Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/34352e3137382e3137342e302f32332d3233203d3e20323639303336.roa
File:                     34352e3137382e3137342e302f32332d3233203d3e20323639303336.roa (raw, json)
Hash identifier:          TTYb1UmGn0xUTzF9puLuoIkXANd73Nqb6T49+4TTOrg=
Subject key identifier:   40:C1:86:81:57:63:88:7A:FD:FC:75:7E:2A:8F:93:2D:62:B6:DA:84
Certificate issuer:       /CN=32B0E6548F3A2FFBFDFF7091C549B32A759B6617
Certificate serial:       459D9784D4ED31B6A1089FA057123F6F39A83852
Authority key identifier: 32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/34352e3137382e3137342e302f32332d3233203d3e20323639303336.roa
Signing time:             Fri 08 Dec 2023 18:43:12 +0000
ROA not before:           Fri 08 Dec 2023 18:38:12 +0000
ROA not after:            Fri 06 Dec 2024 18:43:12 +0000
asID:                     269036
IP address blocks:        45.178.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9d:97:84:d4:ed:31:b6:a1:08:9f:a0:57:12:3f:6f:39:a8:38:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B0E6548F3A2FFBFDFF7091C549B32A759B6617
        Validity
            Not Before: Dec  8 18:38:12 2023 GMT
            Not After : Dec  6 18:43:12 2024 GMT
        Subject: CN=40C186815763887AFDFC757E2A8F932D62B6DA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:2d:4a:24:11:df:9a:6f:ff:90:b1:af:f6:
                    ab:2b:bf:18:6e:c5:f3:20:ac:17:26:67:85:7f:65:
                    f9:13:08:b3:b6:54:a5:62:3f:ed:23:c8:8c:95:6f:
                    7d:97:ba:90:e4:5b:7c:31:7b:5c:6b:e2:c8:1a:ea:
                    93:08:ba:b3:a1:06:d8:45:5e:9f:a2:30:73:6f:18:
                    20:ab:c7:46:ab:60:05:03:b5:38:2f:9b:36:c2:68:
                    e4:89:94:a0:b4:ed:b5:3a:30:74:6d:cf:3b:3b:6c:
                    78:30:a5:f6:60:17:bd:82:35:47:3f:9a:64:cc:f2:
                    9d:81:a0:bd:a1:c4:c5:b1:b7:26:6e:1b:f8:33:d5:
                    d3:4b:f9:93:aa:3a:c5:82:26:df:b2:e2:53:7a:ca:
                    62:1f:52:50:28:2c:54:07:8d:f6:1f:c2:4a:37:20:
                    5e:3d:ed:ce:07:17:2d:80:28:f8:3e:77:aa:bb:7e:
                    c6:12:a7:3d:87:49:59:be:61:7c:a3:53:a7:2d:de:
                    d0:bc:6b:83:07:6a:e8:27:7b:60:52:ed:e8:8a:cb:
                    68:a8:6b:90:95:be:cf:26:62:8f:3d:16:9c:f1:6e:
                    e0:0b:77:06:76:cd:2b:a5:6a:34:42:2a:0f:cc:d6:
                    ec:12:f4:62:54:46:a3:09:cb:0c:05:76:c7:55:e5:
                    82:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:86:81:57:63:88:7A:FD:FC:75:7E:2A:8F:93:2D:62:B6:DA:84
            X509v3 Authority Key Identifier:
                keyid:32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/34352e3137382e3137342e302f32332d3233203d3e20323639303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:93:ed:2c:6c:a1:9f:1e:83:e6:3f:c1:da:e5:c8:df:c8:f0:
         1e:b3:05:fc:fd:79:d3:cd:ac:b9:12:e4:9d:ce:8b:6f:64:a9:
         ec:14:e9:4f:25:de:43:1b:79:a2:75:b6:b6:8d:33:f7:f0:60:
         f7:f5:79:f4:d7:18:c5:d7:da:71:f5:c1:8e:0c:cc:d9:6d:d8:
         39:5f:f1:5e:5f:2d:4f:b3:2e:27:fa:9e:22:a9:f2:18:01:f5:
         e6:73:9f:aa:6b:91:93:1f:b2:e4:cd:36:09:bf:ce:84:da:c6:
         cf:8e:ce:48:64:f3:f3:71:43:01:10:d0:a6:d1:fd:25:7f:d4:
         ff:85:5c:b9:10:82:c3:c4:a1:0c:c8:ea:2f:00:bf:a8:f7:25:
         18:37:9b:95:04:e0:11:98:35:04:5a:da:b6:14:77:bd:95:a3:
         0a:56:72:ba:9d:8c:03:0b:8e:04:d6:11:0e:77:f5:13:b5:2f:
         16:67:2b:16:fa:54:35:cf:d6:54:e6:5b:d0:5e:4c:d0:5a:e5:
         a9:7e:a8:0c:14:97:dc:c7:e5:ec:45:b1:0f:b0:d0:54:81:2a:
         1b:d4:00:e6:84:82:36:82:b9:a0:15:e1:81:69:6d:0b:6b:13:
         b1:aa:3e:43:98:ac:9c:a1:ea:1c:0c:02:30:ba:c4:6f:7d:17:
         43:6f:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org