Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138362e302f32342d3234203d3e20323637323731.roa
File:                     34352e3233322e3138362e302f32342d3234203d3e20323637323731.roa (raw, json)
Hash identifier:          CKzvHNdP6Lb8ePY4eE85klXE4e+d0FgoByjJtSfk8ys=
Subject key identifier:   15:A4:57:33:14:15:2A:9C:61:FB:33:FB:A9:7B:EC:AB:D4:CF:B4:22
Certificate issuer:       /CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
Certificate serial:       0CC52C12F8018ADF25505B83C0654AF53A045C95
Authority key identifier: CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138362e302f32342d3234203d3e20323637323731.roa
Signing time:             Mon 06 Dec 2021 20:46:54 +0000
ROA not before:           Mon 06 Dec 2021 20:41:54 +0000
ROA not after:            Mon 05 Dec 2022 20:46:54 +0000
asID:                     267271
IP address blocks:        45.232.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c5:2c:12:f8:01:8a:df:25:50:5b:83:c0:65:4a:f5:3a:04:5c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB
        Validity
            Not Before: Dec  6 20:41:54 2021 GMT
            Not After : Dec  5 20:46:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:5b:b4:49:98:9f:f7:d1:eb:7d:54:60:70:
                    4a:7a:7a:76:53:f7:1b:13:0a:81:0c:af:57:d7:2c:
                    cb:3e:68:02:72:86:3b:3d:6a:44:69:10:02:17:bd:
                    0e:0c:94:d3:aa:df:b6:cd:fa:23:9c:79:4b:a2:13:
                    86:92:81:4c:14:70:01:7b:2e:46:3a:5e:1b:84:55:
                    65:66:6d:47:ee:e5:67:97:89:cc:21:fe:b7:a1:34:
                    a9:10:14:7f:a0:ad:2e:60:64:c4:15:52:fb:9f:cf:
                    42:1b:20:7f:28:57:30:5a:76:5f:bb:8d:0a:3a:64:
                    3a:6d:6a:fc:13:4b:ba:dd:35:70:33:32:ef:b1:5e:
                    a0:3b:06:41:c1:d0:3c:84:b4:dc:b9:32:27:8f:ba:
                    a8:16:47:cd:5c:15:0b:68:39:08:05:3a:95:d1:f2:
                    eb:e7:67:cc:e8:3d:7d:10:02:93:b2:64:da:d8:3b:
                    45:da:84:bf:4b:12:4c:eb:91:15:e9:48:e2:41:a3:
                    ee:ac:d7:f3:09:26:4c:3e:83:d3:4e:88:3e:b9:f0:
                    5e:f2:d7:3b:c2:43:16:ce:ab:22:c8:b6:e2:a0:cc:
                    b0:d8:a9:9a:58:a5:12:9d:e7:ea:75:9e:73:6f:f1:
                    23:6e:b4:c0:ed:0b:f3:3b:d4:45:42:1a:72:0f:2b:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A4:57:33:14:15:2A:9C:61:FB:33:FB:A9:7B:EC:AB:D4:CF:B4:22
            X509v3 Authority Key Identifier:
                keyid:CF:7C:A3:C7:F6:48:4A:8D:C2:68:88:94:F6:D7:40:2E:D5:58:0B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF7CA3C7F6484A8DC2688894F6D7402ED5580BEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqtz5PTUYCdqwJ5CAHruYQiN26ADsUjeJCxdN7ApSjEt/0/34352e3233322e3138362e302f32342d3234203d3e20323637323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:af:85:f3:6a:2e:f2:1a:a7:0a:e2:9e:1e:0d:02:64:8a:e2:
         61:b5:73:8f:6a:fa:e5:89:61:6e:f6:56:7a:94:2d:52:08:e5:
         d7:49:88:c8:c6:f3:01:1d:49:78:47:63:96:cb:85:4a:3b:52:
         0f:2b:82:09:2b:fa:30:f1:ae:4b:f6:7b:eb:39:11:62:c1:aa:
         f2:37:c9:1a:ee:db:90:e1:74:8e:c0:cd:ba:d1:1d:98:63:85:
         71:54:46:b7:94:ab:2a:e0:a5:ea:74:a4:d7:92:fb:75:bb:c4:
         15:10:5a:37:d5:47:f0:d3:fa:8f:09:97:50:f2:3f:ea:08:91:
         22:d9:3d:54:51:89:b0:7d:09:a0:4c:53:4d:c2:06:76:d5:b9:
         6c:c3:d0:03:fc:b2:a9:ec:54:b6:09:2b:8e:8d:bf:d8:cd:07:
         16:3e:e9:91:e6:05:e4:4e:d7:b4:84:5a:3d:1c:0c:3e:ca:16:
         d3:4c:69:1b:fe:d7:c5:57:a9:7c:78:ba:b5:e9:bc:99:f1:ce:
         87:82:9d:7e:93:1e:78:1c:b5:a9:4a:93:3f:3b:ce:8c:19:d8:
         3d:ea:65:17:e7:a8:60:78:4c:6f:a2:fa:f3:53:41:62:8f:32:
         81:b0:01:5d:26:90:f5:0a:35:87:9c:fc:f9:fc:6e:07:ce:4a:
         ad:90:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org