Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa
File:                     34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa (raw, json)
Hash identifier:          p5cxm4p6HjK3DQdljUi/DTqdq2EugT+XxtgwjXd1DgM=
Subject key identifier:   21:FA:4E:41:37:D4:69:61:14:38:E5:0B:52:B0:27:96:FF:BD:63:0C
Certificate issuer:       /CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
Certificate serial:       71166D387178449DAE9AE7AACCA95DDF120F34B2
Authority key identifier: A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa
Signing time:             Thu 04 Apr 2024 10:25:57 +0000
ROA not before:           Thu 04 Apr 2024 10:20:57 +0000
ROA not after:            Thu 03 Apr 2025 10:25:57 +0000
asID:                     268786
IP address blocks:        45.172.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:16:6d:38:71:78:44:9d:ae:9a:e7:aa:cc:a9:5d:df:12:0f:34:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Validity
            Not Before: Apr  4 10:20:57 2024 GMT
            Not After : Apr  3 10:25:57 2025 GMT
        Subject: CN=21FA4E4137D469611438E50B52B02796FFBD630C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:df:4e:bf:ec:c9:73:b2:39:c5:68:7f:08:
                    a7:15:09:62:65:ab:b5:6f:d1:eb:57:52:2b:ab:ff:
                    4c:0b:19:af:d5:6e:c2:50:b2:86:e9:76:0d:05:cb:
                    d1:c4:60:cd:b3:d7:2b:e3:53:67:2f:8b:74:99:01:
                    04:f7:58:e3:ec:ed:ec:9f:c1:e9:d1:12:95:3b:f4:
                    ca:01:af:71:20:d5:0c:db:25:c4:13:a8:92:7c:e5:
                    f4:16:73:38:d8:27:0e:b7:50:ae:63:6a:1a:18:53:
                    c5:de:f1:49:92:4f:22:20:e8:42:0e:f6:44:cd:28:
                    c2:13:44:8b:39:45:29:bd:55:82:71:74:2f:94:b3:
                    ab:85:da:29:3c:16:1b:3f:0e:d5:b9:7d:1e:31:e6:
                    87:48:f0:df:6a:46:76:db:4e:d4:e8:87:6a:a6:cb:
                    23:7a:3e:82:65:3c:fe:a3:a4:1d:25:5d:13:da:43:
                    b4:8b:12:01:b1:d7:21:ba:9e:0c:48:7e:e1:f7:7d:
                    e6:18:1f:62:f9:5d:de:52:a7:2a:45:42:21:aa:e6:
                    eb:0f:80:e6:6d:64:82:e0:2b:6b:75:dd:36:4a:4c:
                    b2:8c:09:c8:ed:81:0a:1b:27:bd:a1:7f:09:0c:2a:
                    31:50:bf:6b:16:08:f4:7c:f7:ab:cf:e8:02:8c:0f:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FA:4E:41:37:D4:69:61:14:38:E5:0B:52:B0:27:96:FF:BD:63:0C
            X509v3 Authority Key Identifier:
                keyid:A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136382e302f32332d3233203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:0e:91:b8:4d:10:78:7c:62:75:df:4f:f7:ef:f8:87:89:15:
         ef:2e:39:05:34:b3:1f:d8:90:29:70:ff:dc:41:03:f0:ac:db:
         c2:09:8b:60:50:02:85:8b:ab:69:2c:d2:ce:9c:d1:06:85:df:
         92:6f:be:b2:f3:78:21:7b:7a:a4:c0:93:0e:21:bd:c4:19:cd:
         d3:52:3a:1f:24:05:cf:42:70:46:61:b3:fe:a9:72:16:68:26:
         e5:41:73:8e:a6:e6:db:73:5d:1b:cb:30:5a:91:07:01:7a:d1:
         04:0f:e2:d5:1e:20:fb:13:8c:36:7a:8d:de:e1:37:0d:5b:8b:
         70:4f:ec:07:bf:a9:84:88:d1:cb:e8:43:af:56:a8:14:de:73:
         8f:fc:8b:69:28:c2:ef:fa:1b:d8:e6:30:9d:2e:88:7f:c3:a0:
         60:cc:89:53:28:d0:e7:d1:d3:8c:40:69:d4:6d:5b:de:b4:66:
         2b:8d:37:f5:15:44:60:20:2c:f1:71:19:40:99:fc:c1:59:bb:
         f8:5d:2b:27:a3:4e:f7:15:90:39:e2:82:75:b0:57:37:9d:67:
         b7:37:c7:e4:15:73:4d:ea:1f:55:1e:24:a7:c7:67:50:47:7f:
         9e:c2:11:21:ab:36:7f:f4:db:fa:87:fc:0c:ee:7b:e3:fe:cf:
         51:63:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org