Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235322e302f32322d3234203d3e20323638383437.roa
File:                     34352e3137332e3235322e302f32322d3234203d3e20323638383437.roa (raw, json)
Hash identifier:          i/YR5G0GDfT4kymtWmqqNSuNPe5rH78qUb4pbAKvuaA=
Subject key identifier:   D7:F1:83:2C:DA:BA:AC:72:56:88:BF:CD:20:48:00:B6:36:7E:B9:3A
Certificate issuer:       /CN=07461AF10ECF1C93F0D86652694C336908EF8DE7
Certificate serial:       0A4F382E98D17EB93568EFE32A27C8036EC925DE
Authority key identifier: 07:46:1A:F1:0E:CF:1C:93:F0:D8:66:52:69:4C:33:69:08:EF:8D:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07461AF10ECF1C93F0D86652694C336908EF8DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235322e302f32322d3234203d3e20323638383437.roa
Signing time:             Fri 17 Nov 2023 18:15:01 +0000
ROA not before:           Fri 17 Nov 2023 18:10:01 +0000
ROA not after:            Fri 15 Nov 2024 18:15:01 +0000
asID:                     268847
IP address blocks:        45.173.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4f:38:2e:98:d1:7e:b9:35:68:ef:e3:2a:27:c8:03:6e:c9:25:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07461AF10ECF1C93F0D86652694C336908EF8DE7
        Validity
            Not Before: Nov 17 18:10:01 2023 GMT
            Not After : Nov 15 18:15:01 2024 GMT
        Subject: CN=D7F1832CDABAAC725688BFCD204800B6367EB93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7a:21:83:aa:fe:0a:4a:53:1f:21:3f:b2:98:
                    24:ec:13:fa:61:5b:5e:0c:dd:a3:8d:d1:3e:b0:ca:
                    7e:82:d0:44:a5:96:ef:f6:96:ad:fd:ec:e6:93:55:
                    f1:48:bf:b1:c6:6d:05:c5:1f:82:d7:20:1b:eb:dc:
                    00:d6:56:e5:6d:f7:d1:b1:dd:95:34:8d:4e:be:92:
                    d0:06:ec:fd:18:51:1e:41:9f:6f:07:c7:d7:1e:f9:
                    5a:ba:22:89:31:0c:ca:b0:e8:9c:f8:84:a8:f8:11:
                    f3:7b:c3:b0:98:cc:3f:26:b6:9a:3c:65:43:d9:0b:
                    cc:e6:0e:c5:f6:f4:a0:d6:de:fc:58:28:e0:ef:5f:
                    95:4a:39:cd:d0:4b:d7:61:1d:59:97:c5:f9:a2:5b:
                    4d:9c:46:aa:71:52:33:ef:19:9d:b0:21:a5:ef:35:
                    39:b2:56:c7:cd:6f:0f:8c:38:3a:1c:4e:d5:2b:70:
                    d5:f7:75:80:f3:c7:48:7c:dc:01:00:72:1e:8f:b1:
                    0e:d3:7f:cc:0c:f1:11:83:1d:68:63:36:20:c2:16:
                    07:73:bc:35:44:f8:f6:26:ef:43:e4:94:4d:d8:99:
                    a2:98:83:ea:d2:bf:8a:b0:da:73:79:54:23:05:c0:
                    66:9d:4e:c0:42:94:c7:0c:00:a5:c8:67:29:72:4b:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F1:83:2C:DA:BA:AC:72:56:88:BF:CD:20:48:00:B6:36:7E:B9:3A
            X509v3 Authority Key Identifier:
                keyid:07:46:1A:F1:0E:CF:1C:93:F0:D8:66:52:69:4C:33:69:08:EF:8D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/07461AF10ECF1C93F0D86652694C336908EF8DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07461AF10ECF1C93F0D86652694C336908EF8DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/0/34352e3137332e3235322e302f32322d3234203d3e20323638383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:ae:61:70:71:a8:c4:48:f9:e6:e8:51:a3:0d:60:8a:3a:
         c7:df:a0:5f:33:b0:59:c1:0a:44:0c:6a:36:76:11:e9:50:d3:
         24:93:1f:9d:70:64:a3:ad:1a:aa:aa:40:3b:d4:38:e0:98:21:
         aa:b5:53:f2:f4:be:59:7d:50:87:42:27:66:1f:88:8a:11:10:
         36:0d:8c:2c:ca:bf:dd:18:3b:c4:ee:c6:43:ff:6a:a5:c1:cb:
         1e:55:29:c3:23:c3:b4:c2:37:3f:9c:5b:e5:a4:41:a4:1d:25:
         c3:eb:6b:16:db:a2:48:24:12:d4:a2:23:1c:79:72:6f:ff:11:
         2b:76:a5:4b:0f:c1:58:7d:70:e0:9d:29:11:18:5b:0e:4b:77:
         13:29:7d:81:05:93:4f:27:c7:1f:5f:5f:0d:a7:10:29:7b:c5:
         94:f2:9b:b2:95:f3:c3:84:4e:40:28:1a:61:59:c8:b5:d8:13:
         63:16:10:21:4a:d7:61:8f:98:b9:1f:f3:be:85:d7:e1:c6:ae:
         4f:07:0e:01:b8:57:40:65:df:9b:aa:61:ba:8b:e8:0e:4a:95:
         1f:b3:1c:1b:a8:b3:69:17:77:19:23:f1:df:a1:67:60:9f:cf:
         99:45:c0:21:47:0b:82:ee:5b:97:74:42:d2:5a:08:8e:a4:0b:
         ac:c4:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org