Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134342e302f32332d3233203d3e20323638353638.roa
File:                     34352e3136332e3134342e302f32332d3233203d3e20323638353638.roa (raw, json)
Hash identifier:          KwoloEhCuB0dofeHDeoNKtAkBu4S3skLbiJTMFEki58=
Subject key identifier:   CD:D6:93:AF:3E:19:1A:BC:00:35:02:3D:11:66:4F:04:2E:0F:B4:03
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       3AC6EFA188AA49D177CB6C66C0C6C6835842717C
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134342e302f32332d3233203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 17:58:01 +0000
ROA not before:           Wed 17 Jan 2024 17:53:01 +0000
ROA not after:            Wed 15 Jan 2025 17:58:01 +0000
asID:                     268568
IP address blocks:        45.163.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c6:ef:a1:88:aa:49:d1:77:cb:6c:66:c0:c6:c6:83:58:42:71:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:53:01 2024 GMT
            Not After : Jan 15 17:58:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:ae:8d:95:a4:b8:0e:bc:2e:41:71:83:de:
                    6e:8e:3a:a2:40:ef:7f:75:1a:13:c2:20:74:89:9d:
                    d9:4f:d4:3f:6f:50:04:ff:c8:fb:de:c8:33:df:4b:
                    24:98:2b:6d:47:ed:97:db:98:49:9d:fc:a8:a9:4b:
                    89:96:b4:b9:f0:06:02:53:92:52:fd:8b:c0:69:96:
                    60:4f:04:cd:36:94:d2:a1:9a:68:cc:eb:94:c5:1d:
                    74:76:fa:52:1a:00:93:38:2f:84:23:e3:29:de:0a:
                    0a:6f:0c:13:fe:08:5d:51:7b:08:66:cb:e6:c6:25:
                    e4:db:15:0a:ae:fb:1e:47:a8:03:ac:fb:f7:37:de:
                    7c:9e:3f:80:1a:f1:4c:a0:91:70:4c:6c:c5:e4:78:
                    3c:e2:37:44:24:43:2e:af:00:3c:0d:a4:cb:c1:53:
                    41:70:b1:75:83:c0:56:cb:42:8f:2b:d5:9c:e1:5c:
                    40:52:b0:1b:de:a1:35:c5:e2:a2:ba:c7:13:99:f7:
                    bb:fd:d1:e9:f4:5a:28:b0:c7:df:de:34:a8:c4:a7:
                    07:04:7b:68:cd:bd:1f:5e:7f:b0:6b:75:6d:65:21:
                    ac:f0:d2:9d:ba:7b:7f:de:e2:2f:4b:fd:22:6d:a8:
                    44:0d:ce:eb:a8:81:65:b0:cd:3d:64:4e:f5:80:14:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D6:93:AF:3E:19:1A:BC:00:35:02:3D:11:66:4F:04:2E:0F:B4:03
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134342e302f32332d3233203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:9d:ad:b6:12:cf:ad:79:ee:00:90:bd:54:c5:9c:21:07:
         8d:33:07:5a:a1:f4:7c:52:94:f2:33:49:8d:d1:5e:ce:55:02:
         a6:b9:7c:f1:8f:f5:75:7f:37:55:c1:07:69:88:0a:cf:97:9b:
         51:bc:01:99:de:5b:47:cd:33:4e:ae:44:98:af:95:a5:f7:c4:
         9b:a0:69:c2:5d:83:3f:c7:4a:e2:00:a6:f1:f8:ea:82:7c:b2:
         a8:62:04:89:1d:d4:22:72:d5:25:25:9c:d9:41:8a:74:39:70:
         16:48:41:20:2c:99:01:c5:9a:ce:68:59:4b:10:5e:2b:ef:51:
         e2:60:44:53:bb:ba:f6:cd:d2:13:fd:07:a3:ce:af:00:82:83:
         64:eb:9e:54:c9:e8:3f:47:2f:e8:63:77:cf:c5:c3:96:dc:16:
         cc:9c:3f:af:9a:e3:d1:d5:b2:ee:70:fd:53:44:8b:21:99:23:
         42:a8:af:33:2a:5d:bd:f5:f8:f1:8e:bc:9b:f5:07:ec:08:b4:
         20:b1:9c:15:7a:83:4b:20:12:c2:59:dd:28:98:32:d4:cb:c0:
         a2:70:fe:09:49:80:3a:24:86:6b:d2:d4:be:bc:d3:37:10:3e:
         b8:e5:c3:e8:8e:cb:c4:ed:a5:a0:35:d1:fc:71:dc:72:e5:3f:
         e0:85:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org