Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134362e302f32332d3233203d3e20323638353638.roa
File:                     34352e3136332e3134362e302f32332d3233203d3e20323638353638.roa (raw, json)
Hash identifier:          xp09CHqLD70AfQp7B9se2Gv5LIGwPcDrApi+fbbkDZ4=
Subject key identifier:   67:AA:F2:91:94:A6:17:4B:E7:22:CA:A7:4C:D1:3E:C7:C7:32:A3:D8
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       26E98F07EDE97B366107D7327337B0E2D6F3C636
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134362e302f32332d3233203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 17:58:01 +0000
ROA not before:           Wed 17 Jan 2024 17:53:01 +0000
ROA not after:            Wed 15 Jan 2025 17:58:01 +0000
asID:                     268568
IP address blocks:        45.163.146.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e9:8f:07:ed:e9:7b:36:61:07:d7:32:73:37:b0:e2:d6:f3:c6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:53:01 2024 GMT
            Not After : Jan 15 17:58:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:1e:12:c2:e7:eb:64:d2:2f:13:c5:a7:5d:
                    6e:54:d0:91:23:ad:ea:b9:59:db:e6:60:c0:8a:5d:
                    89:e9:cd:a9:09:d4:0d:f4:e7:f1:db:5a:73:34:9c:
                    e3:6e:ae:10:0e:fe:87:57:9f:c8:be:c5:dc:8a:8c:
                    17:d6:30:95:27:d6:a2:12:7f:d3:6a:a6:83:f9:c4:
                    d1:b1:84:73:93:60:2f:b0:95:81:0c:a9:24:05:37:
                    42:f9:59:77:91:6b:ea:ed:d3:99:63:9b:19:88:e0:
                    73:9c:1f:35:65:69:1b:a5:42:c1:c5:f6:87:f6:d1:
                    c8:9f:b5:f1:df:83:97:84:57:8a:43:14:75:9f:db:
                    8c:22:fd:a5:20:1b:57:eb:75:d8:2b:f2:3a:a9:87:
                    65:5a:ba:ce:79:e8:27:2a:fe:b2:d3:5a:44:97:d6:
                    34:53:81:46:ee:48:8f:2a:9a:31:5a:da:1b:3f:13:
                    7f:e4:be:93:87:73:29:b3:91:21:88:ec:05:c2:e2:
                    f2:4e:f8:95:89:77:88:1f:0c:9e:3c:e4:16:93:97:
                    db:48:fe:95:dd:cd:8e:1a:e0:a9:f6:ae:16:47:02:
                    7c:c2:4d:6a:19:d7:50:98:b8:37:bd:50:ca:2e:64:
                    c5:6e:5c:c5:2a:f9:f7:02:86:b7:c2:8c:c3:6e:72:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AA:F2:91:94:A6:17:4B:E7:22:CA:A7:4C:D1:3E:C7:C7:32:A3:D8
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136332e3134362e302f32332d3233203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:da:7b:7b:3d:13:5f:e3:5a:4a:f1:90:15:80:49:e9:72:34:
         b9:d3:27:ec:dd:32:dd:e1:ad:f7:07:4b:ca:73:f9:de:43:77:
         95:b5:56:2f:19:79:0a:57:58:a7:70:53:fa:03:dc:d8:b2:96:
         e7:97:6d:78:15:4d:99:90:50:cb:f9:a9:f3:3a:e4:8b:fe:18:
         f2:38:3c:9b:c8:19:d0:cb:b0:da:8e:f9:e7:dd:13:d1:4a:68:
         a5:c3:5b:b2:20:1a:41:26:6a:3f:67:61:4a:7a:db:36:7c:6d:
         c9:32:5a:85:37:02:18:1c:e7:43:6e:75:13:25:e5:d4:62:f6:
         69:19:d7:d4:95:b2:69:d2:5c:75:2f:cc:2c:6a:79:61:bb:45:
         32:cd:65:e7:81:dc:c7:c3:df:d7:c9:3b:76:63:ec:aa:47:44:
         c8:91:50:24:f0:a6:44:ed:f9:7c:ef:1d:9a:96:2f:60:f4:db:
         cb:94:44:c3:bd:6a:6d:71:14:87:f4:8d:f0:91:3e:b7:78:04:
         3c:12:bb:f2:24:d8:4b:25:d6:4c:3c:2f:39:01:72:31:6e:66:
         ec:10:7e:97:bf:98:3a:c2:2b:e3:0e:b4:7f:91:43:39:bf:48:
         7b:6f:5e:6d:e2:0e:20:16:1e:d6:f9:a2:84:90:7f:7f:b1:5f:
         cf:72:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org