Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134342e302f32322d3232203d3e20323638353638.roa
File:                     34352e3136332e3134342e302f32322d3232203d3e20323638353638.roa (raw, json)
Hash identifier:          yS7cjD8zo4cZYoLfhc53Tb5heLbV0orgfaOTGbIMezs=
Subject key identifier:   CE:46:14:4B:65:E7:7E:F1:D5:82:07:42:1F:BC:F9:C5:5A:16:51:BC
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       648D7B0BB01088551612FFD2D47E7A429B881399
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134342e302f32322d3232203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 17:58:00 +0000
ROA not before:           Wed 17 Jan 2024 17:53:00 +0000
ROA not after:            Wed 15 Jan 2025 17:58:00 +0000
asID:                     268568
IP address blocks:        45.163.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8d:7b:0b:b0:10:88:55:16:12:ff:d2:d4:7e:7a:42:9b:88:13:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:53:00 2024 GMT
            Not After : Jan 15 17:58:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:55:8b:c3:b8:68:9d:21:58:8e:ed:e0:4d:
                    86:51:c2:04:dc:ab:eb:ed:04:f3:f0:4b:f7:8b:a7:
                    ae:f3:69:c4:3f:1f:06:93:a2:bd:cf:fd:e0:f6:47:
                    49:6c:79:d7:4a:2b:a7:8b:f2:b7:af:36:6e:20:3a:
                    3a:c3:70:77:5f:a4:8a:21:d3:c3:60:bf:dc:65:14:
                    dc:92:f3:07:2c:9f:df:ec:f7:7e:ce:b9:54:28:e8:
                    21:fb:21:6b:f7:5d:1c:ec:c3:4c:6c:d2:97:b4:ba:
                    5a:3c:a5:87:30:77:53:16:ad:f8:1e:e8:4b:32:03:
                    32:28:3c:53:4f:64:a4:d1:be:22:66:91:b1:87:86:
                    e2:70:be:e9:b6:df:b9:31:89:a6:61:4d:6a:8b:f2:
                    94:1f:d8:e5:2e:c1:c7:61:8b:16:e9:8f:8d:dc:1c:
                    db:3f:a6:04:6f:99:cc:67:7d:ab:ff:18:24:35:05:
                    f2:5f:0a:b8:0e:68:76:39:60:10:b2:11:c4:52:31:
                    ae:2d:fd:32:aa:e3:23:f3:9e:87:6f:33:cd:3b:10:
                    a7:80:da:9b:d7:8a:43:ea:71:f9:55:40:bd:d1:d6:
                    b8:26:c7:b4:33:ff:72:79:74:b2:33:c4:ed:fd:7c:
                    f4:39:0b:d2:3f:bd:c6:e1:a1:d9:1e:3a:67:83:d8:
                    82:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:14:4B:65:E7:7E:F1:D5:82:07:42:1F:BC:F9:C5:5A:16:51:BC
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134342e302f32322d3232203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:2b:d7:7a:95:57:dc:72:e6:67:43:63:48:5d:96:17:ff:5c:
         e2:ea:03:ef:c3:20:d3:81:72:bb:54:ad:b7:86:79:0b:29:0d:
         da:88:c6:a9:7b:8c:6d:ee:8c:2a:ba:ef:4d:24:7f:0a:f5:26:
         07:2a:39:c7:3e:17:c8:0f:50:42:c1:ee:c3:34:ca:bd:5d:8b:
         28:c5:ae:5e:74:4e:5d:2e:38:ea:42:51:05:fb:be:86:b8:13:
         f3:4c:c9:6c:1e:91:6e:06:6e:8c:17:62:19:c8:d1:cc:d5:91:
         f7:8b:63:d7:c6:c9:90:39:94:c1:f8:3e:9d:db:f1:c5:3c:f9:
         2f:7a:e5:82:9e:bb:1b:04:48:fa:d0:28:8a:dd:c8:91:ef:e5:
         9d:cd:f0:87:8b:60:f1:65:31:80:9d:55:ec:ab:8f:e8:1a:5b:
         86:c0:a8:09:f4:12:61:4b:b0:f1:35:3d:d0:f7:d7:bd:e7:d2:
         a1:b7:a6:01:b8:9d:78:c5:f2:83:99:7a:aa:ed:1a:7f:fe:de:
         05:5d:10:4a:39:9f:5b:47:ae:ba:0c:00:7d:db:41:9b:0f:fb:
         29:82:87:d0:4d:89:67:1c:d2:bb:4f:84:9c:34:de:6f:36:d4:
         63:d9:53:4b:57:96:0a:43:da:4c:b5:35:09:ed:80:9e:00:7e:
         44:32:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org