Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa
File:                     34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (raw, json)
Hash identifier:          K59/ZzmnaBG9wMnFiLykqS0C8YjRXvuuDyMpq6oz4FY=
Subject key identifier:   C8:DE:97:34:14:F4:80:B3:E9:47:07:F0:4E:0E:7E:29:4A:A7:02:24
Certificate issuer:       /CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
Certificate serial:       7583D56DC9253B9F8862ACC22F5F11153FAB5894
Authority key identifier: 1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa
Signing time:             Tue 29 Aug 2023 17:00:00 +0000
ROA not before:           Tue 29 Aug 2023 16:55:00 +0000
ROA not after:            Tue 27 Aug 2024 17:00:00 +0000
asID:                     269014
IP address blocks:        45.176.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:83:d5:6d:c9:25:3b:9f:88:62:ac:c2:2f:5f:11:15:3f:ab:58:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
        Validity
            Not Before: Aug 29 16:55:00 2023 GMT
            Not After : Aug 27 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:3c:3b:5b:70:d8:45:24:be:e3:0e:32:c9:
                    3e:18:ff:0c:73:7e:56:af:03:71:45:1c:76:b9:8e:
                    cb:6a:1d:57:78:01:1f:be:b9:68:35:e8:68:67:c7:
                    e2:68:56:83:eb:42:31:95:5c:5d:de:92:20:a3:86:
                    d0:4b:6f:4a:f4:05:04:53:35:b6:5f:3a:88:7e:44:
                    6f:e1:cb:40:85:e9:37:cc:f2:1b:ed:74:e3:03:52:
                    33:01:0b:e9:f7:3b:60:b8:d1:3e:c1:64:dc:28:2a:
                    1e:b5:eb:e0:95:c7:99:b3:83:ad:f8:51:d3:09:96:
                    91:1f:00:a9:ca:f3:79:12:6e:b6:49:8d:99:c0:ca:
                    bb:d4:a9:21:2a:f7:53:4b:d5:6a:9b:55:d8:cb:2c:
                    98:86:bb:5c:65:a5:d5:63:11:ad:6c:46:95:b3:6f:
                    99:04:2e:b9:be:09:34:2f:2a:35:76:be:9b:f1:36:
                    f4:90:d5:19:bc:77:a6:bf:92:10:ff:86:47:5b:25:
                    f9:eb:9e:e3:26:cc:a5:40:b1:e3:f0:50:a6:3e:47:
                    8b:73:ea:c9:0a:67:ea:e6:6e:c9:71:04:d4:19:5b:
                    7e:b1:0b:1c:bc:57:85:3d:4c:2f:62:36:2f:62:7a:
                    2a:e3:eb:f7:8f:eb:1e:6d:a8:72:96:3a:78:8f:79:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DE:97:34:14:F4:80:B3:E9:47:07:F0:4E:0E:7E:29:4A:A7:02:24
            X509v3 Authority Key Identifier:
                keyid:1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:1c:6d:e1:0a:f1:50:c2:f1:89:d7:6f:3b:3e:15:ec:cc:d1:
         e1:1a:84:ea:fc:e8:bf:72:f7:9f:43:1e:ab:e0:cf:e8:8f:3f:
         6e:ab:80:e8:e0:17:ba:e3:7c:20:15:9c:11:3b:71:61:90:e1:
         a1:1c:04:c5:2d:43:7d:d3:28:16:97:97:65:27:77:6e:a0:8c:
         8a:75:d5:1e:8b:23:61:6a:d6:a5:1f:85:0d:5d:03:20:76:de:
         62:ff:45:8b:e8:3c:8b:5a:24:7d:d4:2e:ad:58:66:91:0d:f8:
         62:4f:eb:e5:5d:20:eb:f9:0b:7a:a1:b4:6b:57:15:dc:41:95:
         3e:bf:be:61:9a:d2:56:e0:22:8f:83:18:f4:b8:10:c3:90:72:
         21:64:58:dd:84:f3:03:50:17:e7:0d:23:97:b2:d2:36:af:df:
         4d:de:5a:f8:47:90:de:99:45:3d:d6:13:9d:bb:46:4c:df:16:
         5a:d6:ac:4b:50:36:3b:10:86:b9:d9:59:55:c9:83:d1:16:e2:
         f0:ef:28:21:e6:38:53:ba:66:81:f8:5e:9a:22:96:db:46:2e:
         82:fa:20:35:a7:4e:49:cf:28:0c:22:49:af:f8:a9:1a:da:29:
         f5:9f:82:30:53:29:b4:fc:6c:46:6d:08:1a:5a:31:15:60:cc:
         d5:c0:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org