Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
File:                     34352e3136352e32302e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          wP1XiPE9COPRFwLfhH1NeWrx+23m+lwctiFKudpSkTI=
Subject key identifier:   4F:AA:A7:0F:87:13:76:FB:47:34:8F:1A:7A:36:25:03:60:9D:08:69
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       28A3072E86196F3D63ED0EB3580001074257B19C
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
Signing time:             Wed 10 Apr 2024 02:18:03 +0000
ROA not before:           Wed 10 Apr 2024 02:13:03 +0000
ROA not after:            Wed 09 Apr 2025 02:18:03 +0000
asID:                     263665
IP address blocks:        45.165.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a3:07:2e:86:19:6f:3d:63:ed:0e:b3:58:00:01:07:42:57:b1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr 10 02:13:03 2024 GMT
            Not After : Apr  9 02:18:03 2025 GMT
        Subject: CN=4FAAA70F871376FB47348F1A7A362503609D0869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:66:6c:72:95:18:23:fe:7b:0a:32:fa:08:
                    8a:76:c3:43:1e:df:96:6b:e5:ed:72:94:72:ea:f9:
                    9c:b3:3d:46:45:14:e6:c4:39:92:7f:39:d4:ea:38:
                    63:cc:53:57:9e:d5:90:60:14:f1:e7:f1:88:8d:b2:
                    a1:bf:9b:3b:ad:19:6f:7f:4d:94:f4:0b:bb:d5:6c:
                    39:fe:09:83:d8:87:df:bb:68:cc:18:bd:0b:17:d9:
                    dd:5e:91:18:2f:a9:42:10:ee:e1:39:5c:da:ed:c8:
                    01:7e:cf:f6:c8:39:a3:73:73:2a:05:4d:88:15:92:
                    10:2a:1a:c6:43:c2:08:eb:3e:9e:51:c1:d5:af:77:
                    40:0c:a0:01:00:52:93:c1:31:f2:19:95:58:44:61:
                    ea:0e:e5:8a:31:80:03:e8:1e:cd:85:10:f0:9b:d4:
                    70:56:a1:76:14:23:26:d0:83:52:62:ba:7f:cb:c6:
                    76:de:e2:7d:bb:0d:88:f1:1a:6a:34:7e:0e:d2:5a:
                    d4:88:74:6f:fc:16:c4:12:50:23:ec:2d:73:6e:f6:
                    b7:3f:35:e6:f4:9e:ef:71:50:a9:3c:7c:bd:46:b2:
                    74:4a:d1:f7:65:e6:01:d9:2a:12:e4:b1:c2:4d:7d:
                    57:2b:e4:46:9a:d3:0d:85:74:45:34:0b:27:4a:4f:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AA:A7:0F:87:13:76:FB:47:34:8F:1A:7A:36:25:03:60:9D:08:69
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:6f:68:23:da:51:01:35:db:92:78:39:ee:72:10:27:53:
         f7:a7:c3:9a:46:c2:5f:96:8a:98:b6:63:5d:a6:da:e6:17:33:
         f7:a5:c6:dd:55:e9:5e:93:f7:99:48:27:16:cd:af:19:ee:6d:
         65:29:73:12:e4:86:b8:bd:34:09:41:7c:b3:23:06:88:8b:a5:
         f7:73:eb:44:67:44:71:72:53:f5:55:e8:e9:5d:c8:49:8b:22:
         59:11:fd:b5:a1:ef:20:b1:04:fd:ec:b7:05:5a:c5:a9:27:3c:
         a9:3f:7d:b0:d1:0d:89:0d:91:06:d2:7b:e6:61:76:ac:84:2e:
         2f:ba:8a:d5:28:11:5e:2a:ef:27:73:41:d2:e3:d1:50:3c:b8:
         39:88:f4:31:5a:1d:c5:04:18:e1:1a:3c:26:c8:81:94:5e:77:
         a7:d0:e9:c6:25:f9:58:27:a5:19:da:ad:60:f6:3a:f3:a5:aa:
         11:77:2b:ff:18:a4:8c:8e:36:cf:e4:54:89:db:39:9b:db:7c:
         0c:31:72:07:9a:3f:9e:4f:94:87:08:df:10:5e:31:bc:ae:eb:
         fc:19:94:2e:ae:2b:a5:d4:21:cd:ba:e8:ee:ac:ad:5e:e8:72:
         ee:30:20:f8:a7:19:7c:c2:9f:a4:7a:2b:cf:49:25:0f:8f:a8:
         76:49:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org