Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230302e302f32322d3232203d3e20323638313434.roa
File:                     34352e3136382e3230302e302f32322d3232203d3e20323638313434.roa (raw, json)
Hash identifier:          5aV9pw1gKWomddIPbAkluz9qSgeoy678BpjdZmSnltw=
Subject key identifier:   B8:69:17:36:CF:11:76:D7:50:37:BC:E7:90:9D:E0:85:49:07:49:EF
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       2C46593C49DCC70FF2B6FD625E2ACB1F140C6B93
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230302e302f32322d3232203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:01 +0000
ROA not before:           Fri 15 Sep 2023 16:51:01 +0000
ROA not after:            Fri 13 Sep 2024 16:56:01 +0000
asID:                     268144
IP address blocks:        45.168.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:46:59:3c:49:dc:c7:0f:f2:b6:fd:62:5e:2a:cb:1f:14:0c:6b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:01 2023 GMT
            Not After : Sep 13 16:56:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:8e:c3:f3:bb:d2:84:60:8c:2f:13:00:53:
                    ea:9b:ef:c2:6e:6c:26:5e:f9:91:89:2a:c0:67:ea:
                    6d:b0:b8:3c:3d:5a:ba:d5:66:2a:1f:02:7b:ce:f1:
                    bc:32:f5:76:d7:2a:fe:41:2a:7e:91:40:d2:e1:b1:
                    cf:72:e8:bf:f0:c0:fd:bb:c9:86:0e:83:ee:9c:08:
                    6e:07:5f:68:5e:5d:44:75:2b:ee:78:c7:77:8d:56:
                    83:98:ba:39:6f:72:6e:7b:76:7c:b9:2c:c6:10:f0:
                    1d:02:fc:7a:4d:c0:64:5c:3b:09:23:6b:fe:97:4f:
                    4f:7c:f9:df:68:c6:54:32:1a:f9:d9:f0:23:8d:49:
                    c5:26:a6:65:65:71:c8:30:22:58:d9:72:1f:5f:a3:
                    a1:6b:9a:bc:d3:a4:e6:90:f3:66:dc:25:f5:14:74:
                    6e:d3:33:27:8b:87:e6:d0:f3:33:a5:fe:37:5c:74:
                    bd:d4:b8:66:63:18:14:c7:b4:f0:44:84:71:cc:68:
                    34:ab:fc:cb:b5:b3:e4:f7:14:b2:43:25:73:1d:d9:
                    86:c7:6a:eb:54:43:30:1b:03:d5:0f:90:0d:7d:4b:
                    9f:a8:d8:41:24:d2:35:66:70:5b:31:6e:1d:4f:15:
                    9a:a1:17:14:bf:87:23:9e:ac:d6:36:4e:23:62:4b:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:69:17:36:CF:11:76:D7:50:37:BC:E7:90:9D:E0:85:49:07:49:EF
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230302e302f32322d3232203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:7c:43:d2:d0:a6:df:da:43:14:02:14:5c:ba:92:7e:78:bc:
         49:8b:e4:0c:7d:0c:72:8f:af:78:6c:48:d4:97:36:a4:02:8c:
         03:3f:da:f7:6e:78:36:67:b6:d6:c5:34:50:87:5c:4a:42:fe:
         60:85:c2:cb:96:5f:63:82:2e:af:a3:8d:c9:ee:ea:e1:d7:5d:
         1b:08:3c:61:6e:d6:e4:5d:fb:ef:0c:2f:9a:c9:c9:8e:58:90:
         82:70:fe:3e:9d:ce:bd:ec:ee:08:bc:91:1e:65:ff:2d:a7:f2:
         d8:85:08:12:35:51:bd:30:fd:27:5c:af:5a:fd:a9:88:fd:04:
         ff:24:a1:5f:2a:4c:01:54:13:bf:36:88:82:72:84:37:90:0c:
         e2:da:09:c0:80:8b:b3:17:bd:05:95:c4:b6:99:bd:f9:fb:3c:
         90:b2:64:07:85:a0:fb:95:db:1d:61:15:54:91:55:fb:6a:9d:
         a0:a5:30:4a:99:61:ae:41:75:9a:72:bd:2a:d0:db:2c:2f:17:
         cf:df:df:3a:31:79:a3:3e:dc:4f:fb:f1:29:e8:bf:49:c7:1e:
         32:24:d4:b9:4e:c5:df:5b:21:cb:4f:b7:07:25:41:5c:7f:0c:
         60:cf:3b:77:a7:e0:bb:2b:87:e0:56:20:2c:25:b0:1a:34:ed:
         f9:f4:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org