Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134342e302f32342d3234203d3e20323638353638.roa
File:                     34352e3136332e3134342e302f32342d3234203d3e20323638353638.roa (raw, json)
Hash identifier:          rEduVfGD8wh6oUWwXUFq/LNMg1e4wPxaXwG/DWGUY08=
Subject key identifier:   C6:CA:BB:6C:C5:24:4C:C6:A0:32:B6:F4:B3:02:4F:C0:78:A9:0B:C3
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       7C6D6FCE4ABEA1C6368E2A39B697D15D201EDAB1
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134342e302f32342d3234203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 17:56:00 +0000
ROA not before:           Wed 17 Jan 2024 17:51:00 +0000
ROA not after:            Wed 15 Jan 2025 17:56:00 +0000
asID:                     268568
IP address blocks:        45.163.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6d:6f:ce:4a:be:a1:c6:36:8e:2a:39:b6:97:d1:5d:20:1e:da:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:51:00 2024 GMT
            Not After : Jan 15 17:56:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3e:47:8b:e1:8e:1e:49:8e:d3:72:aa:12:aa:
                    61:11:b2:96:f1:5c:a8:97:eb:e1:f8:d3:a3:47:17:
                    82:19:60:8c:44:38:b7:73:4c:32:15:92:23:9c:c0:
                    52:d8:6d:53:5c:2f:4b:07:9b:d1:a6:c4:53:d2:b9:
                    1f:ca:8d:e7:3f:08:7b:a1:fa:7b:21:03:ea:28:a5:
                    21:8c:75:39:8a:6c:6c:eb:a1:05:d5:d4:7f:0b:46:
                    66:13:cf:1f:88:bb:09:ae:9d:ab:4a:48:6d:45:b9:
                    07:6e:43:63:97:8c:0c:62:05:7d:aa:50:88:18:0f:
                    f4:04:38:1d:28:ae:38:e1:48:ed:ca:c7:b1:48:3e:
                    bd:08:ce:31:ff:09:2e:4a:79:ec:1f:e8:aa:97:b2:
                    66:f0:0d:26:97:1f:7c:67:5e:1f:f2:cb:cf:d1:05:
                    7e:dc:73:dc:b0:70:f7:8f:22:82:0e:2c:e8:15:f3:
                    06:d1:05:d0:10:79:e4:80:c1:01:fe:1f:e0:6b:94:
                    dd:97:34:da:93:e1:a9:c2:1a:9f:49:91:78:4d:c3:
                    af:1c:60:52:58:1a:4b:33:80:ac:69:39:24:75:4d:
                    ce:de:36:ef:ec:39:2b:e8:ba:86:f5:2b:2e:62:19:
                    14:97:13:a3:b8:0b:3a:cb:eb:ce:3d:cf:2f:26:c6:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CA:BB:6C:C5:24:4C:C6:A0:32:B6:F4:B3:02:4F:C0:78:A9:0B:C3
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134342e302f32342d3234203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:9b:3c:6a:85:19:62:31:f1:8c:5e:a6:a8:f3:92:50:a3:e7:
         74:53:ef:b1:5d:04:5a:ae:b1:1d:0f:dd:60:f5:b9:c4:ba:58:
         f5:1c:c5:c3:ea:09:e5:a1:5a:bb:eb:73:19:62:e1:61:54:06:
         a5:55:f3:6d:b6:dc:81:cd:79:fb:28:6d:95:a6:1f:a9:15:90:
         f4:b9:da:db:18:5c:48:d8:63:5d:61:a9:68:33:7c:7e:c2:17:
         79:bf:33:3c:06:33:c4:0b:75:1f:29:8b:8d:88:b6:37:8c:e4:
         d0:74:16:f4:60:a5:5f:ea:a8:ed:f9:f8:c9:d2:9d:50:5c:56:
         17:7a:8a:f2:42:1c:4c:b3:4e:1e:3f:d4:e6:1c:8f:e9:31:dd:
         c7:fe:8d:f3:49:64:e8:82:56:32:15:00:3b:a5:e3:34:a7:5c:
         f4:22:bd:70:b9:89:d5:76:19:49:75:40:e0:68:2b:b7:71:2e:
         b8:17:98:8d:23:27:af:1b:e6:cd:8f:fa:76:d5:91:6d:52:af:
         ac:b8:6a:ba:f0:f7:dc:8f:23:c9:dc:67:d0:4c:f5:3a:18:2b:
         f2:bf:26:6d:71:81:3b:e3:75:5e:76:b2:51:d1:4c:3d:7c:52:
         ca:73:7c:bc:88:63:24:b0:40:a3:e3:9b:09:aa:2a:3f:9a:5f:
         7c:73:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org