Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139362e302f32322d3234203d3e20323637333935.roa
File:                     34352e3233332e3139362e302f32322d3234203d3e20323637333935.roa (raw, json)
Hash identifier:          qmZVDXiC0N20J/np3cKoJCvmKkm2p004vWOXI7AmEGY=
Subject key identifier:   9C:48:77:AB:80:05:29:5E:4F:93:E7:C1:F1:87:82:5B:9E:7B:2F:E4
Certificate issuer:       /CN=FCC7A10CD64B84116220258C164688796EE17437
Certificate serial:       739115E1E9E8C262499483267F65A87FCE0B118B
Authority key identifier: FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139362e302f32322d3234203d3e20323637333935.roa
Signing time:             Wed 10 Apr 2024 13:16:46 +0000
ROA not before:           Wed 10 Apr 2024 13:11:46 +0000
ROA not after:            Wed 09 Apr 2025 13:16:46 +0000
asID:                     267395
IP address blocks:        45.233.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:91:15:e1:e9:e8:c2:62:49:94:83:26:7f:65:a8:7f:ce:0b:11:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC7A10CD64B84116220258C164688796EE17437
        Validity
            Not Before: Apr 10 13:11:46 2024 GMT
            Not After : Apr  9 13:16:46 2025 GMT
        Subject: CN=9C4877AB8005295E4F93E7C1F187825B9E7B2FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2c:04:b0:13:49:87:a0:be:5c:14:c0:e7:91:
                    6f:3f:68:85:e7:09:02:97:cd:8a:8f:42:66:b3:19:
                    01:aa:2f:48:1a:d7:7a:ab:bc:d8:a8:91:70:56:4a:
                    58:dd:19:1b:36:ff:2c:87:bf:6d:40:f5:97:59:a4:
                    44:7a:d1:75:c0:b8:55:e7:c1:a8:80:c9:c9:f8:94:
                    b7:b1:69:c9:b8:ec:b5:ad:13:5c:1b:d4:01:7f:2b:
                    b0:81:cd:12:08:b9:91:6a:1d:3b:5c:9b:91:b0:87:
                    a9:ee:a7:a4:78:49:f2:0e:bd:ec:c3:1d:a0:b7:46:
                    bb:3c:b7:1a:46:15:30:c5:fc:56:ad:4e:d0:9c:92:
                    5b:2f:70:e9:f6:e3:ed:49:b8:53:0d:32:7d:6b:58:
                    73:f5:36:2d:69:17:d7:63:f2:c0:e3:60:8c:76:f0:
                    9e:c6:7c:8c:8f:ac:cb:80:44:b0:22:04:58:18:e3:
                    f4:f4:a3:bf:dd:6a:7d:26:cb:79:a9:36:1d:9f:43:
                    80:47:1b:b8:f9:d9:06:5f:61:8a:5c:5d:a5:c3:05:
                    97:3f:dc:dd:27:dc:a8:df:8f:e5:9e:0b:75:5b:b7:
                    cb:43:61:cc:64:b8:6e:7f:24:2a:7f:e0:ab:f1:ee:
                    3d:ca:53:5c:46:6f:8c:4a:8e:30:ac:90:9c:51:f5:
                    22:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:48:77:AB:80:05:29:5E:4F:93:E7:C1:F1:87:82:5B:9E:7B:2F:E4
            X509v3 Authority Key Identifier:
                keyid:FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139362e302f32322d3234203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:d2:4e:d9:3a:38:d9:a5:cf:3b:ac:dc:76:06:55:4c:d7:
         14:e7:61:98:23:62:c0:04:51:6d:59:99:32:9b:04:1c:38:d0:
         a8:19:e3:b2:eb:ea:e7:a4:b8:1c:d6:6e:5f:63:b6:2e:57:90:
         49:6f:bf:37:24:31:56:70:3d:c4:b2:23:ff:3e:0c:6e:ca:31:
         8a:4b:f5:7b:7c:92:5b:d2:9a:14:7d:4d:98:61:c6:e2:6c:a6:
         ca:10:06:c7:ec:76:fd:0f:58:47:a5:d4:56:85:60:bb:71:56:
         99:c0:c7:12:f4:9a:39:e3:8e:04:00:08:11:c1:10:67:a2:ab:
         cc:bc:e1:b5:ec:c7:5b:94:f2:ff:4e:1c:9f:d8:a3:f3:33:32:
         b3:5f:38:19:66:eb:d4:b4:16:df:51:99:a3:66:54:9c:da:e4:
         74:59:28:50:97:f7:a2:04:45:37:a0:8f:27:f9:6e:26:7b:16:
         3e:41:78:bd:1b:83:d4:79:42:09:13:02:e2:fa:0e:c4:cc:6a:
         30:45:1b:80:72:a7:5f:4a:e7:2a:a1:35:ef:48:f2:ed:e9:72:
         2a:35:23:70:ac:09:98:cd:4b:b5:fa:0c:4c:dc:92:b3:80:5f:
         c9:23:e5:ea:c5:5e:7e:bc:77:84:03:45:63:a3:4b:ad:46:21:
         19:f4:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org