Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32322e302f32342d3234203d3e20323638343337.roa
File:                     34352e3136302e32322e302f32342d3234203d3e20323638343337.roa (raw, json)
Hash identifier:          JCT6RexcTJUmOGPEooLlSZra8pg36ybxgXHKEGSxI/k=
Subject key identifier:   E9:E9:1A:63:18:C4:F8:80:01:8D:E0:EE:0D:41:3D:2E:3C:5E:1A:B3
Certificate issuer:       /CN=92014ED18F77F0D942921A5E834CE76EC5930713
Certificate serial:       71E922520D7A60EB38F7EAABD4F67ADD8E4247F3
Authority key identifier: 92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32322e302f32342d3234203d3e20323638343337.roa
Signing time:             Tue 21 Mar 2023 13:00:00 +0000
ROA not before:           Tue 21 Mar 2023 12:55:00 +0000
ROA not after:            Tue 19 Mar 2024 13:00:00 +0000
asID:                     268437
IP address blocks:        45.160.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e9:22:52:0d:7a:60:eb:38:f7:ea:ab:d4:f6:7a:dd:8e:42:47:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92014ED18F77F0D942921A5E834CE76EC5930713
        Validity
            Not Before: Mar 21 12:55:00 2023 GMT
            Not After : Mar 19 13:00:00 2024 GMT
        Subject: CN=E9E91A6318C4F880018DE0EE0D413D2E3C5E1AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:da:66:75:10:69:ec:4b:df:49:bc:b5:c9:
                    e5:5b:62:c3:67:e3:03:86:88:4f:83:d1:cb:26:81:
                    05:76:74:57:1c:cb:6c:b4:ea:56:42:80:b6:4e:60:
                    64:9f:e2:6e:c0:fd:56:d6:2e:0d:d0:51:46:bd:38:
                    33:8c:67:d2:0c:ec:04:cc:24:7e:da:42:dc:90:c4:
                    5f:d9:6c:68:4b:41:00:50:6b:53:ae:7e:76:e6:89:
                    64:08:3d:50:aa:77:40:53:c4:a8:6e:9d:00:11:34:
                    d0:c5:0d:ee:67:3b:cb:ee:62:36:98:9c:c5:c6:e1:
                    92:02:43:8b:e4:ba:b3:52:81:17:89:b1:47:18:52:
                    f0:73:1e:49:b7:5c:82:a7:0e:10:62:b9:20:a8:57:
                    7c:7a:9e:04:af:c1:80:0c:ba:de:ad:84:36:f4:35:
                    d8:ab:a8:b5:69:cb:71:5f:a5:cb:81:b5:b5:a7:0f:
                    44:f1:e7:68:74:f8:aa:d2:47:9d:87:b2:bc:0e:30:
                    6a:93:40:4f:93:92:46:49:a2:85:5d:a3:2d:2b:67:
                    68:e3:50:d3:a8:47:0f:c3:be:b3:eb:79:0e:5c:aa:
                    c7:f1:7d:27:b2:2e:5b:27:df:b4:34:25:73:c4:03:
                    93:7c:a4:12:34:56:cd:5d:81:15:6d:af:ac:7a:83:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E9:1A:63:18:C4:F8:80:01:8D:E0:EE:0D:41:3D:2E:3C:5E:1A:B3
            X509v3 Authority Key Identifier:
                keyid:92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/92014ED18F77F0D942921A5E834CE76EC5930713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32322e302f32342d3234203d3e20323638343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:50:e6:eb:34:21:01:01:98:6a:8b:77:cb:f3:14:c0:95:39:
         71:d6:eb:42:15:30:e3:2c:d7:75:8b:27:ef:3f:9b:8e:17:a8:
         03:e6:de:e4:e5:76:4b:68:bb:14:57:bc:98:b0:9f:80:d8:0a:
         66:35:46:b4:83:46:91:d1:fe:2f:95:67:fe:8d:9e:07:3a:c5:
         e7:cc:d2:d7:cc:85:14:81:62:d8:81:b0:75:8f:d7:0b:43:2b:
         f9:34:05:bb:fa:4a:17:ae:92:ec:f1:2d:89:a0:b8:d0:7b:dc:
         a9:13:ce:c2:c5:cb:32:a0:93:a0:f2:f6:5d:64:97:28:38:c4:
         78:ee:a0:7e:92:4f:86:2d:6a:3b:81:28:e1:a1:3f:71:81:b2:
         71:19:62:41:6e:a4:a3:13:eb:f7:5c:ee:3f:05:9b:56:3f:b7:
         f3:65:a1:56:ff:95:09:67:e8:32:d8:02:b4:44:8b:27:05:a4:
         ea:67:81:85:ed:bd:75:cf:74:ef:d9:d1:7d:1c:67:b4:41:a2:
         2f:64:b4:82:8d:7d:43:21:4b:50:b1:03:80:f2:2d:26:4b:d7:
         91:b7:59:e6:68:7e:1e:fb:a3:2a:2e:cf:26:0d:90:37:00:39:
         a3:b3:b8:74:7c:80:85:a2:bf:f5:07:c9:88:09:ad:31:63:ae:
         c3:d7:dc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org