Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135342e302f32332d3233203d3e20323638373231.roa
File:                     34352e3137312e3135342e302f32332d3233203d3e20323638373231.roa (raw, json)
Hash identifier:          4PGbJColDiPSp4r+Q96b7NF/jw3Y/V7gjanJLNzzKYA=
Subject key identifier:   DE:3A:E2:EE:93:6F:FD:6F:A1:A4:C0:80:D5:14:6E:44:15:97:B0:98
Certificate issuer:       /CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
Certificate serial:       4EF64F0F51A5AC1A80DB62EF6A27D459743CD5D7
Authority key identifier: AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135342e302f32332d3233203d3e20323638373231.roa
Signing time:             Fri 29 Jul 2022 21:03:07 +0000
ROA not before:           Fri 29 Jul 2022 20:58:07 +0000
ROA not after:            Fri 28 Jul 2023 21:03:07 +0000
asID:                     268721
IP address blocks:        45.171.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f6:4f:0f:51:a5:ac:1a:80:db:62:ef:6a:27:d4:59:74:3c:d5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E
        Validity
            Not Before: Jul 29 20:58:07 2022 GMT
            Not After : Jul 28 21:03:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:6a:a9:0b:63:e2:30:8f:8d:be:ab:c9:b7:
                    97:49:e5:51:00:3c:68:e9:b3:09:b9:49:3b:b1:59:
                    14:16:6d:14:39:13:9e:73:c7:18:ac:c2:fd:67:33:
                    f9:dd:1e:01:32:ed:c3:26:05:92:bd:5b:03:76:1f:
                    9c:a6:86:37:8e:f6:d8:db:26:2e:e4:5f:65:ec:00:
                    f5:f8:be:b7:92:bb:49:ee:4a:77:fa:19:35:48:77:
                    7f:0b:eb:35:4a:e0:78:79:32:7b:08:0a:8a:dc:24:
                    28:c7:94:13:3c:f4:99:66:dd:72:bc:4f:44:69:9b:
                    a3:6f:fc:77:7e:f7:59:bf:ee:0e:33:fd:c0:97:27:
                    bd:ca:11:da:45:c2:4c:2a:5f:97:06:95:29:a3:51:
                    1d:fd:92:73:0a:8a:c8:4f:69:d5:c4:e1:f0:1f:59:
                    82:19:65:ec:27:04:cb:9e:54:3b:2d:bd:be:c5:f0:
                    6e:76:23:33:48:d3:c9:a6:76:3a:0a:4a:23:28:08:
                    05:79:25:fc:62:c4:1a:c4:e4:18:dd:3a:51:27:2d:
                    e3:6b:84:20:0c:f5:6e:03:cf:76:f1:68:7d:01:cd:
                    b2:2e:cd:f8:86:ac:b1:8c:9a:cc:29:cf:82:6a:25:
                    e8:4e:53:83:53:ce:0d:f6:92:16:f9:38:1b:a6:7c:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3A:E2:EE:93:6F:FD:6F:A1:A4:C0:80:D5:14:6E:44:15:97:B0:98
            X509v3 Authority Key Identifier:
                keyid:AA:7C:F7:DB:80:D4:B6:5B:4A:DD:D6:29:F3:88:E2:90:8C:C6:C0:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA7CF7DB80D4B65B4ADDD629F388E2908CC6C05E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/34352e3137312e3135342e302f32332d3233203d3e20323638373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:7e:e9:f7:cf:3e:49:16:7a:90:44:f2:33:75:08:e6:0d:09:
         2b:0f:69:8c:7a:d5:6e:e4:1a:86:c8:da:6a:c9:c9:44:ea:54:
         4f:02:d5:c9:36:a1:33:36:83:45:c5:3b:da:34:f5:4c:2e:11:
         2d:08:1b:88:28:11:d6:72:46:b9:b6:69:1e:84:75:74:4d:86:
         b2:7b:61:aa:32:20:15:ce:93:b5:f5:92:a5:0b:70:07:05:3e:
         7a:b7:3d:2b:56:1a:e5:c7:80:31:d2:24:8f:2f:40:0c:8d:69:
         c6:bc:2e:ce:c5:3c:b1:9b:d3:80:65:73:d4:e8:d3:e3:45:11:
         a1:2f:9b:0d:5b:5b:31:b9:44:b7:e8:62:bd:cf:50:b9:e3:85:
         53:ba:71:db:90:2e:4b:04:91:46:d2:80:1e:78:de:59:7c:3e:
         5f:b8:1b:1c:d6:a3:57:52:a3:3d:f3:ed:22:a3:e3:18:06:dd:
         3d:f6:f8:bb:3f:1a:7f:46:1b:ee:63:67:af:0a:7f:20:4b:7f:
         4d:6b:21:8c:3e:01:d5:ee:fa:9f:66:66:32:95:2b:a9:5f:24:
         70:a8:74:b6:41:f2:d3:5c:3d:26:c7:b8:c8:57:f3:52:ef:b3:
         4a:0e:26:ec:b3:4a:76:d1:14:dd:0b:e0:f1:a5:98:d7:64:44:
         e5:8c:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org