Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          eIm/QrFqe1dzsa4dFaZF23T1Ctkd29Iwn7xMrZyhKOM=
Subject key identifier:   5D:8D:0B:2E:AF:FA:99:31:A1:03:D4:FE:16:3A:ED:07:17:47:E5:85
Certificate issuer:       /CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
Certificate serial:       1EE0BEDC69417A8D9BC695ABDCA70749C6E9C5C5
Authority key identifier: 1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa
Signing time:             Tue 29 Aug 2023 17:00:00 +0000
ROA not before:           Tue 29 Aug 2023 16:55:00 +0000
ROA not after:            Tue 27 Aug 2024 17:00:00 +0000
asID:                     269014
IP address blocks:        45.176.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e0:be:dc:69:41:7a:8d:9b:c6:95:ab:dc:a7:07:49:c6:e9:c5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
        Validity
            Not Before: Aug 29 16:55:00 2023 GMT
            Not After : Aug 27 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:e4:ff:d7:36:30:24:d6:27:4c:c6:26:b9:
                    2e:2c:32:18:3f:e6:c0:38:98:ab:93:a9:ec:77:72:
                    7a:ab:fa:6e:42:ab:88:8e:d4:88:1c:ca:92:da:f8:
                    3d:62:d1:50:bc:ff:3a:f8:4f:c8:8e:a4:f2:fe:c9:
                    fb:93:e7:65:93:a7:40:f5:2a:0e:8c:48:87:67:61:
                    a9:11:61:0f:67:19:69:fb:99:2f:da:ed:af:26:79:
                    70:58:8e:c9:8d:cc:9d:0e:f5:de:5c:e9:41:04:1d:
                    2c:55:93:40:8e:d1:13:26:1b:67:cd:47:b7:a8:1e:
                    55:0c:58:a4:27:0e:51:33:56:3f:bc:fc:ee:78:36:
                    d5:bc:d9:6c:c7:2e:00:66:90:9b:e6:6a:72:09:de:
                    3a:7d:a8:a4:9f:7e:de:81:e3:f7:17:71:16:a8:61:
                    85:6b:f5:e2:fc:4b:30:dd:06:9c:44:4d:a2:30:13:
                    4c:1a:d7:d4:6a:2e:ac:b9:88:9c:ed:ff:1d:ef:09:
                    95:c2:47:2d:e7:6f:08:e7:da:f7:ad:f8:52:87:fd:
                    ef:f2:df:7b:f7:29:f2:53:20:6d:5b:69:4b:f5:64:
                    28:d1:ba:40:b8:6f:9c:c4:e2:6c:25:7c:40:f6:e2:
                    a1:aa:85:8b:4e:a2:11:37:0a:48:50:8f:3e:95:17:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8D:0B:2E:AF:FA:99:31:A1:03:D4:FE:16:3A:ED:07:17:47:E5:85
            X509v3 Authority Key Identifier:
                keyid:1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:d6:6d:05:1e:19:76:91:a0:1c:e8:54:b6:22:25:61:84:0d:
         b7:e1:f2:64:4c:d5:d7:76:14:16:e5:c8:c1:53:93:32:69:1b:
         9d:9a:ae:98:4f:91:df:00:e9:ae:10:d3:df:4b:cc:54:c6:e0:
         e8:2f:d6:34:ff:81:a8:3f:6f:7e:1a:dc:f2:47:06:eb:ed:4c:
         bf:59:e1:5f:03:cf:18:ed:b9:66:6b:1c:30:c5:6a:0e:55:72:
         4f:68:a7:4e:42:be:71:7c:35:b2:58:08:98:e1:df:81:59:b2:
         e7:5b:0f:3b:6a:f2:17:0a:32:f6:62:98:09:2e:ac:84:86:92:
         cb:a6:d4:ce:2b:da:2f:83:75:c3:75:b6:c3:f1:20:f3:bd:41:
         d6:a7:e1:b9:e9:88:f0:1d:97:bf:c7:a3:33:21:f1:df:4e:56:
         bb:4b:2b:22:3f:03:b8:9f:1e:9c:3e:09:66:f5:5b:b0:ea:f7:
         62:33:6e:87:ff:8f:1a:55:86:b0:27:d2:1b:a9:92:70:60:a6:
         02:78:4c:fb:67:76:74:0f:57:1c:0b:0c:99:d5:b7:cf:9c:11:
         da:78:69:74:bf:60:cb:8b:5d:d2:2a:1f:5e:fb:e6:4f:a4:f2:
         bf:ec:a8:ee:f4:93:09:51:26:eb:e3:49:bd:11:a5:63:f2:2c:
         ec:ce:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org