Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132302e302f32322d3332203d3e20323638313534.roa
File:                     34352e3137302e3132302e302f32322d3332203d3e20323638313534.roa (raw, json)
Hash identifier:          H75pt61I1RCAl96mCbOvmF3+GePS+yKc8gHe6p405Rg=
Subject key identifier:   F9:83:C2:62:24:EC:FB:16:83:93:A9:84:80:CA:F8:19:92:65:7F:1D
Certificate issuer:       /CN=18A43826A65928B70C1A033867FABC5F6E4207C0
Certificate serial:       7CD91E0C0499A4B1697DCC8E448AAFCA7EC6A7C2
Authority key identifier: 18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132302e302f32322d3332203d3e20323638313534.roa
Signing time:             Sat 17 Feb 2024 06:23:53 +0000
ROA not before:           Sat 17 Feb 2024 06:18:53 +0000
ROA not after:            Sat 15 Feb 2025 06:23:53 +0000
asID:                     268154
IP address blocks:        45.170.120.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d9:1e:0c:04:99:a4:b1:69:7d:cc:8e:44:8a:af:ca:7e:c6:a7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A43826A65928B70C1A033867FABC5F6E4207C0
        Validity
            Not Before: Feb 17 06:18:53 2024 GMT
            Not After : Feb 15 06:23:53 2025 GMT
        Subject: CN=F983C26224ECFB168393A98480CAF81992657F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:69:92:0b:69:f0:b4:ba:b9:37:1e:6d:91:
                    1b:02:88:55:75:8e:e3:ad:29:5d:5d:c0:a0:41:ea:
                    bd:36:81:1a:32:da:00:a0:ff:9a:3b:18:44:15:f4:
                    44:ea:41:66:ed:6c:f1:05:f3:c0:81:c7:0a:7a:24:
                    7c:ab:1f:b2:75:62:51:54:06:46:03:1b:76:26:a0:
                    0e:d3:21:74:83:d6:e6:a8:d1:fe:ca:27:b6:62:80:
                    68:bc:b0:14:59:74:ee:bf:0a:53:3f:3f:89:6e:c3:
                    c9:32:1d:25:df:d2:f7:a4:19:e8:0b:82:12:cf:ff:
                    7f:13:89:6d:d2:66:05:51:c3:0a:8e:8a:03:6e:76:
                    49:95:08:45:a2:a6:dc:82:95:c9:19:1b:43:31:89:
                    70:94:d0:cd:8a:f7:fd:09:70:8b:46:97:8a:28:f3:
                    f8:72:5f:7a:c3:fd:41:7d:ea:2d:20:88:96:ea:b7:
                    c5:05:57:e9:dd:2c:1b:5f:2a:47:98:98:2e:1d:b6:
                    19:7d:85:db:1a:fb:86:a0:b4:e1:d2:10:60:94:42:
                    f8:c3:fb:28:56:dd:8d:ce:48:6f:89:59:69:b8:35:
                    9d:d5:6c:14:cb:5f:8a:05:26:a8:1e:60:12:0b:ee:
                    a1:bf:67:e3:b8:f8:a5:58:5d:82:18:f3:f1:4a:21:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:83:C2:62:24:EC:FB:16:83:93:A9:84:80:CA:F8:19:92:65:7F:1D
            X509v3 Authority Key Identifier:
                keyid:18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/18A43826A65928B70C1A033867FABC5F6E4207C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/34352e3137302e3132302e302f32322d3332203d3e20323638313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:1f:5d:03:c1:86:40:3d:91:69:53:26:27:85:0b:14:b3:d3:
         b0:07:92:14:08:fd:db:96:15:61:fd:b9:84:e3:85:f1:51:3e:
         d6:d8:95:0d:56:e4:39:2e:be:ce:b4:3b:fa:df:44:b9:c1:a8:
         c9:9b:e7:4d:b5:4b:2f:d2:98:78:f0:4d:19:78:55:e9:ce:10:
         64:a9:26:a8:c9:13:5f:0a:6a:01:ed:c5:4d:54:ef:cd:d2:fa:
         0c:1b:03:f2:a9:88:bb:46:d9:ae:ab:90:64:5d:2a:2d:26:59:
         63:b3:1b:b9:9a:39:1f:63:8d:73:e1:92:60:60:a1:a7:74:ef:
         c3:30:dd:34:75:19:67:b5:05:31:f6:63:59:8a:0f:a5:25:aa:
         76:ad:4c:18:45:11:ff:dd:80:7d:51:87:56:12:f7:b1:ac:50:
         33:ee:4e:a6:19:30:7b:22:9c:2f:8e:a0:8f:bf:8c:74:72:1f:
         d1:d5:ed:2c:ec:33:54:0a:47:79:61:a2:d9:cf:c5:e6:ee:e9:
         26:fb:1d:50:1c:3d:11:12:5b:76:5d:ed:16:fa:f7:ac:cb:d7:
         e4:a2:d5:3a:a4:fc:0c:89:55:be:86:85:cf:94:cb:d2:ba:54:
         e3:f7:e2:f4:a7:16:70:ef:cc:ce:79:1f:16:13:c8:8b:82:44:
         35:ad:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org