Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/34352e3137332e3234322e302f32332d3233203d3e20323638383435.roa
File:                     34352e3137332e3234322e302f32332d3233203d3e20323638383435.roa (raw, json)
Hash identifier:          2CuN+HsQCHHDSif4smTws+mHo1Sqbp40vAZeP76hqGU=
Subject key identifier:   95:FC:56:D0:AB:0D:9D:41:FB:39:1E:75:68:A2:BF:F3:B7:2F:E3:B6
Certificate issuer:       /CN=7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69
Certificate serial:       4F087452C775A649E4AD5972137F8243F674F6F3
Authority key identifier: 7D:8A:95:31:07:6B:16:11:BA:99:C6:F0:DE:67:D1:C2:3D:9D:4D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/34352e3137332e3234322e302f32332d3233203d3e20323638383435.roa
Signing time:             Tue 25 Oct 2022 14:00:03 +0000
ROA not before:           Tue 25 Oct 2022 13:55:03 +0000
ROA not after:            Tue 24 Oct 2023 14:00:03 +0000
asID:                     268845
IP address blocks:        45.173.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:08:74:52:c7:75:a6:49:e4:ad:59:72:13:7f:82:43:f6:74:f6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69
        Validity
            Not Before: Oct 25 13:55:03 2022 GMT
            Not After : Oct 24 14:00:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:47:1a:a6:03:59:c1:52:72:4c:f4:15:31:
                    a6:a8:ac:b1:5d:8e:2c:16:47:8b:70:96:6f:31:3d:
                    d9:df:7a:39:dd:96:57:90:74:79:d8:8d:48:26:ac:
                    24:31:87:eb:f6:35:c8:fb:22:62:63:fb:3a:17:66:
                    1c:85:bb:a7:8e:a0:4f:65:2a:a0:6d:42:f0:d7:8e:
                    0b:09:88:33:5d:8b:63:54:ec:e2:cc:3d:e7:a2:83:
                    fc:2e:aa:a7:91:88:a1:76:84:60:d7:80:da:9e:5d:
                    a9:ff:03:38:92:15:60:75:49:a3:da:56:34:3c:74:
                    b0:18:e8:23:a5:4d:3c:47:95:2c:33:3c:29:f9:d1:
                    4a:cf:56:8c:51:9e:5c:c1:40:9c:13:a3:cc:5d:5b:
                    30:85:b1:4a:70:bf:96:a6:7e:90:31:fa:e5:26:13:
                    06:36:17:99:14:51:3a:18:3a:40:3d:da:6e:b5:d1:
                    65:89:57:b1:71:f6:94:16:96:06:1d:16:27:4f:99:
                    45:80:52:6e:b4:08:40:2b:1c:df:f3:08:09:39:ad:
                    9c:1a:ef:7a:e8:36:9a:2c:3d:68:12:f1:19:e0:32:
                    18:82:d2:1e:30:99:11:22:63:bd:3f:f9:d4:ff:a9:
                    a9:ba:38:4b:f4:15:9a:ea:ed:32:90:44:be:49:52:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FC:56:D0:AB:0D:9D:41:FB:39:1E:75:68:A2:BF:F3:B7:2F:E3:B6
            X509v3 Authority Key Identifier:
                keyid:7D:8A:95:31:07:6B:16:11:BA:99:C6:F0:DE:67:D1:C2:3D:9D:4D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D8A9531076B1611BA99C6F0DE67D1C23D9D4D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HX3z3YpiLS9QubGAVEqGBhb1VVpkZCsgxGknQcP2wpSt/0/34352e3137332e3234322e302f32332d3233203d3e20323638383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:0e:17:8b:74:48:89:05:bb:08:9c:f4:a4:8a:36:de:83:54:
         6d:b2:2b:bc:f7:c8:ec:8f:44:be:29:92:e1:6e:33:aa:d2:fa:
         f3:55:e7:e8:ae:0c:7a:b9:f1:37:18:4c:fc:50:7a:c5:a6:92:
         13:e1:85:54:62:6b:bb:d4:46:a9:43:61:82:01:77:bf:5c:be:
         ec:94:bb:2a:90:70:5c:0c:a4:23:79:e6:10:d8:da:d4:83:da:
         30:0b:bf:39:9f:a1:41:56:fb:43:ca:e6:ba:da:db:a2:28:a7:
         c2:ff:c1:0d:25:20:21:04:26:8e:e9:46:d8:a4:0d:82:6e:19:
         05:38:bc:2d:31:8d:a8:46:fd:53:f8:d8:f6:0e:e7:70:9c:f0:
         8e:37:a9:5e:fd:98:35:05:94:40:6f:21:92:1f:43:b8:6c:13:
         88:22:50:eb:d9:e4:9f:34:65:d3:ca:7a:68:dc:b5:36:68:b2:
         7e:5a:56:a9:e9:df:80:e7:f1:f3:81:63:8b:8e:2d:c2:f1:e3:
         c9:2e:32:84:0b:5a:3f:f1:3e:99:ee:79:0c:74:93:32:4d:44:
         2a:73:5a:86:f0:a0:08:5c:78:27:82:dc:2b:8b:ee:49:2d:b1:
         d8:fb:ac:c2:f4:d4:c9:2e:31:77:97:df:2e:0b:da:65:90:ac:
         5b:87:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org