Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230322e302f32342d3234203d3e20323638313434.roa
File:                     34352e3136382e3230322e302f32342d3234203d3e20323638313434.roa (raw, json)
Hash identifier:          qs2KmFUKJJL14WkiLaoSb/Ih1LbW5PSTD98JgW5i7Hg=
Subject key identifier:   5E:12:F8:B8:00:3C:85:2D:94:8D:6D:94:A5:7E:CE:BC:CE:19:84:3A
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       0B4D5546E17D557F34DAEB18C8D5769779B42BAB
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230322e302f32342d3234203d3e20323638313434.roa
Signing time:             Sat 29 Jul 2023 14:19:50 +0000
ROA not before:           Sat 29 Jul 2023 14:14:50 +0000
ROA not after:            Sat 27 Jul 2024 14:19:50 +0000
asID:                     268144
IP address blocks:        45.168.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4d:55:46:e1:7d:55:7f:34:da:eb:18:c8:d5:76:97:79:b4:2b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jul 29 14:14:50 2023 GMT
            Not After : Jul 27 14:19:50 2024 GMT
        Subject: CN=3082010A0282010100AEF5817FCE5BBA5F840ADF5AC6FA65085106FFF33011CF24D875B9F2C18A3B109E54A73772D0D4F83AB9716C6463B62AEFD59072D55232482592181D145D72399065C26469057163E16D8D8ACAC1FF569AF03051446D684F84AAE99ADC777D0369DEFA63737DFBC0F3077F5B7B140D114BED62AB16D34CE7EA90AC185B0BC3EC73BF22F67D3F9BD1CC8873C1C19ACC4F5F0D6743F5D21DB89206766494B51E532545C4897B173AA44886B8D45246CD5A77D9D6F3018DD6A88E11198C49920B1DD1609B4737D691E88556089C481C01973FD1C3AA8728CC36402C5A15C8B53EFC2176BE70F5A5918793C2699C69E07CFD09E3491C3A1584EF1196E7CFDB842A5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:81:7f:ce:5b:ba:5f:84:0a:df:5a:c6:fa:
                    65:08:51:06:ff:f3:30:11:cf:24:d8:75:b9:f2:c1:
                    8a:3b:10:9e:54:a7:37:72:d0:d4:f8:3a:b9:71:6c:
                    64:63:b6:2a:ef:d5:90:72:d5:52:32:48:25:92:18:
                    1d:14:5d:72:39:90:65:c2:64:69:05:71:63:e1:6d:
                    8d:8a:ca:c1:ff:56:9a:f0:30:51:44:6d:68:4f:84:
                    aa:e9:9a:dc:77:7d:03:69:de:fa:63:73:7d:fb:c0:
                    f3:07:7f:5b:7b:14:0d:11:4b:ed:62:ab:16:d3:4c:
                    e7:ea:90:ac:18:5b:0b:c3:ec:73:bf:22:f6:7d:3f:
                    9b:d1:cc:88:73:c1:c1:9a:cc:4f:5f:0d:67:43:f5:
                    d2:1d:b8:92:06:76:64:94:b5:1e:53:25:45:c4:89:
                    7b:17:3a:a4:48:86:b8:d4:52:46:cd:5a:77:d9:d6:
                    f3:01:8d:d6:a8:8e:11:19:8c:49:92:0b:1d:d1:60:
                    9b:47:37:d6:91:e8:85:56:08:9c:48:1c:01:97:3f:
                    d1:c3:aa:87:28:cc:36:40:2c:5a:15:c8:b5:3e:fc:
                    21:76:be:70:f5:a5:91:87:93:c2:69:9c:69:e0:7c:
                    fd:09:e3:49:1c:3a:15:84:ef:11:96:e7:cf:db:84:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:12:F8:B8:00:3C:85:2D:94:8D:6D:94:A5:7E:CE:BC:CE:19:84:3A
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/34352e3136382e3230322e302f32342d3234203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:9d:82:40:c7:39:67:d4:02:64:90:b8:a9:6e:01:35:f3:
         1f:36:1c:46:f4:78:e1:85:aa:30:67:99:ca:46:f7:9f:e9:5c:
         a9:4e:3a:b6:30:4b:ed:44:4b:4c:c9:69:16:cc:b1:de:76:59:
         be:44:3c:6c:23:a8:81:1d:ef:5b:b4:3c:43:46:05:8b:5d:97:
         85:03:b4:4c:05:89:94:a3:3f:18:05:e1:cd:a5:d8:2f:17:4a:
         35:47:64:78:ce:b7:3f:58:b9:18:87:3e:e3:9e:fc:67:7d:a3:
         0a:a2:2b:a6:95:31:36:c3:1e:e4:aa:41:84:6b:d5:f4:f0:52:
         a6:a8:ca:d0:1b:1e:ff:20:c1:56:7b:23:27:45:1c:60:bd:88:
         3e:df:f0:0a:de:aa:57:6a:8d:a5:23:64:d3:50:e4:5a:35:15:
         ed:65:14:6e:13:c4:a7:6e:b7:4d:36:0a:bb:77:0c:7c:0e:31:
         97:12:b4:a6:0f:ae:c8:2b:60:65:c6:31:c2:e4:e8:36:c0:3c:
         62:0c:cc:fd:05:5b:67:75:e0:92:8c:7c:8c:28:f9:ac:fa:d6:
         53:d6:c6:ab:d4:34:c0:90:2c:7e:a3:92:3b:05:22:cc:fd:bd:
         25:bb:72:38:21:ec:68:ad:13:93:ff:8d:6d:89:4b:e8:77:75:
         5c:fb:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org