Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/34352e3136382e3131322e302f32322d3234203d3e20323638303535.roa
File:                     34352e3136382e3131322e302f32322d3234203d3e20323638303535.roa (raw, json)
Hash identifier:          iHbPXTAopGLMo2rx6QJ6Ry+NIBXQbzxRLCJNwBUQ+aE=
Subject key identifier:   8E:F4:9F:FD:BD:27:9A:8B:2C:71:84:F3:D9:CA:8D:31:AD:F0:31:B2
Certificate issuer:       /CN=1959D600929860D5650DBFB8BCE70EEE50717927
Certificate serial:       36297BBA9E5C1BD5A0E50DF1AD005FFBED131D2E
Authority key identifier: 19:59:D6:00:92:98:60:D5:65:0D:BF:B8:BC:E7:0E:EE:50:71:79:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1959D600929860D5650DBFB8BCE70EEE50717927.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/34352e3136382e3131322e302f32322d3234203d3e20323638303535.roa
Signing time:             Tue 07 Mar 2023 20:00:00 +0000
ROA not before:           Tue 07 Mar 2023 19:55:00 +0000
ROA not after:            Tue 05 Mar 2024 20:00:00 +0000
asID:                     268055
IP address blocks:        45.168.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:29:7b:ba:9e:5c:1b:d5:a0:e5:0d:f1:ad:00:5f:fb:ed:13:1d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1959D600929860D5650DBFB8BCE70EEE50717927
        Validity
            Not Before: Mar  7 19:55:00 2023 GMT
            Not After : Mar  5 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:aa:bf:40:57:78:2d:aa:39:cc:33:7a:6b:
                    ef:52:fc:94:23:ef:6a:50:0d:02:76:76:6a:98:a5:
                    f9:2e:63:37:eb:0d:b9:36:70:ba:8b:0d:79:a2:be:
                    54:13:c8:ca:77:ba:87:c7:82:97:d9:22:7c:92:3f:
                    e6:9f:56:f1:05:7d:f8:23:fa:c7:fc:85:9f:f7:9b:
                    a0:79:72:39:88:29:aa:76:60:8b:2d:64:ec:ba:ea:
                    37:53:aa:03:a4:ca:ec:7e:71:58:4b:e5:4f:f8:83:
                    b5:44:21:88:18:a3:d9:9e:f5:7c:14:76:c5:d7:2b:
                    53:10:0d:c9:28:e9:fc:32:33:0a:67:ed:15:8a:8b:
                    c9:0d:1a:e3:8b:4a:7a:5f:cf:bb:34:cb:01:62:19:
                    87:0b:36:3f:ab:3b:00:76:a3:6e:dc:0a:d5:7b:d7:
                    f5:f7:be:f6:10:17:5c:f6:00:73:67:e1:9b:a9:79:
                    2c:30:18:14:e2:01:4c:90:e5:ae:d0:0e:a9:61:86:
                    db:d3:48:bf:d9:c6:87:ca:e3:b9:0d:b6:28:38:63:
                    4b:a6:df:4f:47:f0:5a:6f:70:2a:04:5a:3a:9b:0e:
                    73:f4:b0:00:f5:2e:67:50:4b:f2:ff:55:f0:52:ae:
                    b5:e2:5c:97:b0:26:9c:b9:a6:41:ab:5f:42:c7:0e:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F4:9F:FD:BD:27:9A:8B:2C:71:84:F3:D9:CA:8D:31:AD:F0:31:B2
            X509v3 Authority Key Identifier:
                keyid:19:59:D6:00:92:98:60:D5:65:0D:BF:B8:BC:E7:0E:EE:50:71:79:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/1959D600929860D5650DBFB8BCE70EEE50717927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1959D600929860D5650DBFB8BCE70EEE50717927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/34352e3136382e3131322e302f32322d3234203d3e20323638303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:c7:45:40:e9:ae:0f:b2:b6:75:e9:ce:e3:70:c8:10:0a:3b:
         39:d0:48:fd:d4:12:6c:53:f3:4f:c5:d5:46:73:05:f1:5a:7a:
         29:16:eb:c8:29:63:b9:8f:75:40:3c:6b:4b:18:ee:80:d3:d9:
         fe:7d:a2:ea:3e:8a:60:c3:43:aa:3c:a5:44:8f:38:46:83:08:
         7e:cf:0f:30:cd:18:55:b4:ec:49:dc:c3:a2:bc:e7:00:a1:12:
         03:71:95:59:bc:fc:49:ed:85:85:ed:91:07:fc:40:9d:5e:8f:
         d4:ee:2e:9b:86:75:b8:9a:a5:2d:28:bb:2e:b3:71:e7:45:6a:
         ba:15:f3:37:c2:b2:ab:ae:ab:fb:f7:68:da:b9:2c:5e:63:89:
         a7:84:c0:6d:12:f8:54:c3:86:34:43:0d:71:46:1e:9d:01:61:
         16:92:18:a4:9b:a4:6f:2f:9f:ff:fc:b9:cd:db:4e:c1:9a:f7:
         71:19:0b:63:b6:29:68:7c:b8:79:eb:65:68:be:58:2b:97:b1:
         6e:b4:4e:01:3a:7e:d6:f3:a0:c5:c7:9e:6e:d5:de:1e:92:fd:
         5b:24:4f:64:6b:4a:8e:03:8c:a1:f8:c3:7f:44:d4:32:d9:e2:
         2a:d4:ed:94:3f:b9:05:ae:b9:13:ff:7c:af:f9:41:6a:d8:c2:
         71:ee:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org