Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa
File:                     3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa (raw, json)
Hash identifier:          yE94eDrIPwU5YJ7rE2kbGwcEwNf8A49okFTX/CpUFFY=
Subject key identifier:   7E:1A:41:25:45:19:95:32:27:0F:BB:18:43:42:5B:BE:AD:A3:03:E5
Certificate issuer:       /CN=8545ED852E6BA88695268C3F3DB0FF2B57345AAD
Certificate serial:       0894A33BBBE2BF9CC03FDD890F5D6F1909A00B35
Authority key identifier: 85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa
Signing time:             Wed 20 Mar 2024 18:13:03 +0000
ROA not before:           Wed 20 Mar 2024 18:08:03 +0000
ROA not after:            Wed 19 Mar 2025 18:13:03 +0000
asID:                     265011
IP address blocks:        170.84.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:94:a3:3b:bb:e2:bf:9c:c0:3f:dd:89:0f:5d:6f:19:09:a0:0b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8545ED852E6BA88695268C3F3DB0FF2B57345AAD
        Validity
            Not Before: Mar 20 18:08:03 2024 GMT
            Not After : Mar 19 18:13:03 2025 GMT
        Subject: CN=7E1A412545199532270FBB1843425BBEADA303E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:52:8c:4a:ed:39:86:fc:b8:25:38:9e:93:
                    cc:0f:8c:b9:c4:bb:74:f6:7a:00:48:37:63:c1:f9:
                    e5:0c:0d:f1:24:7f:06:72:a4:b5:3a:a6:c5:14:25:
                    dd:e0:c9:51:d6:44:f3:eb:d4:74:0c:fc:f9:26:d2:
                    f9:56:fe:16:65:c6:57:5c:61:38:3c:92:86:f6:aa:
                    c8:1b:03:6b:4a:a2:12:fa:bd:b6:79:e2:25:c0:2e:
                    56:5f:fe:57:81:1d:8d:5d:5d:e1:4b:b4:59:70:ef:
                    8c:cf:30:55:28:b0:7d:86:9a:f6:80:22:55:98:34:
                    e4:02:bb:6d:3c:da:f1:4f:f4:1b:a0:54:75:ae:78:
                    3f:1c:28:20:d8:89:c7:9c:32:a5:da:40:ba:90:71:
                    49:26:b2:b6:46:70:32:ee:ff:47:e0:31:cd:1f:fe:
                    32:14:1f:fd:47:1b:3c:ff:72:82:5e:61:c0:3c:60:
                    a7:f3:60:b9:29:71:a9:aa:eb:01:fb:8d:fe:72:59:
                    08:fc:bd:ed:1d:6a:32:fe:a8:e6:c6:05:88:42:4a:
                    e7:33:50:f8:bf:4a:07:a4:b3:fd:4e:5a:70:6c:c9:
                    67:86:52:f2:57:11:b3:7a:cb:12:c0:ec:47:af:d9:
                    d2:95:52:ee:2a:62:dc:33:93:89:ee:a6:c3:09:54:
                    fe:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1A:41:25:45:19:95:32:27:0F:BB:18:43:42:5B:BE:AD:A3:03:E5
            X509v3 Authority Key Identifier:
                keyid:85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:04:de:da:4a:f3:bd:b5:94:6f:2b:38:02:62:95:2e:2c:c6:
         4a:8c:f9:e4:74:55:74:88:e9:47:64:c6:dc:36:51:3f:7b:13:
         7c:7e:df:91:8c:cb:48:e4:80:5a:a7:ef:48:f7:7c:f8:de:5e:
         f1:8e:68:e9:00:3f:19:1b:9d:cd:ba:79:84:94:bb:44:19:ac:
         1c:e0:4e:ad:d6:0b:e4:26:5e:67:e8:b0:ae:93:2b:c6:71:11:
         d6:2b:c3:30:0d:8f:a8:7a:e1:47:5a:17:19:52:d8:18:5d:64:
         93:af:8d:9f:ab:cb:3a:6a:79:be:18:46:26:0c:3b:59:7c:0a:
         98:1f:7b:9e:6d:db:47:d0:0d:94:2f:4b:64:a2:dc:39:79:aa:
         6b:7c:53:a6:c9:f8:be:0d:09:fb:70:99:dd:62:92:d1:aa:34:
         4b:54:5a:5a:64:51:b2:90:dc:6d:1c:d0:44:10:ea:a0:c4:0d:
         76:8d:59:1a:82:ad:0a:44:b3:fd:f9:e3:7e:18:14:3a:0c:4d:
         33:da:f0:c6:f4:88:81:58:5e:d4:53:04:fd:19:e4:87:65:dc:
         44:04:d6:ee:e3:40:ff:37:32:06:18:64:b0:6f:93:34:5b:2a:
         67:ce:c1:51:a7:75:7b:bd:cf:0a:44:a4:c0:24:a7:99:3e:93:
         81:f9:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org