Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139342e302f32342d3234203d3e20323731363332.roa
File:                     34352e3137322e3139342e302f32342d3234203d3e20323731363332.roa (raw, json)
Hash identifier:          /XoJ5tSH/bhAic5hDmVVJPxiAzRQSfiq8ryBr3LIpys=
Subject key identifier:   8C:8A:30:BD:22:EF:39:9F:B3:C3:B0:FB:6C:80:48:10:E9:62:CA:7A
Certificate issuer:       /CN=0363C300551869E92BAF6218A3622188861DBE67
Certificate serial:       2442772B835DFD788CE2542CD74C1BA287B46D4E
Authority key identifier: 03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139342e302f32342d3234203d3e20323731363332.roa
Signing time:             Mon 15 Jan 2024 22:30:46 +0000
ROA not before:           Mon 15 Jan 2024 22:25:46 +0000
ROA not after:            Mon 13 Jan 2025 22:30:46 +0000
asID:                     271632
IP address blocks:        45.172.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:77:2b:83:5d:fd:78:8c:e2:54:2c:d7:4c:1b:a2:87:b4:6d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0363C300551869E92BAF6218A3622188861DBE67
        Validity
            Not Before: Jan 15 22:25:46 2024 GMT
            Not After : Jan 13 22:30:46 2025 GMT
        Subject: CN=8C8A30BD22EF399FB3C3B0FB6C804810E962CA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:f0:01:fe:cb:39:10:95:16:99:76:86:23:
                    fa:f3:22:34:08:da:00:58:f8:cb:bc:d8:98:4b:c9:
                    2d:09:3a:4d:52:45:64:79:b7:1b:68:61:de:0c:20:
                    a2:c1:0d:0e:8b:2a:b9:98:0e:71:8d:c0:5c:7d:b0:
                    b3:2b:e0:9f:97:d4:31:c8:49:b4:e6:08:b8:a0:e5:
                    dd:c4:29:a4:44:de:88:d2:a7:57:f2:cf:00:c5:07:
                    68:3f:85:01:8d:3f:c0:f6:24:06:d4:94:0f:7c:34:
                    a0:e3:69:b8:00:2c:b7:36:1e:f6:dc:44:2e:7f:41:
                    d3:fd:f2:b7:94:56:88:89:43:1a:1a:e2:f8:87:2d:
                    59:96:41:30:41:23:1d:f2:87:cd:5d:b9:c2:8a:0c:
                    64:5b:6c:3c:0e:5b:4e:3e:49:50:bd:f9:e6:67:bc:
                    d4:07:8d:c0:3a:cb:9e:c3:8b:63:a4:d4:93:e6:95:
                    87:5d:3b:45:93:21:83:f5:a5:44:35:4a:28:88:5d:
                    6f:3e:13:5a:33:5b:b6:3e:00:44:4c:4a:78:85:d8:
                    68:61:7b:7e:15:cb:74:2b:30:02:da:4f:10:77:56:
                    51:01:cd:87:1f:02:3f:dc:69:b0:14:e7:3d:2a:fc:
                    e0:ff:74:66:76:28:d4:3e:ab:f9:b9:b7:3e:bb:e3:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8A:30:BD:22:EF:39:9F:B3:C3:B0:FB:6C:80:48:10:E9:62:CA:7A
            X509v3 Authority Key Identifier:
                keyid:03:63:C3:00:55:18:69:E9:2B:AF:62:18:A3:62:21:88:86:1D:BE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/0363C300551869E92BAF6218A3622188861DBE67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0363C300551869E92BAF6218A3622188861DBE67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/34352e3137322e3139342e302f32342d3234203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:3d:80:77:d8:d5:3a:3a:bb:ca:63:cb:0f:f0:e6:79:b1:9f:
         32:3b:cc:a9:6c:58:4a:56:b4:4a:5b:b9:3f:93:7b:f3:5a:c0:
         fb:92:34:e7:9a:65:82:31:23:8c:f3:e2:4d:f6:0f:ea:66:3f:
         e8:1f:4b:b5:1b:f1:7a:cf:45:d9:1b:81:a5:36:2c:d7:f3:31:
         ee:be:5d:75:21:8e:4e:99:46:a0:f5:f9:fc:e5:db:1e:a3:0d:
         a1:c6:cf:4b:78:cb:c1:fa:94:81:12:7b:60:50:9c:9a:a6:3f:
         3c:f0:7b:58:c0:91:b3:fb:c7:44:2c:5e:fb:bd:e4:75:a4:8c:
         c5:8a:ce:15:28:f2:9d:91:a8:5c:2f:39:cb:94:95:8c:5f:cc:
         f2:56:26:8f:63:81:f3:59:4d:da:73:00:b2:3f:07:22:c6:af:
         b6:c9:e8:17:8d:a4:6b:fd:28:7f:8f:75:38:2c:b2:52:cd:9d:
         f6:33:5a:14:87:96:e9:ac:6b:b7:ed:f0:8a:6b:fa:86:56:78:
         53:aa:c3:e9:9b:7e:7b:fe:17:b4:8f:a0:c1:eb:c1:a7:d4:88:
         5b:4a:83:a3:15:31:5a:85:60:89:aa:ee:6d:a5:86:8e:70:e6:
         da:c6:87:ed:c0:3e:ab:46:aa:04:70:80:f7:39:c7:3e:e5:2b:
         94:ef:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org