Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32322d3232203d3e20323638373231.roa
File:                     34352e3137312e3135322e302f32322d3232203d3e20323638373231.roa (raw, json)
Hash identifier:          1U3js2Q6RgWQ60X8Dn/hcF221dt/DXJ7eKX9zr6XqQA=
Subject key identifier:   D2:40:05:6B:B4:1D:A6:F3:06:0B:A2:B1:F4:45:47:49:3E:21:C2:E4
Certificate issuer:       /CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
Certificate serial:       3C5181E5A7AEAD0FA91CE3230D2ED39B8A95A333
Authority key identifier: AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32322d3232203d3e20323638373231.roa
Signing time:             Fri 29 Jul 2022 21:03:08 +0000
ROA not before:           Fri 29 Jul 2022 20:58:08 +0000
ROA not after:            Fri 28 Jul 2023 21:03:08 +0000
asID:                     268721
IP address blocks:        45.171.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:51:81:e5:a7:ae:ad:0f:a9:1c:e3:23:0d:2e:d3:9b:8a:95:a3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
        Validity
            Not Before: Jul 29 20:58:08 2022 GMT
            Not After : Jul 28 21:03:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:b7:70:ff:79:26:18:da:4b:da:7c:f1:98:
                    36:9e:df:ab:37:ee:62:dc:42:89:10:05:0a:74:66:
                    5e:fb:21:4d:fa:97:8b:7b:3c:5a:48:84:b2:7b:8e:
                    cb:e5:ea:59:f6:b7:52:c8:17:02:d1:a4:af:4c:b9:
                    f7:56:d4:fe:96:cf:1f:ec:79:c3:90:50:55:e7:de:
                    5f:8c:ba:4d:8b:3b:65:56:4a:95:0d:26:83:6f:96:
                    21:c2:10:48:9d:32:94:2c:68:8b:12:24:5e:cd:46:
                    c9:a1:f7:1d:ac:fd:7e:6e:68:5a:e6:70:3b:c9:89:
                    d4:43:69:4d:7b:10:dc:11:d0:28:58:39:3a:b2:13:
                    ee:69:a9:9e:57:43:a2:64:ac:3e:6b:0b:cb:13:17:
                    cf:45:35:4a:99:1b:fa:53:71:81:85:7a:57:74:9a:
                    6f:9e:a9:d5:82:ae:67:bb:73:d2:d3:24:26:50:b2:
                    f1:41:4e:e9:71:9f:49:6f:6f:86:e1:d4:c3:80:6e:
                    a0:7c:77:3f:7a:d6:0a:df:33:39:a1:87:3b:c6:b4:
                    44:a1:0d:ad:22:ad:b3:fd:36:11:ca:9b:88:59:d2:
                    cf:f7:c7:a2:08:eb:d2:c2:7c:ca:88:e2:d4:10:52:
                    58:2d:25:f2:86:29:a2:15:3b:e4:d7:56:76:e3:8d:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:40:05:6B:B4:1D:A6:F3:06:0B:A2:B1:F4:45:47:49:3E:21:C2:E4
            X509v3 Authority Key Identifier:
                keyid:AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32322d3232203d3e20323638373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:98:4a:1c:35:d4:09:87:70:8f:c7:98:ea:1a:27:b1:51:
         7e:f2:e6:52:a0:2d:d9:d8:cc:1e:e5:04:c2:36:11:02:87:24:
         6f:28:e1:5e:8a:07:c8:89:f6:87:e7:12:75:62:e7:6d:ac:d4:
         1c:05:c0:ad:7e:0a:4e:ae:e1:04:2e:8a:b8:10:1a:9b:84:70:
         49:21:05:1f:eb:9a:53:4a:fe:1c:dd:f1:0b:6f:7e:33:b6:fc:
         9f:1c:cf:5e:dd:4c:9c:b2:e8:b4:19:f9:33:86:e5:7d:9a:45:
         39:21:4a:c4:48:8b:12:34:c7:db:29:5b:68:10:20:a9:25:0a:
         50:4d:6d:99:46:4c:e3:32:7a:4a:67:67:e4:5c:bb:03:ba:fe:
         02:90:52:24:40:0a:90:0d:63:6e:c9:3d:18:5c:26:75:d8:1e:
         3a:40:a1:9f:7f:2c:e6:67:52:fd:fc:3d:66:db:19:3a:2e:13:
         ea:16:d0:6c:e4:37:a5:1f:3d:2d:c8:fd:60:97:53:c4:54:30:
         2e:66:a8:55:1e:2e:f8:e1:99:85:08:09:a3:cf:c5:69:d5:73:
         1b:77:bf:ea:f3:df:0f:47:ee:25:57:f1:6a:9b:c5:97:ba:a6:
         ba:5e:b0:f2:8f:26:82:6c:01:05:92:eb:49:d7:4c:4a:46:75:
         ae:0f:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org