Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38322e302f32342d3234203d3e20323637333435.roa
File:                     34352e3233342e38322e302f32342d3234203d3e20323637333435.roa (raw, json)
Hash identifier:          Mpbh67DmLpIddCjNGlmDeYXMqApnlCfFZ6JLj3eCWdA=
Subject key identifier:   7C:B3:E3:20:D2:DC:CF:D8:47:B6:21:50:13:54:22:57:6F:0D:1B:0D
Certificate issuer:       /CN=867EA8A0A69F78E626EF5B45180018958C3CA167
Certificate serial:       1568140EDEB4252623181F220E42A6B00E72A6BE
Authority key identifier: 86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38322e302f32342d3234203d3e20323637333435.roa
Signing time:             Tue 30 Jan 2024 16:36:21 +0000
ROA not before:           Tue 30 Jan 2024 16:31:21 +0000
ROA not after:            Tue 28 Jan 2025 16:36:21 +0000
asID:                     267345
IP address blocks:        45.234.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:68:14:0e:de:b4:25:26:23:18:1f:22:0e:42:a6:b0:0e:72:a6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=867EA8A0A69F78E626EF5B45180018958C3CA167
        Validity
            Not Before: Jan 30 16:31:21 2024 GMT
            Not After : Jan 28 16:36:21 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:ba:48:73:c6:e4:2f:1e:0a:84:54:b8:f9:
                    22:3a:e1:c8:31:4c:1c:97:4e:33:f5:e9:28:4a:a7:
                    b8:af:74:07:52:6f:1f:81:a6:f6:1e:7a:9f:cb:d2:
                    4c:f9:06:f1:4b:7c:73:9a:e5:d7:a1:3c:e7:22:2a:
                    81:ee:c2:cd:ab:20:ab:b8:be:04:c6:ca:71:13:89:
                    ab:16:f8:f9:54:31:4b:2e:0e:2d:c2:e9:13:fd:ba:
                    26:6d:73:4d:08:df:c9:87:4f:8f:63:7c:72:7d:7c:
                    19:8a:c8:66:52:83:fc:2e:45:4a:0b:e0:9b:18:fa:
                    bd:58:86:d2:8c:9a:08:10:1c:1d:c6:f5:b0:ab:16:
                    78:b2:a6:1b:a5:e1:88:6e:b8:4a:a3:9c:c0:1d:cb:
                    93:fa:c8:c5:7f:cd:e4:24:cc:a0:11:b8:df:16:10:
                    e6:8c:d4:f2:80:17:08:bf:c9:5d:b8:76:cb:9a:1d:
                    d5:25:c9:a2:45:3b:f5:fe:9f:09:13:49:b5:75:f5:
                    bd:f9:dd:c9:fb:79:37:11:cd:46:4b:bd:82:db:79:
                    40:14:0f:79:fd:ca:07:07:31:d5:99:b3:8f:2e:03:
                    56:43:52:f0:37:4d:ba:22:4a:c1:46:2c:fa:ae:bc:
                    19:f2:19:2e:c5:4e:d9:91:3c:30:f0:2d:0b:aa:c8:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B3:E3:20:D2:DC:CF:D8:47:B6:21:50:13:54:22:57:6F:0D:1B:0D
            X509v3 Authority Key Identifier:
                keyid:86:7E:A8:A0:A6:9F:78:E6:26:EF:5B:45:18:00:18:95:8C:3C:A1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/867EA8A0A69F78E626EF5B45180018958C3CA167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/867EA8A0A69F78E626EF5B45180018958C3CA167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/0/34352e3233342e38322e302f32342d3234203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:ac:bf:07:db:be:e9:0c:7a:e8:d5:71:5e:79:d7:3b:cd:9c:
         43:4d:60:cb:06:82:d8:91:a4:9a:81:df:00:c8:2a:c6:68:84:
         21:53:ea:c8:44:e4:68:44:21:bf:f4:47:7b:26:10:25:21:48:
         7e:fe:78:e5:01:7b:b8:9c:55:54:88:05:53:92:66:b4:cc:f6:
         49:ef:2d:35:ae:13:c7:eb:1e:4f:96:ca:d6:96:86:78:2c:df:
         72:ee:53:1c:56:df:fc:19:2a:97:31:c4:61:90:52:96:01:22:
         71:ab:9b:ea:22:9c:1d:72:3f:98:43:ad:76:27:27:f6:ed:b2:
         7e:be:68:16:3d:31:e1:3a:53:14:16:d1:c9:6e:0f:71:41:9e:
         63:ab:4e:f3:de:b7:ff:da:71:ae:1a:6b:4b:3f:e3:8b:ec:51:
         54:94:c8:44:a2:7f:9d:42:8f:d6:50:0c:28:4e:15:ef:65:32:
         d6:ed:88:49:a7:8d:f8:1f:c4:a3:2a:8b:3a:c8:3f:f1:1d:f2:
         6b:96:bf:0c:e9:e1:8c:54:8c:67:bb:7a:e5:6a:4b:2d:50:7e:
         dd:4b:c5:df:f2:a0:2a:08:a9:74:aa:d7:fc:66:40:4f:02:9b:
         3e:db:11:0c:0b:7a:dd:0d:b5:a5:9c:37:9f:87:69:4c:91:d8:
         b3:97:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org