Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/34352e362e3131322e302f32322d3234203d3e20323636313331.roa
File:                     34352e362e3131322e302f32322d3234203d3e20323636313331.roa (raw, json)
Hash identifier:          zOjDUzHDg2a/OsL0oksm72pTZZ0jfRSC9LWcUpZg0N8=
Subject key identifier:   E3:45:CC:2C:50:E9:6A:28:13:45:42:AA:B0:EE:75:5E:81:C8:3E:63
Certificate issuer:       /CN=1CE78DE47E8BDBA4A648DDC8FFEE696941848504
Certificate serial:       44F9C80D7B8693A1F64B04831EC66300487FDEBD
Authority key identifier: 1C:E7:8D:E4:7E:8B:DB:A4:A6:48:DD:C8:FF:EE:69:69:41:84:85:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/34352e362e3131322e302f32322d3234203d3e20323636313331.roa
Signing time:             Fri 14 Jul 2023 19:36:30 +0000
ROA not before:           Fri 14 Jul 2023 19:31:30 +0000
ROA not after:            Fri 12 Jul 2024 19:36:30 +0000
asID:                     266131
IP address blocks:        45.6.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f9:c8:0d:7b:86:93:a1:f6:4b:04:83:1e:c6:63:00:48:7f:de:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CE78DE47E8BDBA4A648DDC8FFEE696941848504
        Validity
            Not Before: Jul 14 19:31:30 2023 GMT
            Not After : Jul 12 19:36:30 2024 GMT
        Subject: CN=E345CC2C50E96A28134542AAB0EE755E81C83E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:e1:19:cc:87:90:2d:93:ff:85:f6:7e:33:
                    9f:2e:03:88:df:83:5d:9e:aa:32:16:2a:be:1c:cf:
                    37:b6:fa:c4:01:49:f5:b3:9f:26:f6:50:80:9a:f2:
                    40:ad:1c:8a:3d:ae:de:96:29:27:7d:cd:be:8b:ab:
                    8e:18:86:0e:e8:14:b8:b4:b8:d1:f9:ff:2e:d8:95:
                    59:87:65:fc:0e:0d:7b:f5:96:89:5f:00:81:55:86:
                    a3:60:36:d8:56:b5:ff:e9:f3:0c:f6:c8:85:a6:75:
                    e8:18:49:5b:fe:8b:12:f1:08:73:09:bb:93:b4:5a:
                    5c:f3:f2:22:1e:22:df:a4:94:9c:f7:16:2a:ba:12:
                    dc:19:d7:10:ef:09:fb:f5:0a:f8:93:17:a9:4b:63:
                    49:98:94:b5:a0:6c:1c:85:05:60:ba:cd:d7:fd:b7:
                    6e:cd:6a:89:b1:36:50:db:8b:dd:a0:d7:4a:96:a3:
                    ce:c4:aa:7e:64:c1:b3:5c:cf:20:3d:f6:de:8c:a8:
                    ad:0f:6c:3b:81:83:43:46:24:c8:15:19:3e:97:60:
                    5e:47:01:8c:a1:02:19:b6:d7:10:80:6c:1a:18:6a:
                    96:1f:f8:ff:ae:b8:5c:cc:38:85:eb:f4:21:cb:a4:
                    6a:98:9d:e0:ea:5b:87:4b:39:e1:d1:d7:95:b9:11:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:45:CC:2C:50:E9:6A:28:13:45:42:AA:B0:EE:75:5E:81:C8:3E:63
            X509v3 Authority Key Identifier:
                keyid:1C:E7:8D:E4:7E:8B:DB:A4:A6:48:DD:C8:FF:EE:69:69:41:84:85:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CE78DE47E8BDBA4A648DDC8FFEE696941848504.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/0/34352e362e3131322e302f32322d3234203d3e20323636313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:93:9a:39:da:4a:46:fd:cd:02:e8:49:e4:09:f8:ca:9d:75:
         29:69:78:5c:12:9e:1d:20:21:14:11:16:2d:06:df:df:6e:e3:
         01:d5:54:9a:3d:06:61:f3:f3:50:fb:af:60:50:7a:6e:e2:f6:
         23:92:9e:61:15:e3:0a:47:d2:db:c8:f9:b7:5b:72:19:db:4f:
         92:a5:96:e7:9c:05:2b:a6:a1:c1:99:cc:71:92:48:79:02:e8:
         51:c6:b2:35:0e:69:80:6a:c3:90:d8:f2:24:a4:ae:94:6a:69:
         74:35:d2:e5:08:f0:eb:f0:10:57:90:8b:52:48:d2:ef:bc:a0:
         00:37:04:a7:c0:1f:01:30:df:a2:10:80:d1:b5:79:6a:17:35:
         2b:ba:c6:58:b4:26:df:37:fc:43:34:ef:16:75:c9:11:dd:79:
         71:ba:b2:e0:7b:36:f5:b6:b7:06:c7:54:72:50:5b:04:1c:7f:
         c1:b1:da:d3:1e:d9:b9:b9:79:eb:96:bc:c1:68:75:4b:f0:8d:
         9e:c7:28:66:15:af:97:e0:9f:64:dc:22:b0:e2:4b:ee:bf:40:
         91:6c:63:33:cc:f2:0c:02:fa:74:ed:4f:c7:92:a5:a5:72:9f:
         8a:22:c3:89:17:bb:3b:51:42:4b:d3:82:d6:49:31:db:a9:1b:
         57:5e:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org