Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/34352e3136322e3137322e302f32322d3234203d3e20323638353237.roa
File:                     34352e3136322e3137322e302f32322d3234203d3e20323638353237.roa (raw, json)
Hash identifier:          Yuf5e/B4oMfbxZLKXdR6PeOqq7IMMy4ZBdhW5zJbq8w=
Subject key identifier:   4B:8A:19:45:DC:02:0D:7E:E0:3A:6C:43:51:AE:A9:CA:68:21:31:72
Certificate issuer:       /CN=1F8D9307D6B304785DFC33543D60E8337F616CCB
Certificate serial:       6E9E4F682ADBDC3A1B1BC788A8B91E278A34F74E
Authority key identifier: 1F:8D:93:07:D6:B3:04:78:5D:FC:33:54:3D:60:E8:33:7F:61:6C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8D9307D6B304785DFC33543D60E8337F616CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/34352e3136322e3137322e302f32322d3234203d3e20323638353237.roa
Signing time:             Tue 01 Aug 2023 18:18:00 +0000
ROA not before:           Tue 01 Aug 2023 18:13:00 +0000
ROA not after:            Tue 30 Jul 2024 18:18:00 +0000
asID:                     268527
IP address blocks:        45.162.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9e:4f:68:2a:db:dc:3a:1b:1b:c7:88:a8:b9:1e:27:8a:34:f7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8D9307D6B304785DFC33543D60E8337F616CCB
        Validity
            Not Before: Aug  1 18:13:00 2023 GMT
            Not After : Jul 30 18:18:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:f7:57:98:34:64:33:ce:18:f0:48:c4:ad:
                    59:01:b7:ae:59:52:4b:97:05:55:9f:ee:99:0d:94:
                    6a:9c:15:63:db:60:7d:ea:2c:3a:1d:c5:89:48:85:
                    89:2e:cb:c3:74:5f:c0:b1:7e:88:74:58:b3:8f:b3:
                    f1:12:91:56:c4:e4:71:16:38:e2:64:a1:95:71:f4:
                    67:89:ed:0e:22:ba:cb:54:83:1e:8b:0e:bf:52:a4:
                    64:3d:f3:e8:b9:0b:06:a9:b9:1d:7d:d6:fb:45:c6:
                    f0:0a:6b:ff:4e:16:27:8d:d8:44:dd:f5:19:e2:0c:
                    53:8a:c6:d2:f0:38:ae:5e:44:40:7e:d3:62:ed:1f:
                    77:6c:e5:04:aa:83:f1:c2:98:b8:0c:dc:11:c1:49:
                    07:20:ce:ee:cf:96:17:01:c0:6b:19:07:00:67:0b:
                    02:6a:53:6f:0f:94:2e:b2:0d:a1:bd:d4:7e:f9:2a:
                    a2:71:80:e7:b4:a4:5e:a6:b3:4a:91:41:76:5f:3b:
                    42:a1:f3:d3:21:e8:8c:8c:25:1d:36:c1:20:f9:a4:
                    15:e1:07:46:f6:86:c4:e1:9f:42:eb:c2:d3:a7:a4:
                    8b:b6:80:0c:4d:84:ff:32:03:a8:a6:21:f0:cf:77:
                    7e:53:5c:3d:02:2b:12:e8:16:48:8f:a1:5a:8f:58:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8A:19:45:DC:02:0D:7E:E0:3A:6C:43:51:AE:A9:CA:68:21:31:72
            X509v3 Authority Key Identifier:
                keyid:1F:8D:93:07:D6:B3:04:78:5D:FC:33:54:3D:60:E8:33:7F:61:6C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/1F8D9307D6B304785DFC33543D60E8337F616CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8D9307D6B304785DFC33543D60E8337F616CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB3qcBDFeWcShX3dtY9JiSoPaYJFXtycgcE2mh9TkRBA/0/34352e3136322e3137322e302f32322d3234203d3e20323638353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:6d:51:79:c1:1e:28:58:ec:5e:95:ab:9e:5a:28:29:ad:
         f0:3c:c5:ab:d7:57:8d:48:9e:f3:e5:e6:62:c5:6f:74:c4:7c:
