Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132342e302f32332d3233203d3e20323638373030.roa
File:                     34352e3136352e3132342e302f32332d3233203d3e20323638373030.roa (raw, json)
Hash identifier:          2YsIXPEX1GV6aO9IibsLagl4G0UaYicuy9uqAVHCamg=
Subject key identifier:   17:11:BF:BF:6F:66:1C:C4:CE:42:8B:9C:86:C7:1B:CB:3A:DB:0B:AF
Certificate issuer:       /CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
Certificate serial:       25B187D21A632BB8281D4BF58F9E0C7692F9121C
Authority key identifier: 07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132342e302f32332d3233203d3e20323638373030.roa
Signing time:             Fri 12 Apr 2024 17:00:00 +0000
ROA not before:           Fri 12 Apr 2024 16:55:00 +0000
ROA not after:            Fri 11 Apr 2025 17:00:00 +0000
asID:                     268700
IP address blocks:        45.165.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b1:87:d2:1a:63:2b:b8:28:1d:4b:f5:8f:9e:0c:76:92:f9:12:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
        Validity
            Not Before: Apr 12 16:55:00 2024 GMT
            Not After : Apr 11 17:00:00 2025 GMT
        Subject: CN=3082010A0282010100D2788FDFDE162483C8734AA252E4926480F49A5952389AA7553F23C26B5D0FC8869587DA6B2ECFF7C8DAF848A3D21FA3D4F9A208FEE0AC9DF5B9BA6E9725E6E3F4FE06E0166E9415C815FA701158EF4856BAE3210983F0714B2C08C0FC0C3BD5C6F0B7BC0454CA8F2C50ED8D7220A510F20C718560C434D25DFC063CFDB9F8B765264BB5DB899A30FD864AFEDFC54C577F09E22E9D031D7E2CAB6B71528A7A016E020AA0731E5ACB495589DC0A725D603FDA25D51983E69995C6955AB9539CA1C401EE745F8A29EB18FA27CD64D5195664C9FEE00FD7A572AFB5DE1CD14099C6BE74DD8C4CD43A388C14753AAA79B5B185EFB944ACE66B098F351C709DC0158F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:8f:df:de:16:24:83:c8:73:4a:a2:52:e4:
                    92:64:80:f4:9a:59:52:38:9a:a7:55:3f:23:c2:6b:
                    5d:0f:c8:86:95:87:da:6b:2e:cf:f7:c8:da:f8:48:
                    a3:d2:1f:a3:d4:f9:a2:08:fe:e0:ac:9d:f5:b9:ba:
                    6e:97:25:e6:e3:f4:fe:06:e0:16:6e:94:15:c8:15:
                    fa:70:11:58:ef:48:56:ba:e3:21:09:83:f0:71:4b:
                    2c:08:c0:fc:0c:3b:d5:c6:f0:b7:bc:04:54:ca:8f:
                    2c:50:ed:8d:72:20:a5:10:f2:0c:71:85:60:c4:34:
                    d2:5d:fc:06:3c:fd:b9:f8:b7:65:26:4b:b5:db:89:
                    9a:30:fd:86:4a:fe:df:c5:4c:57:7f:09:e2:2e:9d:
                    03:1d:7e:2c:ab:6b:71:52:8a:7a:01:6e:02:0a:a0:
                    73:1e:5a:cb:49:55:89:dc:0a:72:5d:60:3f:da:25:
                    d5:19:83:e6:99:95:c6:95:5a:b9:53:9c:a1:c4:01:
                    ee:74:5f:8a:29:eb:18:fa:27:cd:64:d5:19:56:64:
                    c9:fe:e0:0f:d7:a5:72:af:b5:de:1c:d1:40:99:c6:
                    be:74:dd:8c:4c:d4:3a:38:8c:14:75:3a:aa:79:b5:
                    b1:85:ef:b9:44:ac:e6:6b:09:8f:35:1c:70:9d:c0:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:11:BF:BF:6F:66:1C:C4:CE:42:8B:9C:86:C7:1B:CB:3A:DB:0B:AF
            X509v3 Authority Key Identifier:
                keyid:07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132342e302f32332d3233203d3e20323638373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:86:43:cb:f6:7d:5f:89:84:2e:44:e4:aa:a5:76:c8:f6:83:
         37:b2:28:d7:c7:97:53:a0:5d:c4:51:b4:70:2d:43:95:63:eb:
         3d:37:28:50:fb:22:89:36:30:7a:25:58:4a:c2:5f:7d:bf:17:
         6d:36:9c:4a:f0:59:d2:02:b2:08:30:13:95:4a:b8:89:a6:dd:
         2c:67:e3:62:21:48:f0:d1:aa:af:19:c3:cf:96:69:71:f7:a6:
         4f:37:ba:c1:16:7a:27:76:ae:cf:d2:60:dc:cb:83:56:a2:ce:
         3c:94:4c:e8:27:4c:a7:73:cb:97:a0:d4:43:eb:58:48:0c:cc:
         0f:cd:02:ea:00:ea:68:e7:eb:24:b9:91:e2:ec:c7:80:78:80:
         e2:4d:69:d7:07:62:56:ef:4f:c1:11:2c:c3:7b:fb:65:cb:cf:
         31:87:2a:f5:7b:f0:4e:92:0a:bc:21:42:5f:f6:65:7a:53:02:
         f7:08:49:d9:38:34:6b:43:d9:49:0b:57:68:ec:b4:a8:7f:6c:
         97:a3:f9:b3:f0:de:2b:55:f4:ba:f6:8e:78:0e:23:8a:7b:c5:
         3e:50:c7:61:d4:9f:41:63:ed:6f:77:36:f6:2d:7d:99:f6:72:
         f3:1f:16:19:2d:25:38:a8:ed:4c:67:97:73:77:6c:84:fd:70:
         80:27:ce:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org