Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36302e302f32322d3332203d3e20323639313730.roa
File:                     34352e3138312e36302e302f32322d3332203d3e20323639313730.roa (raw, json)
Hash identifier:          oPpTaBxbRI4dGHXQG/rFZ7xKxxPkKyXSd2vGPIo1oic=
Subject key identifier:   0E:96:B0:B1:9E:09:F7:DC:AF:45:0F:2B:FA:FE:C5:C3:81:D2:7D:DE
Certificate issuer:       /CN=7173EB890308C11804E252B11AD1C7EC54A7DB2F
Certificate serial:       7CD3490CF88211E58DD6016993FC6372E8EB79FE
Authority key identifier: 71:73:EB:89:03:08:C1:18:04:E2:52:B1:1A:D1:C7:EC:54:A7:DB:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36302e302f32322d3332203d3e20323639313730.roa
Signing time:             Wed 06 Mar 2024 18:30:16 +0000
ROA not before:           Wed 06 Mar 2024 18:25:16 +0000
ROA not after:            Wed 05 Mar 2025 18:30:16 +0000
asID:                     269170
IP address blocks:        45.181.60.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d3:49:0c:f8:82:11:e5:8d:d6:01:69:93:fc:63:72:e8:eb:79:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7173EB890308C11804E252B11AD1C7EC54A7DB2F
        Validity
            Not Before: Mar  6 18:25:16 2024 GMT
            Not After : Mar  5 18:30:16 2025 GMT
        Subject: CN=0E96B0B19E09F7DCAF450F2BFAFEC5C381D27DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:31:f8:fd:2d:38:67:60:29:39:92:b5:f6:
                    d7:9b:a6:c5:9e:16:51:e3:e0:6a:05:65:96:4b:9b:
                    a1:b0:8b:5c:43:e7:a3:fc:25:9d:25:0f:27:72:0f:
                    34:6a:ff:47:56:93:77:7f:23:82:58:ad:dd:a5:20:
                    a5:9f:cb:00:f7:80:1e:58:6e:95:c4:87:d6:51:a6:
                    4c:62:79:5c:ca:d6:45:cd:b5:96:f1:b3:ea:14:09:
                    1c:6d:01:b9:e1:77:a0:e0:3e:10:bd:23:14:51:0a:
                    ff:c2:8d:a5:19:4d:0e:9c:3a:76:d8:ec:6e:b3:aa:
                    be:60:ba:7c:d6:f3:43:3e:c9:22:98:fb:a6:da:18:
                    f8:b0:b8:8b:f4:82:6b:af:bb:8f:05:56:7f:b7:1f:
                    98:c4:40:fe:c8:0e:73:3e:03:3f:c8:3a:50:a6:f9:
                    5d:32:b3:f5:f1:2e:56:7d:0b:8b:39:df:fe:bb:00:
                    cf:49:30:5a:35:8c:c0:52:7f:dc:57:04:97:3e:51:
                    ad:89:f7:e4:b3:8a:e4:c7:63:29:28:3e:cc:32:85:
                    37:b4:14:01:0d:21:71:22:62:75:69:ad:54:9f:21:
                    13:38:1e:52:bc:6c:9f:2a:f2:12:5c:20:e5:52:a9:
                    b2:87:33:1c:5e:ac:ad:4c:a8:15:f0:64:13:4b:29:
                    be:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:96:B0:B1:9E:09:F7:DC:AF:45:0F:2B:FA:FE:C5:C3:81:D2:7D:DE
            X509v3 Authority Key Identifier:
                keyid:71:73:EB:89:03:08:C1:18:04:E2:52:B1:1A:D1:C7:EC:54:A7:DB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36302e302f32322d3332203d3e20323639313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:ae:6e:cc:52:c2:4d:41:3d:49:28:0c:3d:62:4f:a5:cb:
         df:cc:0c:5d:a9:ee:25:08:7a:7f:8d:d0:f5:e7:e5:60:e6:80:
         82:71:78:d1:74:71:e1:ce:49:e6:b6:23:1e:a6:68:eb:52:ee:
         62:91:7f:c7:f3:2b:f8:16:3d:c4:08:1d:e5:e6:bc:40:72:fb:
         67:05:95:94:33:f8:6c:33:61:50:b1:dc:0f:36:e8:74:19:d3:
         2a:39:e1:21:b2:5a:5a:0b:d0:a1:0b:d5:b1:22:c7:83:d7:29:
         26:ee:cd:b8:67:3d:fb:ed:72:29:20:53:71:b7:0f:30:bb:2d:
         f2:21:29:d9:cd:86:07:bd:d7:86:87:b3:ee:4d:c9:d4:e5:72:
         8e:5b:be:39:35:96:ff:ed:b9:47:ef:6d:7f:92:8f:a1:28:63:
         97:2e:73:d6:3c:0e:34:f2:b2:64:af:3d:78:44:46:09:cd:5c:
         01:fe:8a:1b:ef:5d:3f:c4:40:d2:0a:3d:a6:30:de:28:a9:9e:
         e7:a4:1c:75:d9:11:82:b6:b5:07:f7:26:65:32:8d:93:ee:a8:
         67:27:1a:3d:cd:a8:5c:1c:a8:f6:1b:ef:f8:60:26:cf:04:67:
         8c:8d:eb:50:b0:4b:fd:c4:8c:a9:9d:0e:c5:f6:11:b9:5a:ee:
         dd:f1:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org