Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134322e302f32342d3234203d3e20323639353332.roa
File:                     34352e3138382e3134322e302f32342d3234203d3e20323639353332.roa (raw, json)
Hash identifier:          4HXQCU0YAeY87V0QdK1QNcfHnhOCyuvPiPRls0DN9wI=
Subject key identifier:   2C:16:68:76:06:77:B1:B3:35:FD:A5:CC:16:8B:39:97:07:5A:3C:D1
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       73D3C603E9907222E6825FA72FC09A2325A9EB51
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134322e302f32342d3234203d3e20323639353332.roa
Signing time:             Sat 10 Sep 2022 21:00:01 +0000
ROA not before:           Sat 10 Sep 2022 20:55:01 +0000
ROA not after:            Sat 09 Sep 2023 21:00:01 +0000
asID:                     269532
IP address blocks:        45.188.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d3:c6:03:e9:90:72:22:e6:82:5f:a7:2f:c0:9a:23:25:a9:eb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Sep 10 20:55:01 2022 GMT
            Not After : Sep  9 21:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:02:fc:45:d2:94:a3:50:b8:d8:16:7b:69:
                    73:17:0a:0f:ae:76:4e:07:10:e9:06:99:a3:f9:ed:
                    3a:6e:fd:3e:2d:50:8c:64:a8:09:a0:54:f7:ad:99:
                    0a:d9:e4:99:35:a7:08:bb:3b:e5:06:12:9d:fc:73:
                    59:1e:c4:32:c9:ba:b2:06:ea:76:44:d6:20:48:2a:
                    ab:8a:47:fa:05:7c:86:b0:4b:90:83:df:22:19:39:
                    66:9e:e7:dc:35:2e:0e:8e:75:08:93:27:a5:55:b9:
                    58:5e:7d:af:dd:9d:3d:4c:12:ab:e9:b8:2f:8e:05:
                    d4:26:65:43:82:de:5c:48:47:32:64:aa:d1:69:47:
                    d8:9c:cb:6b:72:06:37:cf:d4:38:69:61:cb:5c:ea:
                    c5:dc:d0:46:6e:94:41:a2:11:66:9b:9e:32:18:aa:
                    ab:b2:51:d8:8c:49:15:40:63:04:f6:0f:7e:42:1b:
                    ef:e8:ce:3e:87:b4:5a:8f:cf:a0:f2:c8:19:db:3e:
                    33:aa:e9:cf:80:34:97:58:a6:8a:f1:56:e3:ae:09:
                    43:3d:ec:ea:d8:07:0a:7b:ae:34:eb:18:81:81:fd:
                    b9:de:2f:5d:ef:d8:68:32:93:c0:0c:69:46:64:ee:
                    f9:2f:cf:be:b2:8f:92:f6:df:b4:a2:e1:31:dc:81:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:16:68:76:06:77:B1:B3:35:FD:A5:CC:16:8B:39:97:07:5A:3C:D1
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134322e302f32342d3234203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:36:b9:15:cc:1f:7c:8f:9f:96:f3:3c:f0:0c:2e:62:86:f1:
         28:7b:e9:a7:68:88:dc:f8:97:b9:79:37:1d:07:99:72:5c:db:
         6f:dd:01:73:0c:27:b8:57:6e:12:13:08:8d:26:5b:b5:ee:f1:
         c5:38:a4:8e:07:a3:f8:43:0d:c4:f8:fe:01:41:07:e0:29:e9:
         39:66:ab:b6:ce:32:09:23:6b:d5:e5:c8:e4:0f:d8:f1:b4:b7:
         0c:3d:7c:8f:ce:06:1c:6f:d9:02:16:85:5a:47:b8:fc:68:59:
         c7:0f:56:ad:9e:8b:e8:2b:06:8a:71:cc:ba:d3:46:ac:34:4b:
         f3:f2:3a:4a:32:f6:52:e1:81:54:78:2c:5d:13:f7:1a:47:f4:
         e5:96:f9:69:bb:66:1a:e9:2a:fd:0d:bb:14:d4:75:19:a1:f1:
         87:bd:ad:91:8c:d6:05:0a:34:ec:a2:e2:b9:0e:47:1f:fa:c8:
         08:a2:c8:0d:dd:21:6d:39:52:3c:2a:e7:ad:11:03:af:24:b3:
         45:db:99:12:59:83:ab:a8:81:0a:34:f8:cf:d7:37:1e:3d:b2:
         08:a8:c9:eb:09:1a:ea:32:05:b0:93:bf:21:1b:79:97:b7:50:
         e6:fd:ad:af:28:26:e3:8a:2b:2a:ed:7f:0a:dc:15:5e:75:e2:
         b0:62:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org