Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa
File:                     34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa (raw, json)
Hash identifier:          7ECSwogFLPO90DOB7a/ktkD+EK7lzxWv2lKjpmNNijs=
Subject key identifier:   79:03:0B:E5:11:1E:1F:81:64:42:ED:1F:9E:5E:D6:4C:E7:B2:5F:C3
Certificate issuer:       /CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
Certificate serial:       5E53D69F456F98DA00B21B34D2A80BD7609F3860
Authority key identifier: 17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa
Signing time:             Wed 26 Jul 2023 14:12:19 +0000
ROA not before:           Wed 26 Jul 2023 14:07:19 +0000
ROA not after:            Wed 24 Jul 2024 14:12:19 +0000
asID:                     268070
IP address blocks:        45.167.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:53:d6:9f:45:6f:98:da:00:b2:1b:34:d2:a8:0b:d7:60:9f:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177CC1F044635CDEFDDF40B78BE59FC17A2383BF
        Validity
            Not Before: Jul 26 14:07:19 2023 GMT
            Not After : Jul 24 14:12:19 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:68:60:57:cb:56:7e:0a:1e:15:1b:b2:85:
                    f1:1b:a9:43:de:dd:72:13:bc:f9:43:ed:aa:39:14:
                    69:41:aa:96:0b:fe:d6:b3:a6:92:4b:d1:ea:64:30:
                    a7:2a:8e:19:3e:75:18:fe:9d:af:be:9a:34:eb:34:
                    55:fa:92:19:12:c9:ac:82:0a:84:bc:be:9c:6d:95:
                    27:6b:7c:0b:6c:98:2a:1c:d9:aa:ba:f7:55:a8:32:
                    cb:08:c0:05:a1:67:20:e3:ac:fd:de:28:df:3d:2a:
                    3f:4e:50:15:4e:1a:08:65:f4:6c:bf:31:1d:f6:04:
                    fe:cf:2b:e1:c6:92:21:1f:31:34:57:25:f8:eb:04:
                    b2:c2:bf:4d:4f:65:4b:93:39:47:56:48:4b:05:b7:
                    42:26:0b:4b:6a:e5:b3:b1:0b:39:2b:d9:92:94:bd:
                    0a:dc:c1:2b:af:ac:e6:0d:26:b6:19:7a:e6:63:02:
                    f5:f2:c9:fe:c5:1f:ff:b0:a6:a4:ed:22:70:57:0b:
                    5b:06:6b:22:a8:18:b2:82:6f:aa:a7:c0:44:48:d4:
                    1f:af:53:1f:25:f2:d4:c5:0f:00:46:95:27:fb:a2:
                    e9:fc:6f:2a:db:19:86:9c:37:d5:37:80:f8:21:28:
                    db:a4:f0:48:5f:ac:00:b6:85:85:e9:ba:9c:b9:18:
                    ad:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:0B:E5:11:1E:1F:81:64:42:ED:1F:9E:5E:D6:4C:E7:B2:5F:C3
            X509v3 Authority Key Identifier:
                keyid:17:7C:C1:F0:44:63:5C:DE:FD:DF:40:B7:8B:E5:9F:C1:7A:23:83:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177CC1F044635CDEFDDF40B78BE59FC17A2383BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/0/34352e3136372e3132332e302f32342d3234203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:11:9e:da:7a:da:a3:b2:de:92:f9:c6:6a:97:e9:70:49:63:
         56:f9:d3:ec:68:de:b6:88:04:d7:e6:59:7c:57:8b:57:22:b1:
         3e:b0:60:35:41:91:10:63:26:f6:b5:82:b3:69:0e:2c:a7:dc:
         06:6f:86:0d:15:70:9e:2f:cc:d7:ea:ec:1d:b5:92:02:73:b9:
         ab:b1:d8:be:d7:4a:8f:d2:15:d1:77:9a:c1:e9:dd:2d:51:50:
         64:90:63:1e:d3:b8:32:d4:2e:e3:af:7a:cf:1f:0a:d6:66:17:
         3f:59:59:83:8f:96:31:63:d3:f6:43:48:99:cb:88:63:7d:fe:
         41:8c:15:ec:f2:32:31:1d:42:fc:e3:8a:93:fc:71:99:18:c5:
         63:d7:73:55:b0:02:76:39:4c:07:7e:ed:d5:37:d1:51:bd:b9:
         ee:0b:10:d3:99:66:4f:c3:f1:3d:0b:6b:55:83:2d:09:56:1b:
         4d:fc:2a:b8:11:c8:00:6a:c5:c4:eb:29:d7:eb:a7:d0:53:2c:
         f5:9c:2b:f5:b5:84:55:12:19:35:ab:fc:5a:63:76:e0:57:46:
         be:6f:9f:6f:05:91:6e:b3:c0:f3:fa:6a:95:c0:4a:24:35:23:
         0f:29:c4:2d:79:51:c8:74:76:ce:65:a2:41:06:fc:db:44:b8:
         7d:ea:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org