Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36332e302f32342d3234203d3e20323638313837.roa
File:                     34352e3137312e36332e302f32342d3234203d3e20323638313837.roa (raw, json)
Hash identifier:          Vev5XduFa20VO/+icB6vOCM8E608pnt4y3lga6+5UFM=
Subject key identifier:   16:5E:90:40:FA:1C:23:61:06:02:FE:11:8B:83:5D:96:A2:4D:1A:D5
Certificate issuer:       /CN=02CE5A602E5A896CBDC5293E334F2E37079D18D4
Certificate serial:       4AA864306D3E4EA7F649D8FEDD0820FDB7EE083B
Authority key identifier: 02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36332e302f32342d3234203d3e20323638313837.roa
Signing time:             Sun 11 Sep 2022 14:20:02 +0000
ROA not before:           Sun 11 Sep 2022 14:15:02 +0000
ROA not after:            Sun 10 Sep 2023 14:20:02 +0000
asID:                     268187
IP address blocks:        45.171.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a8:64:30:6d:3e:4e:a7:f6:49:d8:fe:dd:08:20:fd:b7:ee:08:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02CE5A602E5A896CBDC5293E334F2E37079D18D4
        Validity
            Not Before: Sep 11 14:15:02 2022 GMT
            Not After : Sep 10 14:20:02 2023 GMT
        Subject: CN=165E9040FA1C23610602FE118B835D96A24D1AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:dd:07:6c:a4:ec:34:f5:a1:72:00:09:ab:
                    48:04:0c:57:93:1e:ef:45:2c:48:b7:46:53:8d:9c:
                    49:b7:a4:af:c1:65:a6:53:71:fa:d6:80:13:cc:5f:
                    9a:08:42:26:35:6c:11:c4:f4:dd:56:fb:6d:cb:4e:
                    2a:e4:34:d1:ac:89:61:0c:8d:61:0d:3e:c1:21:32:
                    35:8d:d7:42:2b:e1:0b:61:f6:0a:0c:40:84:05:e3:
                    37:c0:44:94:63:4a:77:08:3d:3f:df:17:45:96:7d:
                    a4:30:6d:36:32:e1:67:29:77:5e:f7:47:ed:c8:f1:
                    85:0a:50:6c:17:9f:af:6a:db:df:a5:85:e9:49:97:
                    f1:b3:a8:5f:a6:ab:33:66:d8:6e:55:81:a4:fe:c8:
                    6f:b1:23:bc:16:ae:a2:d5:8a:48:bb:aa:a0:d3:2e:
                    c9:f7:3a:2c:96:0b:e3:35:ae:ad:31:b1:2e:f5:57:
                    da:55:6f:e4:4c:e0:43:7f:b2:88:a9:57:1a:f0:19:
                    9a:40:6a:0f:b7:bb:76:6a:74:d1:f6:19:56:03:94:
                    5f:7d:2c:d2:b6:3a:8c:1e:59:98:7f:8a:ca:71:a8:
                    ee:3b:04:71:68:7f:1a:2e:08:62:2d:64:d2:13:6e:
                    b3:00:d6:5f:88:38:03:dd:04:08:8c:e5:eb:bd:30:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5E:90:40:FA:1C:23:61:06:02:FE:11:8B:83:5D:96:A2:4D:1A:D5
            X509v3 Authority Key Identifier:
                keyid:02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/34352e3137312e36332e302f32342d3234203d3e20323638313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:da:5e:13:b5:09:04:a7:64:c1:79:01:17:8a:6b:66:75:
         18:b7:8e:f5:17:ff:aa:53:ae:ba:fe:50:14:9f:49:4e:34:e7:
         43:2e:6b:03:33:7f:9a:52:1c:3a:0e:e7:3f:f9:2a:c3:28:2b:
         3a:bc:01:48:c2:28:e7:e6:9f:8e:2a:a0:ac:53:30:9b:d7:ff:
         d6:76:72:fc:9d:c7:e6:7b:c2:fc:87:63:ed:11:e2:e3:91:9b:
         a6:ff:5b:74:48:28:b2:1b:75:45:37:4f:eb:35:1d:97:24:f4:
         8c:cb:ea:37:5d:47:9b:81:6f:7e:2d:a9:cc:2f:15:d6:f9:30:
         29:91:bf:20:6a:fe:db:0a:d1:b3:1f:f2:19:01:a6:8a:81:b3:
         ee:09:cb:ea:bc:8c:16:93:cf:4b:1d:5d:c3:85:75:42:5e:5b:
         85:5f:ec:b4:52:24:0d:37:91:23:a7:fa:c2:c3:1e:64:c9:fe:
         5d:97:69:be:ec:8a:ab:9b:65:94:3e:4b:c0:7f:c9:f4:2f:b8:
         12:77:05:ef:fd:2f:c2:ce:09:d0:5d:c2:95:c6:c4:84:cc:16:
         b9:70:72:aa:b3:fe:09:ba:f4:e3:d1:b9:4d:e6:f3:c6:d6:bf:
         40:12:64:4a:81:05:be:a7:4a:07:ce:ee:5d:6a:f4:cc:9c:99:
         79:79:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:41 2024 by rpki-client on console-ams.rpki-client.org