Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/34352e3136362e3138302e302f32322d3234203d3e20323637393836.roa
File:                     34352e3136362e3138302e302f32322d3234203d3e20323637393836.roa (raw, json)
Hash identifier:          qyrlBSu9uz0kUbIHA6EmBr1caq30L5n/b9bm9QIxiQU=
Subject key identifier:   87:D2:3D:98:75:AE:B5:DC:06:6D:6F:D9:BF:86:2B:9D:42:E7:C2:2A
Certificate issuer:       /CN=8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A
Certificate serial:       3C4FE51CCDB3BF1760A86D30390D0E98B37D0DA3
Authority key identifier: 8F:B9:2C:AE:23:D0:DE:35:CE:9F:CF:F3:EF:73:D5:9A:E2:96:2B:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/34352e3136362e3138302e302f32322d3234203d3e20323637393836.roa
Signing time:             Wed 06 Sep 2023 15:00:00 +0000
ROA not before:           Wed 06 Sep 2023 14:55:00 +0000
ROA not after:            Wed 04 Sep 2024 15:00:00 +0000
asID:                     267986
IP address blocks:        45.166.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4f:e5:1c:cd:b3:bf:17:60:a8:6d:30:39:0d:0e:98:b3:7d:0d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A
        Validity
            Not Before: Sep  6 14:55:00 2023 GMT
            Not After : Sep  4 15:00:00 2024 GMT
        Subject: CN=87D23D9875AEB5DC066D6FD9BF862B9D42E7C22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:d4:30:51:86:04:69:c4:16:60:9b:c0:4f:
                    6a:8b:04:91:5c:bc:03:f9:c0:ea:a3:70:fc:22:63:
                    c3:ef:85:14:7b:8a:e6:f2:af:6f:1a:e3:98:26:79:
                    bc:1a:ba:0b:06:60:5d:14:87:5d:97:25:67:7d:60:
                    2e:bc:3e:5e:f3:41:aa:30:22:d4:8e:64:57:dc:14:
                    12:06:46:77:d6:8f:43:5a:ac:22:33:7f:dc:0d:d1:
                    e6:51:d5:46:82:51:81:4f:c6:7d:ff:9e:68:8b:cf:
                    57:69:81:ad:f7:df:96:4f:81:10:1c:cf:1d:e6:ca:
                    2f:5b:68:7b:da:9c:1f:24:66:27:26:4c:d4:dc:cf:
                    0f:3b:09:f7:af:14:58:f3:42:79:0e:6f:db:41:0e:
                    db:0a:ea:33:79:6a:9d:ea:a1:12:96:ca:28:65:94:
                    78:96:d0:01:b4:4c:4d:59:19:54:f1:e8:63:47:d5:
                    49:3e:1d:af:d1:aa:53:6f:63:d2:38:c7:84:cc:01:
                    0f:22:d6:4d:6b:35:f1:18:17:c4:71:25:52:9a:18:
                    7b:19:b8:23:f9:7b:5d:21:13:6c:5f:b2:af:c7:ad:
                    15:cb:85:82:1a:e6:38:71:de:36:a9:df:9a:5d:6d:
                    2c:52:82:f2:a2:2f:01:ea:91:92:08:51:49:9e:eb:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D2:3D:98:75:AE:B5:DC:06:6D:6F:D9:BF:86:2B:9D:42:E7:C2:2A
            X509v3 Authority Key Identifier:
                keyid:8F:B9:2C:AE:23:D0:DE:35:CE:9F:CF:F3:EF:73:D5:9A:E2:96:2B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB92CAE23D0DE35CE9FCFF3EF73D59AE2962B0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1Zo4U5ddp9meFFNXNWynR2pP4ZWBDUKUcRZsQQMbYrM/0/34352e3136362e3138302e302f32322d3234203d3e20323637393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:3b:12:d0:7c:66:54:23:dc:32:34:8c:24:ea:38:b1:2b:2d:
         f4:e8:e1:08:f8:87:26:eb:4d:84:8b:a7:3a:45:f7:0c:23:57:
         c0:42:0d:ca:ad:e9:e2:91:38:b6:a6:07:49:01:f1:c7:47:ac:
         a8:4e:d3:f5:df:3d:49:fe:be:5e:fb:8a:ae:30:a9:ec:a7:e9:
         35:72:3e:f8:45:64:fe:35:68:99:d7:81:0a:23:48:e9:44:5d:
         a2:f3:21:33:17:26:8f:1b:47:f3:44:3c:1a:0b:67:eb:37:3b:
         95:6b:0b:b1:8b:ea:2c:46:a5:ea:df:06:6a:0f:e7:c1:94:40:
         a3:13:b6:1f:57:b9:ed:65:7f:97:9d:c1:8a:1f:eb:73:52:15:
         21:9b:73:01:69:b8:14:ce:aa:25:5a:d3:56:d0:95:26:bb:3e:
         31:98:b6:08:67:b2:56:88:8e:d6:ee:34:f6:72:16:47:59:a3:
         35:5e:54:12:cf:96:0b:c0:b7:2c:90:f5:6b:ac:4c:fa:cd:a5:
         ab:16:1a:d4:5b:b4:e1:00:2c:8f:bb:ab:98:d5:64:01:03:e8:
         af:b8:a8:9a:38:af:b4:1a:08:25:92:27:2a:21:5d:26:09:86:
         18:81:21:fe:95:81:61:6f:ac:1d:bc:f2:7d:24:79:aa:77:50:
         f0:d0:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-ams.rpki-client.org