Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/34352e3137372e36302e302f32322d3332203d3e20323639303331.roa
File:                     34352e3137372e36302e302f32322d3332203d3e20323639303331.roa (raw, json)
Hash identifier:          Sz4ESbJoh1MPsKIq3Z7RALFP9IjpS+UNzEG9Q2x1k3Y=
Subject key identifier:   22:49:A7:14:3A:FB:DA:61:3D:A0:17:74:BD:25:97:F3:D0:6C:4D:01
Certificate issuer:       /CN=81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC
Certificate serial:       3C7367CAE5A209C9A56C77533C152836F71F90F9
Authority key identifier: 81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/34352e3137372e36302e302f32322d3332203d3e20323639303331.roa
Signing time:             Mon 12 Feb 2024 14:37:04 +0000
ROA not before:           Mon 12 Feb 2024 14:32:04 +0000
ROA not after:            Mon 10 Feb 2025 14:37:04 +0000
asID:                     269031
IP address blocks:        45.177.60.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:73:67:ca:e5:a2:09:c9:a5:6c:77:53:3c:15:28:36:f7:1f:90:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC
        Validity
            Not Before: Feb 12 14:32:04 2024 GMT
            Not After : Feb 10 14:37:04 2025 GMT
        Subject: CN=2249A7143AFBDA613DA01774BD2597F3D06C4D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:3d:79:2f:d1:e3:38:a2:c3:c6:8a:4c:2e:
                    f3:67:49:7e:28:51:79:df:2d:92:91:77:37:67:3c:
                    b5:e7:e7:d7:38:db:b6:b6:a2:04:8e:13:0d:b5:3a:
                    9e:bf:fb:cb:06:b2:8c:3a:9e:0c:b9:b2:76:1b:c8:
                    29:62:a6:00:d5:7e:22:ad:4b:11:7d:42:0a:5d:e4:
                    cb:e3:53:cf:dc:bb:69:e0:c1:bc:df:48:79:aa:3c:
                    43:18:04:d1:f6:96:28:14:69:dc:c4:cd:0d:9a:41:
                    55:97:5d:de:31:48:16:3d:68:d0:9c:05:4a:80:86:
                    c8:d3:2c:3c:e7:b8:b2:63:54:ed:06:33:7c:8c:0f:
                    6d:be:ee:87:53:de:fd:4c:5a:96:f1:5e:ab:2b:77:
                    55:28:d1:34:36:6e:bc:23:51:77:31:db:22:85:9b:
                    87:81:88:9b:25:92:be:12:18:00:94:64:de:f5:73:
                    c3:22:7a:46:d2:02:01:29:f9:a1:4e:11:5e:72:35:
                    eb:21:9a:ee:e4:d0:67:f1:82:ce:08:65:f8:29:7a:
                    f6:05:01:50:f2:8a:5d:5b:fb:0b:04:7c:99:be:8f:
                    ed:8b:fd:9e:4b:2c:3c:8c:8d:e7:e6:5d:eb:e1:4e:
                    48:42:cd:d5:23:39:3a:da:83:99:46:cd:f1:4f:c0:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:49:A7:14:3A:FB:DA:61:3D:A0:17:74:BD:25:97:F3:D0:6C:4D:01
            X509v3 Authority Key Identifier:
                keyid:81:E0:C5:E7:A0:85:3F:16:47:9E:0F:54:54:AA:1C:DC:4F:53:59:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81E0C5E7A0853F16479E0F5454AA1CDC4F5359FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/34352e3137372e36302e302f32322d3332203d3e20323639303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:f7:cc:fc:07:64:35:37:f5:a6:5c:31:ba:20:f0:17:33:58:
         85:cb:d3:a3:e1:5d:3e:9c:76:e4:bf:b9:b5:31:85:6f:e9:60:
         33:8b:7d:ab:52:3f:63:0d:cc:e3:c2:85:6b:cb:f6:6a:2a:88:
         40:12:ea:2c:71:ed:5b:15:35:56:9f:b1:da:6b:60:1a:42:45:
         d9:9e:09:80:77:57:b5:c6:e7:11:05:44:6b:2d:a3:20:5a:c4:
         24:34:28:fe:90:c5:a7:a7:f9:90:72:64:68:ff:80:5f:76:07:
         a5:eb:08:67:74:ed:c5:a6:66:93:7c:e7:01:31:16:ba:26:42:
         b9:24:9e:43:1c:cb:eb:81:5a:d9:c3:7f:b5:53:88:7d:08:15:
         18:40:2f:4f:ce:db:2c:21:6a:2c:4b:9a:8e:d9:fc:aa:aa:4f:
         fc:16:ad:25:91:02:d3:1e:5a:58:30:e5:0b:70:f3:b2:6d:14:
         2a:7f:7b:ec:91:a6:2c:b4:2c:59:61:2c:bb:03:26:c7:44:96:
         62:20:a4:53:6e:db:37:5f:81:17:29:83:8d:e2:32:76:6f:ab:
         d5:32:b4:a7:6e:d7:ba:52:e6:34:c0:e6:90:c1:9b:e9:ab:a1:
         84:1b:b3:b3:e4:8a:66:00:6c:a5:36:d8:74:24:68:2f:1c:a2:
         2e:da:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org