Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/34352e3137332e3234302e302f32322d3232203d3e20323638383435.roa
File:                     34352e3137332e3234302e302f32322d3232203d3e20323638383435.roa (raw, json)
Hash identifier:          RZvDBPTaKMNyLU3AIVX+ts5+G+mwQ6IGofAw91XhzcM=
Subject key identifier:   E8:0A:91:D9:8A:7D:9D:71:F2:29:69:89:B8:05:EC:23:F3:27:A8:9F
Certificate issuer:       /CN=7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69
Certificate serial:       3B3EF7D93C8F30E7E5AA32E8686E99FC7E8C7B20
Authority key identifier: 7D:8A:95:31:07:6B:16:11:BA:99:C6:F0:DE:67:D1:C2:3D:9D:4D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/34352e3137332e3234302e302f32322d3232203d3e20323638383435.roa
Signing time:             Tue 25 Oct 2022 14:00:00 +0000
ROA not before:           Tue 25 Oct 2022 13:55:00 +0000
ROA not after:            Tue 24 Oct 2023 14:00:00 +0000
asID:                     268845
IP address blocks:        45.173.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3e:f7:d9:3c:8f:30:e7:e5:aa:32:e8:68:6e:99:fc:7e:8c:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69
        Validity
            Not Before: Oct 25 13:55:00 2022 GMT
            Not After : Oct 24 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:96:65:43:3f:56:bc:8e:fb:51:b1:a8:3d:
                    6e:f7:b4:5c:10:25:0c:5b:25:20:10:a2:07:09:5b:
                    3b:d6:58:03:86:33:25:b6:ea:dc:23:96:54:af:e5:
                    57:2d:02:5c:05:40:f3:2f:05:9d:5b:72:f7:f0:44:
                    b4:38:cf:bf:b9:1a:9a:28:9c:11:fd:4f:cf:1e:60:
                    06:28:45:42:7c:ac:4e:3e:bf:d4:9f:d1:4b:ef:50:
                    2d:4e:3e:ec:4b:94:c9:52:56:7f:c1:92:0a:50:2c:
                    f2:84:09:9e:08:2a:72:29:72:15:40:5a:32:72:94:
                    8b:07:88:77:f1:bb:0e:1d:19:93:3e:11:4f:5f:73:
                    19:93:76:3c:f7:c3:6c:da:18:7b:8d:09:ef:4b:41:
                    71:e0:ae:43:41:ad:f4:47:62:f5:25:fb:e9:c2:f2:
                    5f:ea:b0:10:7c:4c:59:e5:0e:bf:a8:74:4a:31:4a:
                    11:0c:a8:fc:82:a2:57:50:93:05:b5:a9:73:fe:d5:
                    68:12:e3:96:21:d1:6b:af:71:72:c5:d1:95:6e:e4:
                    01:3c:d9:4c:64:7c:33:e5:38:92:d6:f3:2f:15:fd:
                    31:cd:39:2e:bb:1b:4e:b6:d8:ec:f7:21:a8:f3:f2:
                    4d:81:12:44:03:11:1e:1d:50:29:08:4b:03:74:01:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0A:91:D9:8A:7D:9D:71:F2:29:69:89:B8:05:EC:23:F3:27:A8:9F
            X509v3 Authority Key Identifier:
                keyid:7D:8A:95:31:07:6B:16:11:BA:99:C6:F0:DE:67:D1:C2:3D:9D:4D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/34352e3137332e3234302e302f32322d3232203d3e20323638383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:62:a3:0e:ab:09:fa:18:c1:5f:13:ff:e0:96:f0:bc:05:e6:
         9f:55:c1:0a:0d:4f:1e:18:35:95:c8:cf:ef:71:5c:51:48:2d:
         a4:99:12:7f:07:cd:8b:d5:1c:b3:e6:04:23:f6:bf:ee:3f:6e:
         8e:ec:df:9b:54:d8:6c:c3:b1:eb:38:39:2a:fb:78:88:a7:37:
         36:6f:93:d2:63:54:57:6d:ba:23:bb:ce:6c:1a:9c:02:75:0c:
         b7:ae:82:9b:99:89:87:6c:8d:e6:ab:1b:34:7a:86:1c:ab:b0:
         49:25:db:8c:de:da:ce:a1:64:3d:ce:7c:85:15:0b:64:c7:77:
         58:29:d6:d7:16:21:8b:67:17:30:b5:5a:a9:5e:ab:30:fc:fa:
         3b:97:44:19:2b:c6:4e:bd:61:c2:3c:5f:6d:89:d3:66:4b:11:
         28:8f:dc:03:a6:f8:3f:1b:49:6a:5d:64:c0:3b:6d:70:15:9a:
         5a:19:a5:4e:1a:b1:67:d7:7a:f2:f6:bf:56:91:e7:a9:1d:ec:
         06:c1:22:16:81:1b:6e:a5:a8:da:c4:84:9d:b4:eb:6b:b1:fd:
         ea:96:57:00:09:e8:d5:dc:74:e1:44:c9:09:fc:fd:d9:65:90:
         d3:33:9a:ec:46:95:74:5d:8d:7d:be:1a:b4:e2:6a:8f:a8:d8:
         a5:8f:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org