Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32342d3234203d3e20323638373231.roa
File:                     34352e3137312e3135322e302f32342d3234203d3e20323638373231.roa (raw, json)
Hash identifier:          52oNMPcFTqfYlfYzfMnig4Juce8vbgLdo13QaKcOz4E=
Subject key identifier:   45:0A:C6:DD:FD:DB:57:7E:B0:A0:7F:C5:47:90:A0:A6:A8:2E:E9:64
Certificate issuer:       /CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
Certificate serial:       3BAB53EE7C98F3C7B04B1485ACA47DFFC3D606FA
Authority key identifier: AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32342d3234203d3e20323638373231.roa
Signing time:             Fri 29 Jul 2022 21:03:07 +0000
ROA not before:           Fri 29 Jul 2022 20:58:07 +0000
ROA not after:            Fri 28 Jul 2023 21:03:07 +0000
asID:                     268721
IP address blocks:        45.171.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ab:53:ee:7c:98:f3:c7:b0:4b:14:85:ac:a4:7d:ff:c3:d6:06:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
        Validity
            Not Before: Jul 29 20:58:07 2022 GMT
            Not After : Jul 28 21:03:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:04:19:04:2b:ee:5a:45:4d:af:47:4b:aa:b2:
                    ab:09:8d:65:5b:45:42:84:2d:2b:2c:8e:67:84:a0:
                    db:bb:33:64:4d:7b:52:f2:5d:bf:4b:c6:33:24:78:
                    81:0c:58:08:aa:9f:63:1f:10:c8:c3:0d:8f:e9:2e:
                    2e:65:c5:d8:4f:81:a6:89:6b:b2:0e:ae:4e:a3:fd:
                    48:9f:ce:1e:db:a5:7a:74:1e:f2:75:1f:51:60:58:
                    bc:dd:e3:9f:ef:80:c6:4c:20:8d:12:36:48:f8:2b:
                    36:27:c3:26:ea:20:4d:96:74:95:0b:b2:02:0d:16:
                    30:de:68:39:ba:d2:e7:b3:10:2f:6f:fd:29:30:3c:
                    ab:bc:7b:f7:b5:72:29:9a:34:12:25:68:f8:57:50:
                    45:05:84:0b:ec:f6:08:99:ee:23:53:88:69:24:4a:
                    d2:dd:c7:36:0c:b6:08:eb:79:7c:8d:94:df:33:b8:
                    7d:f5:9e:a8:ae:b4:02:f7:37:41:36:ca:1f:5c:53:
                    6d:30:ad:8b:cf:7a:d4:e9:8e:23:a3:bf:c9:9c:1f:
                    87:7f:22:e9:36:60:39:96:5d:3f:6a:09:d9:d9:ca:
                    56:66:55:7b:3e:f2:13:16:a3:68:cb:7c:e4:41:06:
                    fc:66:f4:ba:77:f5:f5:e7:fc:6a:80:c8:5e:9d:ec:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0A:C6:DD:FD:DB:57:7E:B0:A0:7F:C5:47:90:A0:A6:A8:2E:E9:64
            X509v3 Authority Key Identifier:
                keyid:AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135322e302f32342d3234203d3e20323638373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:58:cb:a3:b2:0c:14:02:ee:58:c2:b0:26:a4:3b:75:e8:7f:
         4b:85:ef:b5:c3:29:fa:c3:44:fb:7e:21:0f:f6:4d:a3:29:e8:
         8b:ee:8b:25:30:34:a4:fe:03:aa:c7:18:3d:c5:1b:71:6d:81:
         37:8e:2d:f6:86:cc:1c:32:a3:a7:7c:78:16:e3:ba:8e:aa:b6:
         9d:71:f5:d5:81:83:3a:be:ab:db:7f:2a:4c:5b:77:25:ae:9d:
         93:c0:f0:76:df:3f:02:59:4a:41:8b:69:a0:da:96:72:9b:98:
         55:de:7b:68:4c:7a:f5:77:6a:6e:47:ee:64:d5:17:a9:52:a4:
         d5:91:62:53:cb:25:66:0b:6e:7d:85:a3:eb:dd:27:b2:2c:0f:
         00:3a:04:cd:ce:a5:7d:00:74:f9:42:44:24:20:be:c5:5a:8f:
         17:d8:56:01:7e:5e:a8:a7:93:5d:bc:fc:ec:c4:64:42:b3:fe:
         ee:25:21:8b:a7:0d:60:40:9b:aa:89:a7:b4:79:3a:4e:f1:5f:
         40:35:58:c1:d5:e8:ad:6c:bd:61:ef:a9:27:37:75:9b:47:ba:
         83:36:95:36:cd:ad:4f:e8:7f:bb:4e:29:7b:18:21:b7:2d:de:
         b7:1d:1b:8f:fe:9f:28:e8:1b:da:52:6e:07:dd:21:81:53:a3:
         3d:f8:7d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org