Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/34352e3137302e3230382e302f32322d3232203d3e20323638313730.roa
File:                     34352e3137302e3230382e302f32322d3232203d3e20323638313730.roa (raw, json)
Hash identifier:          W2RwI4Kf9jw+3L8/DmRzQMeO+wThbDc3GUKPKPGqCzY=
Subject key identifier:   38:60:C5:62:B8:D9:3A:E7:0A:70:E3:21:4F:B1:D6:D0:9E:B1:C2:CC
Certificate issuer:       /CN=7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D
Certificate serial:       68C9133990433C8A0AF078A6365131E7CB9A4674
Authority key identifier: 7A:8A:52:E1:0C:E2:8F:02:16:87:2E:59:AD:50:CA:6A:E4:BC:4A:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/34352e3137302e3230382e302f32322d3232203d3e20323638313730.roa
Signing time:             Tue 10 Jan 2023 00:21:51 +0000
ROA not before:           Tue 10 Jan 2023 00:16:51 +0000
ROA not after:            Tue 09 Jan 2024 00:21:51 +0000
asID:                     268170
IP address blocks:        45.170.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c9:13:39:90:43:3c:8a:0a:f0:78:a6:36:51:31:e7:cb:9a:46:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D
        Validity
            Not Before: Jan 10 00:16:51 2023 GMT
            Not After : Jan  9 00:21:51 2024 GMT
        Subject: CN=3860C562B8D93AE70A70E3214FB1D6D09EB1C2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:2b:a3:d1:1d:5b:33:5a:6d:07:5e:c7:e7:
                    1f:60:44:30:e1:c2:de:f9:cb:95:b5:3d:69:98:52:
                    af:ff:d4:5b:a8:3e:cc:7a:79:c8:bb:93:98:d7:0a:
                    6a:44:3a:2d:5d:59:8e:f9:41:4e:4b:2e:e4:a0:5f:
                    d1:eb:c2:1a:9f:21:6c:8d:9b:5e:92:5a:11:77:4f:
                    d2:28:1d:c9:dc:48:e1:4e:63:43:47:86:50:6a:90:
                    59:0e:c7:76:8c:f4:fa:aa:2b:4a:cb:9e:c9:c1:fa:
                    c5:21:8f:22:8b:49:31:47:bf:df:36:0f:da:43:62:
                    ea:9a:61:31:24:f0:43:65:52:3b:4a:b1:1f:e0:29:
                    ed:17:29:33:95:5e:3e:62:e2:c2:74:ff:8e:eb:d2:
                    b5:b1:2a:c2:fb:eb:82:47:3f:69:80:3c:cb:cd:da:
                    6e:43:e6:f1:49:8f:b6:70:ff:76:3d:72:48:a9:da:
                    7e:74:57:34:b6:b4:d0:04:b1:eb:ea:a8:0b:db:9e:
                    55:60:c9:3c:2f:b7:2b:28:e7:e7:ff:11:4c:1a:5a:
                    79:21:7f:d9:ae:db:16:bd:52:2f:73:06:85:99:e0:
                    6c:d2:3d:43:da:57:0c:9e:2a:d5:f0:69:26:52:30:
                    f6:8f:61:4d:4c:f6:c8:16:d4:bb:37:17:ea:21:41:
                    99:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:C5:62:B8:D9:3A:E7:0A:70:E3:21:4F:B1:D6:D0:9E:B1:C2:CC
            X509v3 Authority Key Identifier:
                keyid:7A:8A:52:E1:0C:E2:8F:02:16:87:2E:59:AD:50:CA:6A:E4:BC:4A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/34352e3137302e3230382e302f32322d3232203d3e20323638313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:bd:ca:0a:47:c9:f7:90:dd:f4:fb:81:e0:c3:d3:62:e9:13:
         5e:01:eb:7e:2b:4d:99:8d:b6:7e:3e:f0:f2:07:c0:f0:aa:c8:
         19:49:59:7d:27:2a:60:b8:87:90:19:46:3c:0e:63:72:98:05:
         1a:a6:14:df:85:6f:ef:af:3b:8a:23:26:b7:6b:e2:ef:d2:aa:
         12:7a:a9:7d:98:6e:2c:70:79:6d:1a:03:eb:55:0f:c1:df:ac:
         82:01:8c:65:cb:d1:56:08:05:09:93:f4:a5:52:ea:ed:6e:5d:
         3e:73:ad:d1:c4:a9:57:77:85:8f:3b:59:96:8b:b8:5f:3c:aa:
         5a:05:e0:c1:89:c5:e3:50:a7:01:b7:3a:4b:47:57:26:8a:95:
         80:1c:52:bc:ca:24:2b:a2:10:99:82:d4:dc:03:a2:38:94:af:
         84:86:4a:da:7d:e2:0d:b1:4c:ad:15:31:3e:b1:39:5c:75:f9:
         38:13:47:d4:d1:46:3b:b2:46:c0:09:73:47:10:f1:78:1f:c2:
         55:4a:be:5f:1b:b8:1a:e2:71:b5:5b:52:9e:65:2f:ad:95:80:
         13:15:90:f4:fc:83:81:b8:1d:b7:de:29:cb:9e:b5:af:5e:12:
         7f:c5:a6:c4:cb:df:d0:32:d5:b0:da:aa:ed:04:b7:6b:32:9e:
         46:85:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org