Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/34352e342e38302e302f32322d3233203d3e20323635393333.roa
File:                     34352e342e38302e302f32322d3233203d3e20323635393333.roa (raw, json)
Hash identifier:          VaH0Eqr1WwouPc5Z4gh6alALUeNWNVjUMUIFzmKI450=
Subject key identifier:   09:44:0D:A9:1B:7A:D1:75:99:EE:3C:41:2E:1C:76:EA:C4:01:3D:35
Certificate issuer:       /CN=37FD977CDE44223390A6F44F0C91E67DE37D0E6E
Certificate serial:       74744DD806E7035C0D7DD50ABD37816623432971
Authority key identifier: 37:FD:97:7C:DE:44:22:33:90:A6:F4:4F:0C:91:E6:7D:E3:7D:0E:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37FD977CDE44223390A6F44F0C91E67DE37D0E6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/34352e342e38302e302f32322d3233203d3e20323635393333.roa
Signing time:             Tue 19 Sep 2023 13:27:07 +0000
ROA not before:           Tue 19 Sep 2023 13:22:07 +0000
ROA not after:            Tue 17 Sep 2024 13:27:07 +0000
asID:                     265933
IP address blocks:        45.4.80.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:74:4d:d8:06:e7:03:5c:0d:7d:d5:0a:bd:37:81:66:23:43:29:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37FD977CDE44223390A6F44F0C91E67DE37D0E6E
        Validity
            Not Before: Sep 19 13:22:07 2023 GMT
            Not After : Sep 17 13:27:07 2024 GMT
        Subject: CN=09440DA91B7AD17599EE3C412E1C76EAC4013D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:91:f6:78:b7:c5:b2:93:37:07:fb:28:9d:
                    81:4f:ac:af:92:de:7b:47:7b:12:00:ed:b8:93:17:
                    64:ef:77:00:13:a8:63:95:c1:bb:0a:03:e1:4b:ae:
                    03:0d:ea:8c:51:1a:e1:d2:9a:da:4c:30:0a:37:50:
                    e2:48:de:e3:d1:8e:9b:e0:9c:88:5a:ad:5b:f1:d2:
                    0a:ca:45:16:12:a8:64:bb:92:43:c5:f8:55:69:a0:
                    15:45:37:03:91:ca:0e:84:3a:6c:e3:26:8e:e6:32:
                    6b:e1:fb:7a:f6:71:2a:7a:6f:43:d0:1f:57:66:df:
                    b4:58:83:2a:26:0f:49:3c:a5:60:51:01:f2:ac:c6:
                    d3:fe:46:c3:61:59:9e:3b:d2:94:d9:18:c4:f3:c0:
                    e2:96:0b:12:14:5e:91:e4:51:7d:32:6a:0d:c3:00:
                    0a:29:87:7a:73:1e:4b:72:9d:af:98:06:ce:6a:2b:
                    70:e6:39:8e:14:6c:45:8e:9b:ae:7a:70:bd:37:84:
                    96:07:d6:38:11:8a:0e:e4:d8:99:af:91:60:9f:bf:
                    9d:11:65:c6:9a:16:4c:90:01:22:dc:68:df:c8:77:
                    8f:1f:88:1c:ca:d8:0a:12:ef:01:9c:7e:67:87:07:
                    89:58:8a:cd:e7:eb:83:3c:7a:9a:bc:61:21:9a:57:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:44:0D:A9:1B:7A:D1:75:99:EE:3C:41:2E:1C:76:EA:C4:01:3D:35
            X509v3 Authority Key Identifier:
                keyid:37:FD:97:7C:DE:44:22:33:90:A6:F4:4F:0C:91:E6:7D:E3:7D:0E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/37FD977CDE44223390A6F44F0C91E67DE37D0E6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37FD977CDE44223390A6F44F0C91E67DE37D0E6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/34352e342e38302e302f32322d3233203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:46:01:d8:21:61:29:d9:eb:3b:f9:91:e5:12:07:c3:16:6b:
         8b:41:47:c8:9e:6c:fe:9f:56:7d:b0:d4:2e:60:b5:f1:23:4e:
         8b:f2:39:d1:60:ee:a8:70:ce:f1:4f:98:77:5b:ed:4f:ec:56:
         d1:58:1c:8b:d9:b4:6a:7d:13:8c:66:62:c0:39:78:c8:6c:35:
         6a:12:b4:9a:96:34:b6:4b:38:f1:06:4b:5d:cc:20:cb:46:32:
         5d:17:63:17:d6:14:f9:01:26:9d:d8:e8:5d:99:8e:1c:1e:29:
         84:ec:2e:b7:11:e8:0a:54:d4:24:6e:db:2e:95:29:d9:11:a2:
         84:6b:f8:8f:d0:b7:03:3b:65:2a:68:b8:14:4b:77:24:1b:6b:
         c9:d9:e7:1c:52:3f:a0:87:f2:2d:91:b4:d2:b1:f3:6d:74:e3:
         9b:61:c5:ac:00:4f:3b:f1:57:a5:e9:a6:55:1e:88:16:51:48:
         68:14:eb:af:55:2d:67:56:23:6d:8a:63:c7:c1:80:7a:40:7e:
         4d:6a:ac:89:7d:92:48:37:24:21:f5:25:6d:1a:d8:fc:e3:72:
         49:62:66:84:39:33:ff:4e:f8:63:53:15:96:c3:07:68:de:2d:
         0e:d0:2b:31:59:05:fb:57:b4:c8:19:b9:3c:a6:2e:f9:a2:ce:
         49:ae:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org