Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/1/34352e3139312e3134302e302f32322d3234203d3e20323639363734.roa
File:                     34352e3139312e3134302e302f32322d3234203d3e20323639363734.roa (raw, json)
Hash identifier:          s956qiCnwu37VrSpMJi+2WzEVDlxMsDMqSa7CWb2k7A=
Subject key identifier:   14:7D:DD:6A:45:38:9F:BC:95:B0:90:D9:55:D2:D5:8F:18:DA:7D:18
Certificate issuer:       /CN=6077E53B3F707D567A5818AC24D0EAC66B5E697C
Certificate serial:       17CFD50F78F060F90BDDB189A324022B133AE4E8
Authority key identifier: 60:77:E5:3B:3F:70:7D:56:7A:58:18:AC:24:D0:EA:C6:6B:5E:69:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6077E53B3F707D567A5818AC24D0EAC66B5E697C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/1/34352e3139312e3134302e302f32322d3234203d3e20323639363734.roa
Signing time:             Thu 04 Apr 2024 12:18:14 +0000
ROA not before:           Thu 04 Apr 2024 12:13:14 +0000
ROA not after:            Thu 03 Apr 2025 12:18:14 +0000
asID:                     269674
IP address blocks:        45.191.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cf:d5:0f:78:f0:60:f9:0b:dd:b1:89:a3:24:02:2b:13:3a:e4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6077E53B3F707D567A5818AC24D0EAC66B5E697C
        Validity
            Not Before: Apr  4 12:13:14 2024 GMT
            Not After : Apr  3 12:18:14 2025 GMT
        Subject: CN=147DDD6A45389FBC95B090D955D2D58F18DA7D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:48:93:62:34:d7:6f:c5:3e:04:12:d5:94:
                    df:10:f7:ee:e6:b1:6a:d9:8d:e3:c1:d0:dd:85:36:
                    4d:7d:e6:f0:4d:09:b0:06:2a:63:51:d7:39:36:e1:
                    e6:af:de:a1:e1:b1:5e:15:1e:c2:e6:79:f9:1b:5e:
                    f3:9d:58:a6:f9:fe:9e:71:51:6a:cf:13:38:2f:75:
                    ce:82:88:0d:dc:39:fc:bf:26:7b:6e:54:a1:f2:6b:
                    48:09:66:39:66:7d:05:55:11:62:a9:ac:b3:5f:6f:
                    ab:4e:9d:78:f1:68:ea:34:ef:45:a1:e2:30:7d:31:
                    63:5d:66:b5:39:e4:96:54:72:a4:89:21:d7:27:9a:
                    ec:e8:c9:ec:5a:50:11:7f:38:ac:4a:36:b1:c4:a4:
                    66:4a:f7:9c:69:5d:e9:d8:f4:e6:71:46:6e:60:6a:
                    36:c4:3c:1c:e2:09:42:1a:55:0b:87:5b:32:c1:fe:
                    77:c3:4f:6c:9d:2d:9b:84:5c:12:99:03:37:cc:1b:
                    48:53:b3:74:85:1f:83:20:e8:d0:27:3f:e6:aa:b5:
                    d7:d8:f4:b0:33:ea:25:50:14:be:51:80:de:e1:f8:
                    c0:5b:90:0f:3e:a3:ce:99:6b:57:9d:0d:54:ee:6b:
                    50:b1:63:27:de:f0:19:3d:47:d0:c8:2e:04:b5:46:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7D:DD:6A:45:38:9F:BC:95:B0:90:D9:55:D2:D5:8F:18:DA:7D:18
            X509v3 Authority Key Identifier:
                keyid:60:77:E5:3B:3F:70:7D:56:7A:58:18:AC:24:D0:EA:C6:6B:5E:69:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/1/6077E53B3F707D567A5818AC24D0EAC66B5E697C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6077E53B3F707D567A5818AC24D0EAC66B5E697C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/1/34352e3139312e3134302e302f32322d3234203d3e20323639363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:da:e0:22:57:1a:02:7b:c3:17:eb:fa:d6:c1:d5:21:85:
         b0:dc:db:93:c4:96:c3:f3:24:ee:56:6f:d4:27:d4:23:de:67:
         0d:bc:1e:d8:b3:8e:99:3b:3e:0d:7f:e8:1a:f9:67:c9:d9:7c:
         f0:31:cf:67:67:f2:7d:57:d8:46:e9:9b:58:5a:25:f1:94:8c:
         b5:cc:ce:72:12:74:97:40:50:26:d8:31:63:41:ea:4e:62:5e:
         cd:2a:ec:46:5c:c6:df:dc:db:76:84:b5:83:11:4a:1c:c3:b6:
         73:49:5f:a7:c4:ce:13:aa:ae:7f:e5:ec:f5:d9:9a:b8:4a:ff:
         5b:e3:24:f4:be:62:2c:8c:43:69:46:61:78:33:ea:0c:2d:3a:
         ef:5f:b7:0c:53:29:ab:ef:4c:ef:48:3d:dd:45:d4:28:49:1a:
         98:bc:c6:21:3e:99:64:29:4f:75:9f:75:36:ca:8a:fa:f9:f1:
         1e:da:db:e8:6c:4b:8d:08:34:46:43:a3:08:33:3f:b0:86:53:
         ea:45:ec:d4:3b:14:32:b8:a0:7a:de:0f:cc:41:39:9f:34:7a:
         51:b5:64:57:67:37:15:52:31:1a:32:fa:ce:88:b0:46:4f:9b:
         af:dd:1c:f4:b5:d2:74:a3:4b:b5:de:4a:89:e9:f0:b0:73:64:
         02:1c:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org