Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa
File:                     34352e3136312e39362e302f32332d3233203d3e20323638343633.roa (raw, json)
Hash identifier:          /ZHjqidJI/7NaIy4REA3wU1GO3aKxznE47QA93ZIBQE=
Subject key identifier:   55:72:B9:CA:C8:72:62:55:6E:85:E2:6F:28:4F:41:8D:82:35:B5:C9
Certificate issuer:       /CN=C794730385E4254A920ABD4CDF13B219AA4C99E6
Certificate serial:       25D9BD0A1302591005395D7EFD9F0E2C87334D8F
Authority key identifier: C7:94:73:03:85:E4:25:4A:92:0A:BD:4C:DF:13:B2:19:AA:4C:99:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C794730385E4254A920ABD4CDF13B219AA4C99E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa
Signing time:             Mon 18 Dec 2023 19:08:15 +0000
ROA not before:           Mon 18 Dec 2023 19:03:15 +0000
ROA not after:            Mon 16 Dec 2024 19:08:15 +0000
asID:                     268463
IP address blocks:        45.161.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d9:bd:0a:13:02:59:10:05:39:5d:7e:fd:9f:0e:2c:87:33:4d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C794730385E4254A920ABD4CDF13B219AA4C99E6
        Validity
            Not Before: Dec 18 19:03:15 2023 GMT
            Not After : Dec 16 19:08:15 2024 GMT
        Subject: CN=5572B9CAC87262556E85E26F284F418D8235B5C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:02:0f:86:be:45:4d:44:be:8d:57:f9:27:
                    4c:3f:f8:22:2c:d0:49:f1:49:c9:fb:05:1f:56:77:
                    95:71:23:77:9c:e6:f2:18:38:37:48:46:dd:e8:c4:
                    1e:8d:96:c0:d9:f7:98:c3:b4:5c:0a:25:fe:ce:71:
                    67:65:a1:8e:00:9b:e8:2f:fc:88:7c:22:f4:a0:d8:
                    0e:13:b1:fb:2d:3d:a4:db:a8:2e:3d:fd:59:21:79:
                    9c:c3:4d:d6:c5:48:29:fa:af:58:35:ce:04:0e:30:
                    f4:c7:c7:cb:fa:85:8f:5c:86:ca:d7:c9:3f:88:c4:
                    bb:58:a3:67:dd:dc:12:8e:e8:25:41:79:2a:e5:6d:
                    48:25:45:05:a9:5b:f2:25:00:5f:08:65:2b:3d:d9:
                    65:f4:7a:b1:96:ca:61:8b:b2:4d:e0:f1:ea:24:14:
                    f1:2e:b7:60:2c:70:f0:d7:10:13:59:c3:fa:42:f9:
                    8d:d5:7f:a4:cd:db:02:fd:63:25:3c:02:9c:e2:6d:
                    57:3e:be:0b:b0:ff:f6:51:37:43:5b:29:95:5b:8b:
                    7d:09:bf:52:fb:49:4e:c9:c1:fa:95:b2:52:a9:01:
                    59:7c:9a:95:72:c1:d5:a6:c1:a5:5b:1f:a5:4f:d2:
                    78:30:4f:ac:3e:dd:69:97:95:df:60:e3:60:ee:21:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:72:B9:CA:C8:72:62:55:6E:85:E2:6F:28:4F:41:8D:82:35:B5:C9
            X509v3 Authority Key Identifier:
                keyid:C7:94:73:03:85:E4:25:4A:92:0A:BD:4C:DF:13:B2:19:AA:4C:99:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/C794730385E4254A920ABD4CDF13B219AA4C99E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C794730385E4254A920ABD4CDF13B219AA4C99E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32332d3233203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:c8:91:bb:4f:e8:81:a5:06:67:88:54:6c:3b:e9:fa:9d:fc:
         94:f7:e1:ce:dd:fa:00:42:6d:1e:66:16:d9:0a:b3:67:d4:88:
         07:c3:76:33:64:35:e5:d0:20:a1:14:7f:ca:7c:f5:7f:e2:c2:
         ca:5d:18:3c:d0:ad:74:8f:c1:dc:f3:9e:e4:63:7d:72:63:67:
         4d:e9:72:d1:f2:17:4c:3b:5c:fc:0b:53:dc:23:25:13:03:bc:
         4d:39:c7:84:29:21:4c:b2:de:0f:57:59:d1:d2:c4:6f:f7:a4:
         89:7a:83:be:f2:96:e0:77:4a:9a:ba:0f:05:5b:26:4e:cf:18:
         3e:c9:2c:ac:4c:26:67:5a:52:45:01:f5:5c:d2:a0:39:6b:d0:
         44:ec:f6:bc:c1:c3:82:2c:b2:d4:02:93:e3:2c:c0:9c:35:28:
         7e:7c:2b:6d:03:a4:35:96:2f:bd:76:5f:71:f2:d1:1d:fe:1a:
         04:08:d1:6e:24:e3:46:1b:ae:28:f4:3b:09:8a:c9:77:35:a1:
         51:e4:97:b0:b1:2c:30:51:11:d3:46:a3:b8:71:98:79:79:a8:
         65:95:58:7c:33:71:e9:e2:0a:d1:86:a1:36:f6:58:99:7a:bb:
         e5:22:b1:77:ac:9c:3c:96:1f:54:fa:c8:4f:b7:c7:74:bd:e8:
         6b:1e:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org