Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134352e302f32342d3234203d3e20323638353638.roa
File:                     34352e3136332e3134352e302f32342d3234203d3e20323638353638.roa (raw, json)
Hash identifier:          gKEbLIxJttCheFZkSoI584uGt+beTV8/2FInCdJjWaI=
Subject key identifier:   0C:EF:3D:A2:06:83:A1:A2:81:05:8D:26:3E:5D:21:C1:99:4F:7A:0F
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       34FCBE9681733DEFE575F73F084E2B11EC2AA9ED
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134352e302f32342d3234203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 17:56:01 +0000
ROA not before:           Wed 17 Jan 2024 17:51:01 +0000
ROA not after:            Wed 15 Jan 2025 17:56:01 +0000
asID:                     268568
IP address blocks:        45.163.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fc:be:96:81:73:3d:ef:e5:75:f7:3f:08:4e:2b:11:ec:2a:a9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:51:01 2024 GMT
            Not After : Jan 15 17:56:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:f6:f5:db:43:04:e2:c1:ce:84:b3:7d:83:
                    e8:ca:f6:0d:a7:ec:48:4f:1b:8e:f4:45:98:ed:9f:
                    57:c2:7e:71:9f:c3:39:ec:a8:8d:4e:df:40:f4:6a:
                    f5:cc:29:37:14:b9:9a:a7:99:a5:03:07:5a:c2:2c:
                    a1:24:21:e2:1b:60:90:45:19:52:d6:28:5a:c7:4c:
                    89:bf:db:d5:4e:9c:6b:03:b3:44:1b:04:9d:b6:d0:
                    fc:ea:a5:29:de:de:e2:b5:6f:a1:d4:bf:fa:92:44:
                    d4:fe:a0:bb:52:80:32:3b:6c:e7:11:0a:11:b4:8a:
                    f8:6c:62:94:8b:7e:17:bf:f3:38:d8:6a:5f:c8:a8:
                    8d:01:e9:13:42:96:44:82:b8:e8:e5:f8:a4:5f:19:
                    e5:83:7f:55:32:fc:4d:45:ad:9a:ae:d2:91:e2:ea:
                    f7:7e:aa:2a:f7:4d:c1:2b:20:14:3c:19:f0:f6:57:
                    0d:c1:da:86:e8:a2:e1:95:66:cf:81:46:cb:e8:0d:
                    46:39:f6:3e:ad:be:40:f0:64:36:4c:d0:ef:1f:2c:
                    12:49:12:2f:88:12:88:a5:de:80:b0:2c:b9:49:4f:
                    fb:b3:83:0b:14:72:6b:77:0b:2a:6a:d8:c5:05:14:
                    00:78:74:a5:59:be:cc:c4:4a:69:ac:a4:49:a9:fa:
                    8b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EF:3D:A2:06:83:A1:A2:81:05:8D:26:3E:5D:21:C1:99:4F:7A:0F
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134352e302f32342d3234203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:9c:70:12:df:50:a4:fd:d7:91:6f:4a:fd:75:73:91:ff:dc:
         99:8c:be:9e:53:43:22:0e:1d:a7:bb:cf:5f:65:85:c9:07:d9:
         b5:7d:53:4d:12:85:90:ba:4e:ab:6f:be:49:b9:eb:56:6f:cb:
         12:d8:80:b2:e0:b5:46:89:e3:05:01:4c:38:56:a3:fa:01:cf:
         e6:09:f1:c0:73:93:e7:c0:5b:f7:1b:1c:58:10:e6:09:a0:13:
         36:76:75:b3:1d:86:35:0d:71:88:82:27:67:b9:ae:b2:95:f3:
         3d:a9:e0:27:4b:be:9c:2a:54:cf:54:9c:08:b3:5f:4b:3c:6e:
         67:e3:b4:a4:64:1c:44:01:74:eb:40:60:7c:d7:62:e4:2f:19:
         ea:d4:24:05:f2:ca:ae:35:aa:b9:a8:df:61:cd:f5:05:87:bd:
         18:e9:54:56:e5:f1:42:0a:ef:85:dd:81:e8:41:38:09:b4:18:
         6d:a4:ab:b3:49:1d:19:89:58:3f:ff:9e:cd:01:bf:e7:5a:6d:
         ec:3f:c6:c7:10:cf:c7:bb:ab:88:14:ec:5a:23:df:33:66:6a:
         2b:98:e5:fa:2b:e7:fb:bd:f7:32:2e:dd:08:e3:10:76:fb:d8:
         ff:f3:1e:b5:2e:1d:d5:27:6a:6a:c0:77:d2:21:f5:a4:11:30:
         31:19:51:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org