:C8:56:61:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/A12218271B6A0EFA582616B7B5840154C85661CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A12218271B6A0EFA582616B7B5840154C85661CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/0/34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:f2:fd:6d:69:99:b1:16:e8:b2:e3:da:b4:d6:a5:af:c8:80:
         37:2e:50:2a:2a:ce:2d:f6:0d:6e:bf:71:3f:2f:2c:44:b8:35:
         28:55:2d:a0:7d:47:19:ea:56:ec:34:1d:59:8d:e7:0c:3d:d5:
         5b:ce:8f:46:b6:09:50:6a:93:f7:54:4d:a7:71:4f:a2:19:46:
         05:9d:17:e6:05:3e:91:86:29:bd:21:37:82:78:0a:cb:76:27:
         e2:4c:fb:22:b5:8b:16:1f:65:88:a4:79:a9:7e:cd:71:96:60:
         30:34:e7:6d:66:3b:dd:a4:16:a7:a9:2d:82:d1:a7:e6:e9:36:
         86:37:a1:6c:d1:99:10:db:c7:0e:7f:55:4e:c1:52:24:a2:d3:
         70:cb:77:bb:bd:e2:ad:9e:1f:de:4a:b5:15:10:b3:69:2c:44:
         1a:c8:cc:2a:2f:45:b3:09:da:00:91:a6:19:4b:ea:1c:e4:35:
         a1:81:42:81:e5:c6:12:ab:70:21:92:b9:d0:f3:e5:74:a1:72:
         72:5e:97:01:91:04:08:9f:32:91:65:cb:b6:e9:69:da:ad:4e:
         8f:b5:2b:f0:25:c2:c9:a9:3e:5f:91:b9:84:29:4a:0b:94:89:
         5e:a3:e8:e0:5a:fb:10:58:75:f2:3b:12:48:4c:54:e2:ec:e5:
         a6:c9:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org