         90:a4:54:e1:69:d7:29:59:a3:e0:79:8b:9c:c4:72:ef:64:ca:
         e4:60:22:c2:3f:22:c7:dd:0f:b0:3b:9c:24:60:f4:9f:88:cf:
         d8:56:6d:ab:0b:d8:34:71:47:e1:bc:8d:2a:d8:7d:fd:25:4d:
         b8:51:ae:33:d4:cf:8f:2e:58:2f:7c:10:eb:a3:32:d5:09:83:
         04:97:f8:b3:86:d2:0b:89:5c:79:85:36:77:32:ca:68:95:10:
         8e:2d:83:57:93:df:5a:81:48:48:be:0c:60:a2:bc:73:6d:51:
         9b:b9:a8:f0:0b:3f:ef:18:25:80:e4:9a:3c:75:3b:d4:95:d4:
         36:eb:26:70:94:d1:69:1f:38:7f:fc:74:15:ce:b2:5f:df:7c:
         51:da:00:e2:9f:46:22:cc:fa:60:cd:2f:4b:c4:40:1d:cf:9b:
         1f:76:22:78:2a:d7:e0:58:c7:61:00:21:d1:8f:9e:1a:aa:52:
         e2:b5:39:0e:b1:9e:34:cf:70:52:79:dd:5d:73:4e:cc:8e:1a:
         46:2e:c1:65:ae:2e:ab:f2:b8:e2:63:1d:e8:56:7e:f2:2a:8e:
         1c:69:4d:c8
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUbp5PaCrb3DobG8eIqLkeJ4o0904wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY4RDkzMDdENkIzMDQ3ODVERkMzMzU0M0Q2MEU4MzM3
RjYxNkNDQjAeFw0yMzA4MDExODEzMDBaFw0yNDA3MzAxODE4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE5MUY3NTc5ODM0NjQzM0NF
MThGMDQ4QzRBRDU5MDFCN0FFNTk1MjRCOTcwNTU1OUZFRTk5MEQ5NDZBOUMxNTYz
REI2MDdERUEyQzNBMURDNTg5NDg4NTg5MkVDQkMzNzQ1RkMwQjE3RTg4NzQ1OEIz
OEZCM0YxMTI5MTU2QzRFNDcxMTYzOEUyNjRBMTk1NzFGNDY3ODlFRDBFMjJCQUNC
NTQ4MzFFOEIwRUJGNTJBNDY0M0RGM0U4QjkwQjA2QTlCOTFEN0RENkZCNDVDNkYw
MEE2QkZGNEUxNjI3OEREODQ0RERGNTE5RTIwQzUzOEFDNkQyRjAzOEFFNUU0NDQw
N0VEMzYyRUQxRjc3NkNFNTA0QUE4M0YxQzI5OEI4MENEQzExQzE0OTA3MjBDRUVF
Q0Y5NjE3MDFDMDZCMTkwNzAwNjcwQjAyNkE1MzZGMEY5NDJFQjIwREExQkRENDdF
RjkyQUEyNzE4MEU3QjRBNDVFQTZCMzRBOTE0MTc2NUYzQjQyQTFGM0QzMjFFODhD
OEMyNTFEMzZDMTIwRjlBNDE1RTEwNzQ2RjY4NkM0RTE5RjQyRUJDMkQzQTdBNDhC
QjY4MDBDNEQ4NEZGMzIwM0E4QTYyMUYwQ0Y3NzdFNTM1QzNEMDIyQjEyRTgxNjQ4
OEZBMTVBOEY1OEYxRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwZH3V5g0ZDPOGPBIxK1ZAbeuWVJLlwVVn+6ZDZRqnBVj22B96iw6
HcWJSIWJLsvDdF/AsX6IdFizj7PxEpFWxORxFjjiZKGVcfRnie0OIrrLVIMeiw6/
UqRkPfPouQsGqbkdfdb7RcbwCmv/ThYnjdhE3fUZ4gxTisbS8DiuXkRAftNi7R93
bOUEqoPxwpi4DNwRwUkHIM7uz5YXAcBrGQcAZwsCalNvD5Qusg2hvdR++SqicYDn
tKReprNKkUF2XztCofPTIeiMjCUdNsEg+aQV4QdG9obE4Z9C68LTp6SLtoAMTYT/
MgOopiHwz3d+U1w9AisS6BZIj6Faj1jx+QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FEuKGUXcAg1+4DpsQ1GuqcpoITFyMB8GA1UdIwQYMBaAFB+NkwfWswR4XfwzVD1g
6DN/YWzLMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RCM3FjQkRGZVdjU2hY
M2R0WTlKaVNvUGFZSkZYdHljZ2NFMm1oOVRrUkJBLzAvMUY4RDkzMDdENkIzMDQ3
ODVERkMzMzU0M0Q2MEU4MzM3RjYxNkNDQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xRjhEOTMwN0Q2QjMwNDc4NURGQzMzNTQzRDYwRTgzMzdGNjE2
Q0NCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EQjNxY0JERmVXY1NoWDNkdFk5
SmlTb1BhWUpGWHR5Y2djRTJtaDlUa1JCQS8wLzM0MzUyZTMxMzYzMjJlMzEzNzMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4MzUzMjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LaKsMA0GCSqGSIb3DQEBCwUAA4IBAQCEWm1RecEeKFjsXpWrnlooKa3wPMWr11eN
SJ7z5eZixW90xHyQpFThadcpWaPgeYucxHLvZMrkYCLCPyLH3Q+wO5wkYPSfiM/Y
Vm2rC9g0cUfhvI0q2H39JU24Ua4z1M+PLlgvfBDrozLVCYMEl/izhtILiVx5hTZ3
MspolRCOLYNXk99agUhIvgxgorxzbVGbuajwCz/vGCWA5Jo8dTvUldQ26yZwlNFp
Hzh//HQVzrJf33xR2gDin0YizPpgzS9LxEAdz5sfdiJ4KtfgWMdhACHRj54aqlLi
tTkOsZ40z3BSed1dc07MjhpGLsFlri6r8rjiYx3oVn7yKo4caU3I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org