Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132362e302f32332d3233203d3e20323638373030.roa
File:                     34352e3136352e3132362e302f32332d3233203d3e20323638373030.roa (raw, json)
Hash identifier:          8h8jbwqCX0ddSbZuG7d4/zvXdHxuPjhFL65uljkMGPo=
Subject key identifier:   19:F8:E5:11:15:AE:6D:D0:3D:34:16:69:CC:F9:24:25:07:BB:CB:A2
Certificate issuer:       /CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
Certificate serial:       3E7B8BE33D2B93B9082C721E08C81E3F57D37E87
Authority key identifier: 07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132362e302f32332d3233203d3e20323638373030.roa
Signing time:             Fri 12 Apr 2024 17:00:00 +0000
ROA not before:           Fri 12 Apr 2024 16:55:00 +0000
ROA not after:            Fri 11 Apr 2025 17:00:00 +0000
asID:                     268700
IP address blocks:        45.165.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7b:8b:e3:3d:2b:93:b9:08:2c:72:1e:08:c8:1e:3f:57:d3:7e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
        Validity
            Not Before: Apr 12 16:55:00 2024 GMT
            Not After : Apr 11 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:f1:fe:d8:20:07:9b:76:90:ed:36:61:20:
                    5d:28:61:a5:a4:5b:2f:3e:6b:af:07:44:de:49:f6:
                    b4:03:7b:6b:23:ea:1e:0b:f7:5d:05:d7:4a:03:cd:
                    45:79:01:fe:30:9b:b6:d2:7a:66:6b:23:bd:70:f0:
                    76:d5:ac:0d:4c:fb:fe:1e:1e:ac:5c:6c:d0:37:3b:
                    a8:a0:c1:9c:4e:25:cd:59:9e:10:af:ce:9f:eb:0f:
                    b2:b0:29:83:6b:99:52:ba:65:cd:5c:53:24:47:b5:
                    2c:32:aa:27:73:db:d7:b7:b4:7d:59:b9:0a:39:44:
                    e6:f5:e5:15:08:2d:8a:56:13:a2:fc:14:fe:9a:cc:
                    5a:01:34:e6:5b:1d:81:cf:4c:ed:66:26:5c:15:bf:
                    44:57:47:68:8b:a8:8c:97:a4:fa:17:38:c2:ce:d6:
                    b1:f9:cc:b6:9b:3e:86:89:44:9d:b9:b0:33:0d:4e:
                    94:5f:ea:24:a2:1f:6f:be:a2:23:31:ba:46:18:db:
                    72:28:9f:2f:66:7c:ae:ca:31:4a:5c:f2:89:e9:49:
                    4e:e9:95:f0:4e:8c:00:a8:68:a5:f1:e1:83:39:76:
                    f4:9b:6f:d7:10:10:50:05:57:5f:9e:8d:62:f9:9c:
                    5b:40:d4:bc:1d:c5:32:2d:46:55:82:ef:4e:24:b6:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F8:E5:11:15:AE:6D:D0:3D:34:16:69:CC:F9:24:25:07:BB:CB:A2
            X509v3 Authority Key Identifier:
                keyid:07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132362e302f32332d3233203d3e20323638373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:12:0e:6a:41:0c:74:39:72:6f:65:d1:e6:8f:3e:60:cc:
         a5:ef:92:b4:83:f1:74:22:50:c2:cc:fb:cd:83:eb:28:88:a5:
         f8:ab:80:2f:b4:50:f1:75:90:74:1a:3d:9b:0b:a0:95:59:1c:
         a1:5b:13:c4:2f:22:82:b2:d5:8a:68:74:4b:1d:ea:e9:33:4d:
         16:46:f9:d6:24:73:7a:88:3d:41:96:80:0b:bf:46:b8:ca:6a:
         0f:a6:0a:c7:d4:7c:af:8d:e4:dc:e4:74:10:3e:f8:70:3c:5d:
         41:3d:39:a4:aa:3d:f5:80:ed:6b:7d:31:fb:a7:62:30:14:f5:
         56:fa:b1:c6:8c:69:9c:c3:c4:3b:ce:28:e1:32:19:ed:ea:8d:
         ba:4d:5c:b5:98:a7:21:c1:c5:d2:e9:aa:b3:e9:fb:2f:e7:51:
         03:dd:62:60:12:97:a0:f1:9b:e4:30:79:00:5d:cf:4c:59:45:
         f3:9f:89:68:2b:b2:58:04:58:17:9e:9d:30:1b:5c:a1:36:aa:
         15:f9:18:f8:2e:6e:40:37:cc:c9:76:5b:dd:36:82:0c:36:36:
         f5:cd:4e:e1:56:78:84:5b:bd:d2:d6:d2:6a:c2:8d:88:60:6b:
         52:43:95:61:12:02:b0:a2:cb:b8:96:70:ac:64:15:69:70:11:
         b6:fe:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org