Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138372e302f32342d3234203d3e20323638393933.roa
File:                     34352e3137372e3138372e302f32342d3234203d3e20323638393933.roa (raw, json)
Hash identifier:          nGUnuc6ri4OlepAYl3g/+zrcdNWuxlWOmSTgSDOT8Oc=
Subject key identifier:   22:CA:71:B4:4F:E3:49:42:60:28:CB:90:8F:E9:67:8D:71:D4:C8:BA
Certificate issuer:       /CN=A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529
Certificate serial:       49982ACD499EF0F40059B49E1615591D8DEFB64F
Authority key identifier: A0:D7:66:0A:3C:83:EB:FF:AE:77:D7:07:A6:61:DA:8C:4D:4F:E5:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138372e302f32342d3234203d3e20323638393933.roa
Signing time:             Tue 14 Feb 2023 12:15:55 +0000
ROA not before:           Tue 14 Feb 2023 12:10:55 +0000
ROA not after:            Tue 13 Feb 2024 12:15:55 +0000
asID:                     268993
IP address blocks:        45.177.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:98:2a:cd:49:9e:f0:f4:00:59:b4:9e:16:15:59:1d:8d:ef:b6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529
        Validity
            Not Before: Feb 14 12:10:55 2023 GMT
            Not After : Feb 13 12:15:55 2024 GMT
        Subject: CN=22CA71B44FE349426028CB908FE9678D71D4C8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:a9:ba:99:0a:91:d8:9e:fe:23:34:ad:f8:
                    ea:02:d1:dd:8d:f1:07:12:c6:4f:f5:c0:13:dc:bd:
                    06:00:50:9f:88:2e:2f:fb:17:c2:84:ba:f4:47:e7:
                    b9:11:4e:eb:34:de:26:da:63:93:9b:56:4f:db:41:
                    f0:d1:dc:64:35:c4:30:ff:36:c1:1d:7c:82:6a:9d:
                    33:f7:67:22:26:22:d3:40:e7:3f:00:d8:d7:78:90:
                    a8:a6:33:cb:71:e3:80:0d:78:28:31:3c:bd:9b:bc:
                    ec:4e:fb:dd:0d:cc:55:a9:09:54:e8:1f:b2:2d:bc:
                    48:27:8f:a7:99:eb:af:ee:c5:85:ac:be:fd:47:15:
                    75:7d:57:80:11:eb:a6:01:13:41:18:cd:ab:e3:f4:
                    06:28:2a:ba:d5:bf:c7:3b:ee:e3:84:e4:33:aa:bc:
                    ca:04:9e:58:f2:44:6c:e2:2d:6d:40:7c:4d:9e:38:
                    57:dd:0c:97:13:49:0a:3b:06:9e:19:9f:92:35:4b:
                    9d:46:0c:97:05:38:d7:3c:e9:91:8f:f4:eb:30:d5:
                    96:9d:8a:2b:73:ab:68:d6:6d:e2:d2:af:64:b2:7d:
                    77:8e:0b:a2:67:ce:b6:03:67:f9:4b:88:0a:f9:14:
                    7a:57:ee:c4:1e:9f:65:b1:2c:06:cd:62:18:dc:97:
                    8a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CA:71:B4:4F:E3:49:42:60:28:CB:90:8F:E9:67:8D:71:D4:C8:BA
            X509v3 Authority Key Identifier:
                keyid:A0:D7:66:0A:3C:83:EB:FF:AE:77:D7:07:A6:61:DA:8C:4D:4F:E5:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/34352e3137372e3138372e302f32342d3234203d3e20323638393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:f9:1c:f1:1b:e1:a1:45:26:a4:ee:44:e8:b7:75:5e:2f:
         b9:30:b1:0c:79:34:fb:2e:2c:8a:c3:1a:b8:26:3c:68:6c:02:
         b8:af:f0:bb:0d:09:0e:d3:aa:0b:e3:ef:f7:73:cf:5f:f3:4c:
         45:44:e0:41:4c:eb:ec:09:ac:42:2c:0f:29:43:e4:fa:ea:5a:
         28:32:8c:5e:fd:90:9e:5d:38:38:21:22:e9:22:c5:01:40:2d:
         fa:19:a0:83:7b:72:96:85:5c:0b:20:a2:52:85:74:85:24:7a:
         43:a9:8e:59:d4:66:33:3c:81:75:15:cd:c6:83:f2:78:d6:d5:
         2c:b9:3a:31:0f:fb:1d:03:88:34:36:eb:b5:dd:ef:c6:07:e2:
         37:bf:8a:12:49:00:be:f2:62:ec:da:4f:5f:ae:4c:5f:e1:55:
         f9:d2:b8:53:f4:a6:ce:c4:ea:d5:03:f6:71:16:f6:86:f2:1b:
         21:93:cd:45:d4:8f:e2:d4:6b:03:e7:33:81:bf:2c:4e:50:93:
         c2:79:8e:e5:80:a2:f0:00:80:13:39:75:05:40:2e:91:91:bd:
         2e:24:36:9a:c3:12:c1:86:f2:05:27:ef:98:e8:81:e7:14:90:
         05:a6:3c:45:9a:a2:9e:a6:6d:e8:e5:b7:69:62:51:24:d3:5f:
         eb:40:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org