Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa
File:                     34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa (raw, json)
Hash identifier:          IINJoIsfzbzZh4rSptzOm2rLg6G7Pa9UQ8or2VesP2Q=
Subject key identifier:   19:DC:9E:ED:04:59:6A:19:C2:9D:B2:51:0F:60:70:06:C7:D7:D5:C1
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       181C7DC2D5324C6B454FD64F60F650C7AA6D6CD0
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:02 +0000
ROA not before:           Fri 15 Sep 2023 16:51:02 +0000
ROA not after:            Fri 13 Sep 2024 16:56:02 +0000
asID:                     268144
IP address blocks:        45.168.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1c:7d:c2:d5:32:4c:6b:45:4f:d6:4f:60:f6:50:c7:aa:6d:6c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:02 2023 GMT
            Not After : Sep 13 16:56:02 2024 GMT
        Subject: CN=3082010A0282010100E2CF7BE07E0070585FB1AA01D09FC0C29E7B68A2D33E179A1F1F00EEF606945CC5EBF6C3D6EC1AA7069E5AE439BBDB2E37B1AEAE4075665EB9577D2CDEB42B25D37F6E7F58DD02BB2A64AD97C8F786E0DED4AFB07570BC1376EC945D403B8DAFB0117C8CFE71BC34D0B237EAA942E4979652FF5C83F4BE5C7BA6616FC09138EE44A12C00479AB7F9DC595FD75CE41320EC5CF5EA95A98F3D40AA9676854DF5F51BDAD5C2CB82B2750410E0411D32B6D90726EF48CF6D2EFBE3ABA053BA1EC7985E72E024628289D1A8B77E2A29823ED747DFFCB34FBCA7AD2DD7CF00D69BDD8FA3731D6A1472A72F7209AEA5FB0385DE9404F90C2F8C6157C52D5BB8FDD921E70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:7b:e0:7e:00:70:58:5f:b1:aa:01:d0:9f:
                    c0:c2:9e:7b:68:a2:d3:3e:17:9a:1f:1f:00:ee:f6:
                    06:94:5c:c5:eb:f6:c3:d6:ec:1a:a7:06:9e:5a:e4:
                    39:bb:db:2e:37:b1:ae:ae:40:75:66:5e:b9:57:7d:
                    2c:de:b4:2b:25:d3:7f:6e:7f:58:dd:02:bb:2a:64:
                    ad:97:c8:f7:86:e0:de:d4:af:b0:75:70:bc:13:76:
                    ec:94:5d:40:3b:8d:af:b0:11:7c:8c:fe:71:bc:34:
                    d0:b2:37:ea:a9:42:e4:97:96:52:ff:5c:83:f4:be:
                    5c:7b:a6:61:6f:c0:91:38:ee:44:a1:2c:00:47:9a:
                    b7:f9:dc:59:5f:d7:5c:e4:13:20:ec:5c:f5:ea:95:
                    a9:8f:3d:40:aa:96:76:85:4d:f5:f5:1b:da:d5:c2:
                    cb:82:b2:75:04:10:e0:41:1d:32:b6:d9:07:26:ef:
                    48:cf:6d:2e:fb:e3:ab:a0:53:ba:1e:c7:98:5e:72:
                    e0:24:62:82:89:d1:a8:b7:7e:2a:29:82:3e:d7:47:
                    df:fc:b3:4f:bc:a7:ad:2d:d7:cf:00:d6:9b:dd:8f:
                    a3:73:1d:6a:14:72:a7:2f:72:09:ae:a5:fb:03:85:
                    de:94:04:f9:0c:2f:8c:61:57:c5:2d:5b:b8:fd:d9:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DC:9E:ED:04:59:6A:19:C2:9D:B2:51:0F:60:70:06:C7:D7:D5:C1
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230302e302f32332d3233203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:95:81:41:25:00:7d:55:fe:e7:37:67:ed:e8:75:f9:4b:
         e6:24:4b:ad:e4:9c:ba:65:44:2e:bb:d5:97:e0:9d:6b:97:cf:
         71:27:1e:91:81:37:6c:b7:86:0a:f8:0b:c7:5e:78:bc:15:2b:
         01:00:6a:61:04:d3:d1:93:dd:15:1f:41:05:80:34:42:5c:9b:
         20:8d:8a:2c:22:b1:6b:b8:66:35:fc:fc:f9:04:e8:f2:2a:a2:
         89:90:8b:cb:70:40:14:c0:e4:08:97:f7:3f:48:fe:6f:3b:20:
         7b:a8:46:78:ee:59:89:84:19:b8:2b:de:d8:e4:a3:e9:ba:6a:
         85:98:b7:e3:93:42:cb:74:a6:f7:a9:fc:96:25:22:c7:e9:17:
         6d:b6:98:fd:90:af:6f:81:43:d1:85:0a:01:7c:38:b9:00:07:
         b1:90:ac:f3:54:6d:4c:78:4a:1a:72:c6:3e:52:ab:7a:0f:a8:
         ac:0b:8e:c5:ba:c5:69:57:6c:cd:28:9a:da:d6:0a:71:95:37:
         6a:42:9c:ec:5c:c2:c4:d8:75:dc:d6:e6:24:83:b4:7b:35:ff:
         58:f0:8e:bf:d5:3d:ce:9d:f6:0e:a3:61:1d:e1:cb:d9:81:68:
         0d:90:cb:ef:16:56:50:ca:76:36:fd:45:3d:43:ec:41:47:74:
         db:0b:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org