Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/34352e372e3139382e302f32332d3233203d3e20323636363038.roa
File:                     34352e372e3139382e302f32332d3233203d3e20323636363038.roa (raw, json)
Hash identifier:          830iVfETO/8N316wqB7NAQbsJmdxvXHU+mXj+gZ/gDA=
Subject key identifier:   F4:0F:B1:CE:D3:2F:CC:7D:40:4E:BA:DF:78:8B:E6:77:5A:54:8E:2A
Certificate issuer:       /CN=CF178172195A182C594FB724DD7B684E9210DA90
Certificate serial:       0BE651C61259E42AED428A8A49D48511682536E0
Authority key identifier: CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/34352e372e3139382e302f32332d3233203d3e20323636363038.roa
Signing time:             Fri 27 Oct 2023 21:15:19 +0000
ROA not before:           Fri 27 Oct 2023 21:10:19 +0000
ROA not after:            Fri 25 Oct 2024 21:15:19 +0000
asID:                     266608
IP address blocks:        45.7.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e6:51:c6:12:59:e4:2a:ed:42:8a:8a:49:d4:85:11:68:25:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF178172195A182C594FB724DD7B684E9210DA90
        Validity
            Not Before: Oct 27 21:10:19 2023 GMT
            Not After : Oct 25 21:15:19 2024 GMT
        Subject: CN=F40FB1CED32FCC7D404EBADF788BE6775A548E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:05:d1:2f:ff:95:a1:0b:3d:7a:8e:e7:ec:
                    55:54:c8:14:5d:cb:55:8d:8b:43:f4:ab:d4:19:e5:
                    4f:86:94:aa:04:48:66:15:25:71:0a:00:02:27:b5:
                    87:56:6a:78:55:9a:6d:34:7b:3b:25:0e:0d:39:aa:
                    72:77:5f:50:56:8c:b2:72:09:dd:72:88:ad:aa:ee:
                    3f:81:cc:53:a3:a7:e6:16:ed:2d:e4:a1:fb:9f:58:
                    bb:06:f8:73:ff:a6:b4:62:49:64:26:25:1c:84:85:
                    22:b7:71:24:6d:c8:a5:62:0d:31:0a:cc:36:f1:4a:
                    82:65:14:9e:30:53:5b:ef:08:10:5e:2e:96:a5:83:
                    44:ad:c3:64:29:e3:90:76:80:3f:50:52:ca:87:28:
                    de:6c:71:5a:0b:07:c0:4e:a8:4b:06:89:e1:74:66:
                    5e:87:65:4b:0f:50:92:00:c3:5a:5a:99:04:60:e5:
                    73:79:18:9b:7a:35:f9:bd:aa:ad:92:97:b9:63:8a:
                    87:9c:6c:1a:27:bf:f2:01:c0:f6:c8:8f:64:db:a7:
                    2f:7f:60:55:18:91:5e:41:74:06:78:53:be:65:d7:
                    16:3b:0f:31:af:01:1d:55:14:35:6c:97:b2:32:a6:
                    5e:2d:2b:a0:4b:69:6c:43:25:06:67:82:19:6e:50:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0F:B1:CE:D3:2F:CC:7D:40:4E:BA:DF:78:8B:E6:77:5A:54:8E:2A
            X509v3 Authority Key Identifier:
                keyid:CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/34352e372e3139382e302f32332d3233203d3e20323636363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:77:10:d2:65:23:d9:0b:f5:2f:44:2e:83:04:d6:0f:16:e2:
         4e:37:60:4e:e1:ca:77:c0:aa:d6:c1:7e:f4:bc:54:2e:c8:13:
         0c:6c:e5:d2:b5:0c:f5:2f:20:23:9f:8f:b8:e7:7f:68:64:8b:
         f3:23:16:de:6e:9e:d9:2c:a3:4c:b5:90:9b:ea:0d:61:77:34:
         f6:6a:2c:08:96:cd:6c:da:21:81:1f:68:33:43:5b:5e:a7:b3:
         dc:cb:72:f7:7b:e9:99:e3:99:b0:0f:a8:63:ec:77:2b:f0:91:
         15:67:d0:12:aa:67:9d:b2:11:20:0b:55:dc:28:a0:10:d7:8b:
         c3:29:9a:bc:f6:0c:dc:78:07:78:1a:be:23:b4:c5:59:8d:86:
         80:f6:40:24:54:88:a1:c5:e5:98:95:54:96:d5:66:67:a2:0a:
         85:d7:68:27:8a:9e:27:70:01:c0:d0:9b:da:a3:47:50:1a:94:
         88:a2:10:2e:13:79:d3:2c:6d:5a:e1:17:36:bf:47:03:f5:54:
         99:fa:58:de:ca:00:42:a2:9c:7e:b6:e0:60:f5:11:73:13:92:
         8e:33:08:2e:97:0e:aa:8f:d3:bd:94:ec:70:cf:14:f0:97:8b:
         be:a3:87:55:d4:3b:f4:22:61:d4:07:87:42:89:b0:39:99:9f:
         71:5f:3d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org