Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/34352e3138352e3136382e302f32322d3234203d3e20323639333837.roa
File:                     34352e3138352e3136382e302f32322d3234203d3e20323639333837.roa (raw, json)
Hash identifier:          +jKkXrJ12YTlaWMhTN67HiO1aDkQdTyUGxBKX42x7uY=
Subject key identifier:   E2:83:B5:62:B8:96:2C:22:D5:E1:17:33:65:8E:7E:72:B5:7C:95:09
Certificate issuer:       /CN=D2663D15D203916F99C7C03EE3A816EFAD3F6BC3
Certificate serial:       61199ED474DB98B4828BB92BCC47C0E56FAA8ABA
Authority key identifier: D2:66:3D:15:D2:03:91:6F:99:C7:C0:3E:E3:A8:16:EF:AD:3F:6B:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/34352e3138352e3136382e302f32322d3234203d3e20323639333837.roa
Signing time:             Sun 09 Jul 2023 03:00:00 +0000
ROA not before:           Sun 09 Jul 2023 02:55:00 +0000
ROA not after:            Tue 09 Jul 2024 03:00:00 +0000
asID:                     269387
IP address blocks:        45.185.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:9e:d4:74:db:98:b4:82:8b:b9:2b:cc:47:c0:e5:6f:aa:8a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2663D15D203916F99C7C03EE3A816EFAD3F6BC3
        Validity
            Not Before: Jul  9 02:55:00 2023 GMT
            Not After : Jul  9 03:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:86:f5:12:d3:ff:5b:2a:16:fa:96:46:54:
                    eb:36:bc:bc:5c:a5:e2:99:23:de:64:4a:6c:0d:cd:
                    49:ce:bb:82:4c:d3:bf:a6:7b:b7:3a:0f:b3:51:e0:
                    1d:d2:f2:c9:3f:ed:e7:05:35:6d:a0:70:e7:98:ec:
                    57:d2:54:05:d4:9a:38:86:eb:8d:85:8b:a0:bd:f7:
                    2d:55:38:63:d8:43:dd:bc:49:95:85:94:fc:82:45:
                    8f:6e:4c:f6:5c:53:b7:1c:65:3a:fc:66:77:d7:d8:
                    11:5b:08:a8:eb:c7:9d:9d:5c:ce:3e:e9:43:58:9f:
                    3d:1f:f4:75:41:00:f7:18:5b:35:14:e7:8a:13:24:
                    aa:1d:71:21:e9:4d:12:46:18:89:92:49:95:21:f3:
                    b0:6d:c9:ca:8a:f4:8b:c4:4f:62:0a:80:13:fd:35:
                    2a:7e:32:b2:0b:c1:9e:be:40:50:cd:64:a9:11:86:
                    63:61:fa:c4:ae:63:6e:d8:34:75:6e:e7:41:d8:09:
                    d0:72:64:fb:35:1d:e1:b2:b3:30:37:91:df:45:6c:
                    a0:f3:31:01:90:a6:ac:d7:ca:7f:c0:2e:4d:cc:38:
                    04:77:e0:11:00:d6:fb:f1:3a:42:68:01:95:a7:ca:
                    b8:a6:a9:f2:8a:a9:03:26:a2:8b:9b:1b:12:fd:af:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:83:B5:62:B8:96:2C:22:D5:E1:17:33:65:8E:7E:72:B5:7C:95:09
            X509v3 Authority Key Identifier:
                keyid:D2:66:3D:15:D2:03:91:6F:99:C7:C0:3E:E3:A8:16:EF:AD:3F:6B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2663D15D203916F99C7C03EE3A816EFAD3F6BC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7BCFrztVKNksnNEZUWcEM8iFoYPhXbAtF3dA43N82wK/0/34352e3138352e3136382e302f32322d3234203d3e20323639333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:da:b6:b0:81:4a:34:c7:41:e4:cb:30:96:66:b3:4c:bf:59:
         ce:72:d6:84:19:8a:64:7f:b1:07:44:16:a4:c5:54:9d:d1:f5:
         80:9e:d1:2a:3e:13:16:b1:45:2b:7d:17:08:9a:4d:cd:6c:f5:
         6e:4d:0b:ae:87:3f:16:9d:5d:58:da:11:74:8b:fe:7e:c8:08:
         b8:ff:8b:7c:f2:b0:ef:e1:a0:1e:90:d5:ef:c5:b4:80:02:d3:
         05:15:76:e6:0a:91:82:5d:e1:37:64:3e:d5:1d:91:4d:61:03:
         93:7a:c2:11:8b:05:4f:d4:16:14:85:22:1b:b2:80:5a:89:e4:
         1f:54:c1:0a:7a:fe:99:d6:37:87:62:5b:d7:e4:77:e1:8b:f8:
         9c:54:a5:2c:e4:03:69:91:3f:a3:67:90:d3:33:c9:c2:2b:6e:
         f1:d1:c1:3c:98:8c:51:fd:2a:f4:d3:c4:d7:7e:da:e1:8a:7f:
         f1:43:a7:73:76:2e:9f:ae:80:43:04:db:7d:25:ef:d4:2b:c8:
         02:08:ad:83:e1:b0:3e:15:dc:94:53:5f:9d:c9:bf:e9:68:13:
         7c:21:8e:6a:ed:4c:0f:ca:8a:69:5e:ef:0e:50:71:e5:45:59:
         60:55:9f:f9:d8:56:e8:39:9d:95:82:e3:f0:56:b7:30:fa:a4:
         17:e7:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org