Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          X0bgBNeawz0MHNpdS7OxR+xUpqI6xE5cjIaBJh4EGHQ=
Subject key identifier:   00:92:4E:ED:17:B8:2F:B1:DB:F9:01:D3:8A:10:EE:91:54:F9:3F:97
Certificate issuer:       /CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
Certificate serial:       6A59FFF1CC32EF83C48EC6DE557B077001C8378E
Authority key identifier: 1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa
Signing time:             Tue 29 Aug 2023 17:00:00 +0000
ROA not before:           Tue 29 Aug 2023 16:55:00 +0000
ROA not after:            Tue 27 Aug 2024 17:00:00 +0000
asID:                     269014
IP address blocks:        45.176.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:59:ff:f1:cc:32:ef:83:c4:8e:c6:de:55:7b:07:70:01:c8:37:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
        Validity
            Not Before: Aug 29 16:55:00 2023 GMT
            Not After : Aug 27 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:94:82:23:0a:19:d5:e0:b4:66:9f:1e:fd:
                    12:e6:c8:cf:4c:40:80:72:95:86:78:2e:fa:0e:0e:
                    f5:8e:04:fe:2c:e8:83:8d:a2:94:a0:7a:d0:b9:30:
                    5c:a1:52:02:4f:05:fb:d1:da:7e:ff:23:d5:22:c2:
                    61:e3:90:bc:01:ea:c4:cb:e9:cb:3e:69:a4:2e:62:
                    5d:80:28:2a:ba:2c:54:e6:d8:76:0e:be:75:c6:73:
                    23:41:23:40:ff:ea:db:d5:e9:59:44:ea:95:e9:a4:
                    fc:53:ed:a2:7a:14:ac:44:12:b1:b8:cf:04:1e:8e:
                    2d:a2:53:22:d1:e5:a3:42:e2:07:8f:53:10:cc:c5:
                    ff:1e:cf:7d:65:04:46:24:60:32:a0:13:a8:c6:d6:
                    fc:de:7c:55:26:93:67:d9:ca:40:6c:d2:d8:9c:dd:
                    b5:ea:ba:4a:da:65:af:f2:1d:74:05:36:e7:5c:60:
                    83:4b:75:47:4f:3a:10:e4:a3:6a:b2:16:d7:5d:89:
                    33:97:dd:f5:17:af:5a:4f:32:7a:d0:2b:ef:32:2a:
                    f7:19:63:3c:2e:a3:e6:ee:f8:4a:4a:f1:95:03:2f:
                    da:a7:9d:a0:de:d4:e3:83:d5:e2:2b:d2:20:65:4b:
                    87:92:65:87:ee:93:26:ed:8d:d0:e1:4c:8c:4a:e2:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:92:4E:ED:17:B8:2F:B1:DB:F9:01:D3:8A:10:EE:91:54:F9:3F:97
            X509v3 Authority Key Identifier:
                keyid:1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:05:5a:31:14:db:41:0e:42:69:55:f7:82:aa:1a:3c:13:e9:
         48:5f:af:c4:24:2d:16:2c:82:92:ac:8a:f8:a6:57:03:b2:83:
         81:ae:c6:2a:28:5d:29:29:43:6c:7e:a2:b6:ca:54:22:25:1c:
         f1:85:7f:98:ca:51:c8:12:c4:a0:5f:04:43:09:b7:07:d8:05:
         29:50:4c:6a:95:7c:be:f5:43:c6:21:36:0e:e5:9a:94:f7:cb:
         05:57:c9:1d:bb:46:36:ae:ad:55:99:8a:4f:cf:a7:a8:fa:71:
         02:85:61:0c:db:15:cd:ff:6b:ff:22:eb:6f:8d:9e:2d:7c:3f:
         13:62:1c:37:f5:4c:06:0d:5e:d9:f4:3a:23:34:59:36:57:ce:
         d7:f0:2b:85:71:fe:0c:81:dc:8f:64:9b:c4:a7:36:83:b8:87:
         4f:5d:5c:43:73:99:8b:e4:54:f6:26:b1:26:d4:60:16:cc:9f:
         c4:43:52:a4:57:66:b2:68:3e:45:4f:9a:72:b0:7f:49:84:b2:
         20:06:58:b7:f4:cb:b5:49:49:75:75:bc:8e:fa:d4:13:c4:22:
         72:90:d9:06:ba:14:bf:56:dc:ab:61:56:ad:ea:ff:5b:3d:eb:
         46:de:e7:d7:11:ec:8c:48:34:7d:74:cc:60:ca:fc:b0:11:29:
         97:f1:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org