Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132372e302f32342d3234203d3e20323638373030.roa
File:                     34352e3136352e3132372e302f32342d3234203d3e20323638373030.roa (raw, json)
Hash identifier:          p7oCHXZ3OZT2EScs5FFnBBsSExw3yiYwjbAUSM8mBNk=
Subject key identifier:   98:EF:09:86:2F:69:07:C9:B5:C7:0C:A5:4C:21:A4:92:C7:3E:06:10
Certificate issuer:       /CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
Certificate serial:       190518A89E5FBC1897C029F29C373B8BB9E60370
Authority key identifier: 07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132372e302f32342d3234203d3e20323638373030.roa
Signing time:             Fri 12 Apr 2024 17:00:00 +0000
ROA not before:           Fri 12 Apr 2024 16:55:00 +0000
ROA not after:            Fri 11 Apr 2025 17:00:00 +0000
asID:                     268700
IP address blocks:        45.165.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:05:18:a8:9e:5f:bc:18:97:c0:29:f2:9c:37:3b:8b:b9:e6:03:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1
        Validity
            Not Before: Apr 12 16:55:00 2024 GMT
            Not After : Apr 11 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:fa:77:d7:1f:ac:f1:f3:2d:f7:21:d7:16:
                    61:ba:7d:c7:03:2d:66:fc:a6:35:ed:31:73:04:ae:
                    e2:9d:e2:7e:09:15:6e:dd:ba:7e:1e:12:a4:43:29:
                    58:87:46:23:d4:c8:36:6a:fe:a8:ec:97:7e:ab:dc:
                    58:44:cd:f1:dd:8d:c4:aa:76:5a:02:15:fa:ef:2f:
                    71:97:b2:4e:57:36:01:fd:0b:1f:fd:00:a5:d8:b5:
                    b2:f3:f0:82:95:09:43:91:80:8e:8c:f9:f8:28:f2:
                    fc:dc:93:69:86:0c:d2:87:41:26:2c:d9:13:2e:42:
                    a8:b0:06:cc:a3:9c:0e:73:79:d0:c6:89:b5:3c:67:
                    9a:db:53:5c:ea:11:48:34:06:b0:ce:28:bd:20:5b:
                    1e:09:03:03:56:b2:f2:14:83:d6:80:40:29:b3:9d:
                    1c:e6:e5:fd:44:ec:07:53:ce:9d:78:6c:37:d0:5e:
                    ad:ce:58:20:e2:23:bf:52:e6:cf:89:92:8d:5c:6f:
                    e7:37:40:2e:c5:97:f9:a5:e5:33:d8:89:21:cc:f3:
                    4f:aa:65:60:bb:fa:e4:2c:4c:e9:9f:26:18:b3:3a:
                    01:d0:32:15:aa:78:73:a3:49:9d:49:6b:1b:2d:85:
                    23:83:d2:68:3e:1d:42:21:b1:11:49:90:4f:d6:6c:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EF:09:86:2F:69:07:C9:B5:C7:0C:A5:4C:21:A4:92:C7:3E:06:10
            X509v3 Authority Key Identifier:
                keyid:07:4E:7C:53:99:BF:0B:4B:A9:2B:7F:57:D4:19:D9:A3:D0:5F:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/074E7C5399BF0B4BA92B7F57D419D9A3D05F05F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DabpVK4ptvKPrV5ZUA6GrrS1NBZ1omtagugy7kj6H6jQ/0/34352e3136352e3132372e302f32342d3234203d3e20323638373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:85:15:cd:e4:bc:63:dd:bf:83:8e:e5:e8:5e:77:2b:ac:dc:
         71:e6:5e:e8:f8:a7:2d:cb:5a:8b:19:48:20:43:68:b9:23:ed:
         83:b5:6a:13:81:c3:b2:e8:91:6b:bf:9d:2b:23:e8:90:ba:75:
         f5:22:51:c7:ce:10:20:bd:50:20:a8:e8:b9:47:a3:a6:a8:cb:
         b5:e5:76:24:43:2f:a4:a3:31:25:8c:f7:76:99:4f:4f:b5:58:
         dd:75:ef:f4:2d:60:c5:f1:a7:48:ba:8b:ac:bb:a6:4c:55:36:
         17:90:24:f8:7e:a6:d9:fe:cb:7b:51:2c:03:88:ec:bf:9e:f1:
         b0:15:28:31:00:54:d6:ed:44:ff:54:de:25:af:92:4f:48:19:
         67:6d:cb:a4:95:71:fe:97:da:0d:96:e3:49:b4:a4:81:de:d1:
         7d:d4:ff:45:c8:56:94:87:d8:d3:35:53:a7:4c:8a:2b:e3:2e:
         ff:78:f8:8c:21:ef:3e:61:9c:a3:ce:ad:49:94:cf:da:08:52:
         4d:c1:b2:57:8a:59:a4:b7:26:2c:41:5b:a1:df:02:95:ef:50:
         46:49:e9:5c:7d:18:7f:2c:d7:37:15:0e:78:fc:ff:c0:e8:ab:
         6a:dc:28:34:e7:e8:65:d8:5e:5a:53:3d:43:38:b9:06:ec:a1:
         21:1c:29:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org