Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa
File:                     34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa (raw, json)
Hash identifier:          G3Ra8DHz+EIosWXNMPDnKkdVkIuA/DtAHLVxEFM7t2k=
Subject key identifier:   57:79:65:AA:CD:64:4C:A3:E2:96:C8:24:16:A8:ED:DA:F3:C9:B4:D7
Certificate issuer:       /CN=16891515D0732DB1B361B42718F50E035993171B
Certificate serial:       6CD68441DBD13A39018CF1B4EB58D1E59AFE1161
Authority key identifier: 16:89:15:15:D0:73:2D:B1:B3:61:B4:27:18:F5:0E:03:59:93:17:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16891515D0732DB1B361B42718F50E035993171B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa
Signing time:             Fri 17 Nov 2023 19:15:04 +0000
ROA not before:           Fri 17 Nov 2023 19:10:04 +0000
ROA not after:            Fri 15 Nov 2024 19:15:04 +0000
asID:                     267163
IP address blocks:        45.230.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d6:84:41:db:d1:3a:39:01:8c:f1:b4:eb:58:d1:e5:9a:fe:11:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16891515D0732DB1B361B42718F50E035993171B
        Validity
            Not Before: Nov 17 19:10:04 2023 GMT
            Not After : Nov 15 19:15:04 2024 GMT
        Subject: CN=577965AACD644CA3E296C82416A8EDDAF3C9B4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:03:fa:a1:52:4c:f3:26:a1:5c:fb:f9:25:
                    c7:39:f1:c7:3d:b2:b0:dc:8d:0c:47:35:5a:e2:66:
                    8f:e2:53:fd:5d:81:8e:e0:67:65:26:e6:38:3e:d1:
                    0c:7c:11:a1:e7:c2:93:24:4e:8a:54:06:db:c5:e5:
                    5e:f2:b7:a9:8b:1a:2e:b5:78:d0:96:c9:72:36:c5:
                    44:d5:b7:e5:f1:8c:ee:00:86:85:e4:7c:ba:d0:c8:
                    d7:91:d7:b4:ed:a4:bb:b4:cc:e9:91:c8:9c:c7:35:
                    6e:a5:cc:be:21:de:04:d1:fd:b9:c2:37:f6:20:c5:
                    91:7c:f7:72:13:82:f0:41:ca:d8:6c:10:57:dc:8a:
                    34:58:4f:e4:82:60:31:92:7c:f6:d8:2d:51:0a:51:
                    eb:2f:72:97:46:6e:6d:f6:10:82:bc:e6:3b:f7:d8:
                    81:f3:d4:bc:e8:4d:a2:74:83:b5:39:10:9a:90:cc:
                    b1:6a:39:9d:a7:83:4a:80:1b:44:00:08:60:c0:0a:
                    d8:12:1f:95:11:c4:a3:4d:fd:c1:e2:ee:2e:4f:15:
                    f8:7f:bb:2d:ed:28:f8:cc:a6:4b:f7:aa:61:ba:91:
                    45:ec:f6:92:6d:33:d0:33:bf:c8:29:c6:4b:7d:7b:
                    78:11:25:ca:d9:79:83:ed:c3:5f:81:02:92:9f:bf:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:79:65:AA:CD:64:4C:A3:E2:96:C8:24:16:A8:ED:DA:F3:C9:B4:D7
            X509v3 Authority Key Identifier:
                keyid:16:89:15:15:D0:73:2D:B1:B3:61:B4:27:18:F5:0E:03:59:93:17:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/16891515D0732DB1B361B42718F50E035993171B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16891515D0732DB1B361B42718F50E035993171B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/0/34352e3233302e3134342e302f32322d3234203d3e20323637313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:51:20:8d:6c:ba:b6:93:2d:1e:40:22:cf:f8:80:14:65:ad:
         f2:d8:f8:cc:a9:72:7d:20:a1:73:e7:2a:b3:aa:76:cc:99:2f:
         ee:70:ec:90:5c:e2:df:3b:84:bc:58:0c:29:da:0f:1b:c2:6c:
         d3:8e:5b:1a:cf:58:cf:7e:6a:bb:44:ed:ac:4a:a5:a1:89:bb:
         a8:d1:f3:87:21:bb:14:ab:b8:91:dc:39:b8:87:b6:fc:83:7d:
         f7:9c:90:56:80:4c:29:52:1e:66:4e:42:95:36:82:79:68:c6:
         ee:fc:51:47:79:47:74:6f:3c:f6:41:99:b4:b2:6d:31:79:c9:
         d0:b3:57:e8:38:d5:2c:44:e3:88:8c:db:ce:84:51:e0:2c:23:
         2b:40:ee:17:2f:e8:4a:eb:b8:a9:92:48:2f:66:71:1f:46:76:
         43:cd:65:aa:9d:8b:b4:05:8c:5a:e3:d1:04:e5:0d:ab:41:4b:
         2e:0c:90:cd:d2:be:96:a3:fd:6a:0c:d9:32:bd:66:67:16:61:
         31:b0:b7:86:8e:f6:64:1f:68:d9:30:b6:a0:25:7f:82:6b:ad:
         ff:68:9d:db:a5:2b:47:41:56:0d:7d:59:e0:4e:88:14:cc:e4:
         d7:43:ba:03:55:bc:28:19:6f:e8:bf:30:4b:ca:4f:7a:b6:be:
         14:6d:62:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org