Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/34352e3137332e3135362e302f32342d3332203d3e20323733343730.roa
File:                     34352e3137332e3135362e302f32342d3332203d3e20323733343730.roa (raw, json)
Hash identifier:          9svyrnfyZUo59VE04+lHIR9tdx73hipJ+bcW3N4zK4U=
Subject key identifier:   00:7F:26:8E:3D:C2:C1:40:4B:24:7C:B4:65:FA:5D:0E:FC:1C:C6:61
Certificate issuer:       /CN=135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8
Certificate serial:       76AE3283A539B16F672A77FF03E8251811F63E1A
Authority key identifier: 13:5C:D2:AC:F3:BF:40:24:A3:E6:5D:9A:4D:5D:CB:C6:DA:EB:D9:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/34352e3137332e3135362e302f32342d3332203d3e20323733343730.roa
Signing time:             Fri 31 May 2024 19:07:24 +0000
ROA not before:           Fri 31 May 2024 19:02:24 +0000
ROA not after:            Fri 30 May 2025 19:07:24 +0000
asID:                     273470
IP address blocks:        45.173.156.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ae:32:83:a5:39:b1:6f:67:2a:77:ff:03:e8:25:18:11:f6:3e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8
        Validity
            Not Before: May 31 19:02:24 2024 GMT
            Not After : May 30 19:07:24 2025 GMT
        Subject: CN=007F268E3DC2C1404B247CB465FA5D0EFC1CC661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:71:be:12:12:66:7c:39:d2:f7:23:07:c2:
                    65:15:50:a6:36:84:9e:48:8d:98:4b:82:8d:ff:75:
                    22:f0:24:d0:5d:98:a4:1b:18:12:2c:6a:80:52:6e:
                    05:c6:09:fd:a7:f0:95:6b:39:d6:d6:59:41:de:8a:
                    71:03:6b:45:b5:90:06:4a:7e:19:36:fa:9d:e7:b4:
                    16:7a:d0:9c:de:c2:1d:d1:a3:83:8c:e6:66:f3:bb:
                    d0:de:38:ee:b5:e6:52:d8:2c:26:52:58:22:89:0f:
                    e3:b8:8a:1a:cf:9c:f6:89:90:05:63:88:9c:8f:bb:
                    e7:17:63:44:2b:95:31:31:61:a4:d6:58:4c:9c:bc:
                    33:de:bd:1e:27:18:5d:fb:87:89:0a:8d:8e:68:5a:
                    be:bc:9a:88:7c:86:7e:0e:9b:4e:5d:e3:ee:f3:34:
                    7b:09:0a:aa:ab:54:68:67:6e:7a:bf:c6:da:e3:f2:
                    6d:a3:1f:3e:91:42:84:7b:ea:ec:02:93:85:9a:98:
                    8d:d9:f1:06:d6:07:64:20:40:92:98:00:dd:81:3e:
                    b6:77:07:b7:64:2e:3f:5b:68:dd:93:ef:11:7c:67:
                    ee:c3:4d:54:dc:f3:25:ed:13:8b:00:0c:71:74:ae:
                    80:09:f1:20:7d:c9:dd:ec:0e:99:91:90:17:6f:b1:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7F:26:8E:3D:C2:C1:40:4B:24:7C:B4:65:FA:5D:0E:FC:1C:C6:61
            X509v3 Authority Key Identifier:
                keyid:13:5C:D2:AC:F3:BF:40:24:A3:E6:5D:9A:4D:5D:CB:C6:DA:EB:D9:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135CD2ACF3BF4024A3E65D9A4D5DCBC6DAEBD9B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/34352e3137332e3135362e302f32342d3332203d3e20323733343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:e6:76:0e:db:9a:8c:68:10:0a:6f:de:8e:a9:48:a7:2d:67:
         c3:f4:f2:d3:00:96:ae:a4:83:7f:a1:d5:0d:6c:c2:ca:30:95:
         36:62:5c:e4:b0:45:48:16:51:26:f2:36:6b:c8:6a:28:51:90:
         55:5d:a5:8c:95:df:1c:f1:4e:ca:3c:81:18:61:1b:c3:42:4f:
         f3:46:9d:bb:1e:ff:2d:c5:57:c6:68:2f:33:db:67:43:d2:d9:
         54:cd:df:02:bd:5c:11:99:15:71:d6:28:1d:6c:2f:49:cb:1c:
         5d:69:63:09:22:a9:56:43:60:92:6a:69:01:98:b7:48:b3:2b:
         90:65:fa:0b:32:03:d6:f4:cc:44:57:35:8b:f5:c8:af:50:74:
         33:db:93:01:9f:b5:4a:61:66:d9:f0:d9:23:cc:ed:90:e1:f0:
         74:15:46:fe:a3:c2:e1:5a:9c:25:ee:97:18:c0:40:c3:2c:f9:
         7d:00:28:7b:55:31:3f:ba:81:f8:7f:dd:9e:3e:ea:6d:4c:1d:
         04:a6:cb:d1:c0:8a:e8:c6:2e:b9:1e:f6:e5:14:8f:f4:7e:5b:
         b4:57:73:da:e1:78:fc:8b:5e:c3:41:54:9a:bd:7e:8a:fd:d4:
         8f:8b:ad:f7:dc:50:fe:24:c1:9b:24:fa:31:95:b8:1a:ee:35:
         0c:2f:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:42 2024 by rpki-client on console-ams.rpki-client.org