Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa
File:                     34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa (raw, json)
Hash identifier:          iHw34eMoEidm4pOuPM30qwnNa3i4HaCaJo5+GPv4lPA=
Subject key identifier:   85:4B:34:FF:DF:C8:BF:F7:46:11:C9:6D:1B:77:43:79:0F:EC:41:1A
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       610CBDB98870ED1537091BCC1088F4475574C86A
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 15:01:30 +0000
ROA not before:           Wed 05 Apr 2023 14:56:30 +0000
ROA not after:            Wed 03 Apr 2024 15:01:30 +0000
asID:                     269096
IP address blocks:        45.175.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:bd:b9:88:70:ed:15:37:09:1b:cc:10:88:f4:47:55:74:c8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 14:56:30 2023 GMT
            Not After : Apr  3 15:01:30 2024 GMT
        Subject: CN=854B34FFDFC8BFF74611C96D1B7743790FEC411A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:bd:c2:e5:bb:1d:51:97:88:8b:0a:17:9e:
                    66:d7:0b:a3:22:46:63:c4:71:28:67:73:0c:5d:90:
                    ba:6b:b6:73:63:29:e0:c0:03:62:32:ee:35:5c:a3:
                    9b:3d:8c:26:e3:49:a2:bc:1c:b5:e4:22:51:19:c7:
                    c6:37:d6:c5:8c:b0:3c:dc:74:ac:e4:e8:e4:f8:c0:
                    dd:96:33:e3:2b:c5:00:59:9f:97:2c:d3:53:fd:fe:
                    be:5c:76:c8:2b:90:ae:02:79:00:b2:b7:ee:69:b6:
                    63:d6:24:79:01:b9:7f:dc:a1:97:03:8c:15:3a:fc:
                    57:f1:52:85:85:f2:28:34:e3:25:cf:56:a2:5b:4d:
                    18:18:b8:93:89:19:0b:90:21:a4:b9:b9:ce:6c:ee:
                    c6:eb:b8:cb:95:da:f9:10:ca:f3:6a:50:04:cb:95:
                    d1:e0:c7:1c:fb:64:d1:1e:54:c4:68:e1:39:61:de:
                    ed:e1:c0:32:d2:0f:3b:cd:a8:d1:38:3f:b8:e6:6a:
                    57:91:be:61:54:3a:29:25:14:38:1d:23:d5:0f:76:
                    f8:ee:7f:8e:e8:30:5e:de:e0:94:66:b3:c9:e3:5c:
                    20:55:60:6d:b2:7a:6d:4b:b6:67:82:55:8b:49:46:
                    e7:4a:1c:19:38:1c:78:eb:f4:e4:53:46:c9:de:f5:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4B:34:FF:DF:C8:BF:F7:46:11:C9:6D:1B:77:43:79:0F:EC:41:1A
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:96:15:79:bc:2c:ef:d7:31:37:d1:de:b4:cb:83:b3:c7:9e:
         44:55:1f:d8:b5:eb:88:a3:d1:36:82:4d:8b:e2:16:a2:46:82:
         3f:3f:68:b4:aa:61:94:9a:81:b3:d2:b5:97:a2:13:d6:c0:fc:
         b0:75:14:f4:cf:54:5a:76:42:ed:8a:7b:5d:f4:ec:b6:03:8d:
         80:b9:86:8b:a1:90:3a:77:b6:68:8f:42:24:c8:79:be:71:e8:
         61:07:bb:3e:68:a6:48:fd:b7:33:da:81:46:58:0d:be:fd:2e:
         36:c4:ce:14:81:cf:6b:e7:7a:5e:81:80:42:08:88:49:7c:44:
         76:dc:27:e3:94:da:70:b3:82:98:00:00:78:3a:87:28:1d:7e:
         9a:2e:77:03:5e:c6:99:0f:7a:5c:3e:6e:e0:dc:dc:31:c9:0c:
         fe:5c:00:e1:83:59:d1:e9:21:97:08:49:58:3e:8c:fb:4a:14:
         0a:e0:95:03:d5:ae:a9:7d:d1:1e:53:b7:8d:d6:f0:28:52:41:
         9f:bd:79:3a:5d:c8:c5:f0:f6:d1:36:21:5e:4b:c2:ff:ae:22:
         cf:7f:b1:f3:94:5e:0f:9d:80:a3:a6:f2:e9:e2:b4:c1:49:b0:
         78:4a:cf:12:28:b5:2b:47:15:d8:63:38:13:c7:c2:3a:c0:d6:
         fe:9f:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org