Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/34352e372e3134382e302f32322d3234203d3e20323636353836.roa
File:                     34352e372e3134382e302f32322d3234203d3e20323636353836.roa (raw, json)
Hash identifier:          2zvHqLeh1JW9ZW+QH5F60hC/SG8/Uypw6HjDthsZNVc=
Subject key identifier:   AB:0D:7C:AF:61:EC:36:D2:17:41:B5:15:A0:9F:EC:2A:EA:C3:6E:0C
Certificate issuer:       /CN=8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE
Certificate serial:       41209709C0BA07996657EAAE71C1424549B756EA
Authority key identifier: 8C:4B:B5:E5:1A:22:64:D0:EE:E9:A0:E7:E5:9C:EA:20:8B:0A:2F:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/34352e372e3134382e302f32322d3234203d3e20323636353836.roa
Signing time:             Mon 13 Feb 2023 23:50:10 +0000
ROA not before:           Mon 13 Feb 2023 23:45:10 +0000
ROA not after:            Mon 12 Feb 2024 23:50:10 +0000
asID:                     266586
IP address blocks:        45.7.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:20:97:09:c0:ba:07:99:66:57:ea:ae:71:c1:42:45:49:b7:56:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE
        Validity
            Not Before: Feb 13 23:45:10 2023 GMT
            Not After : Feb 12 23:50:10 2024 GMT
        Subject: CN=AB0D7CAF61EC36D21741B515A09FEC2AEAC36E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:e6:85:1f:e1:5a:16:2c:d1:62:80:73:b3:
                    71:ad:94:be:13:7e:ea:33:84:5b:9a:2e:67:e4:20:
                    65:14:ec:33:ed:e3:6a:f1:50:44:c0:52:25:bb:54:
                    5d:aa:6b:18:83:38:6f:00:8d:cc:6e:3a:1c:73:7a:
                    29:f1:e4:de:7d:99:b3:a2:8d:f3:58:41:b5:fa:3a:
                    4b:90:38:4a:6e:92:cc:66:b7:f5:60:c6:d5:1f:3e:
                    cd:06:b1:88:57:f8:77:fd:39:53:64:0b:86:e2:3a:
                    ae:e8:3e:9a:d7:1f:a8:40:ba:64:13:74:51:79:ae:
                    24:bc:4b:5d:47:ea:a2:8b:72:ec:e8:e0:97:92:57:
                    ac:ad:5e:71:44:d7:62:b6:43:64:14:7e:58:8d:47:
                    5c:a8:3c:ab:b5:bf:b4:17:b7:6a:0c:cc:ae:89:db:
                    f2:7f:95:dc:ec:ce:8e:49:38:5e:77:3b:92:8a:25:
                    a7:24:49:53:8c:46:95:a6:0b:2f:06:7a:27:2b:02:
                    a6:af:f3:d2:11:6c:c6:c5:6e:71:ea:9b:30:2c:d0:
                    e6:17:63:1e:c4:53:cc:56:96:37:92:42:ea:b1:f6:
                    bd:ff:a6:89:ff:64:00:35:b1:1b:65:2c:71:39:02:
                    cf:fd:43:69:48:bd:17:1f:7c:f3:89:a2:71:ec:07:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0D:7C:AF:61:EC:36:D2:17:41:B5:15:A0:9F:EC:2A:EA:C3:6E:0C
            X509v3 Authority Key Identifier:
                keyid:8C:4B:B5:E5:1A:22:64:D0:EE:E9:A0:E7:E5:9C:EA:20:8B:0A:2F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4BB5E51A2264D0EEE9A0E7E59CEA208B0A2FFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/34352e372e3134382e302f32322d3234203d3e20323636353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:76:bb:6c:37:b3:07:af:4a:df:2f:28:8f:f4:2f:ef:03:
         a9:c9:6f:6c:46:59:c1:dc:81:fb:3e:33:81:d0:c1:d3:99:b2:
         a7:aa:e7:8c:f0:20:97:9e:b3:f2:45:b1:94:94:f3:5a:09:e2:
         b1:53:6e:d3:75:76:15:fe:85:ac:d1:6a:f2:59:c3:c3:bc:c1:
         09:d9:4b:7a:d2:b5:db:30:55:cf:25:62:99:59:e6:2b:06:3a:
         3d:3f:5a:41:0c:a0:34:66:32:d3:b5:85:41:65:1f:ca:66:1e:
         a5:77:02:0b:77:0b:86:ba:b2:55:e0:74:1f:82:11:16:9d:bc:
         4c:d0:1f:e0:92:7e:8e:5b:1e:52:b3:1c:fa:57:84:95:25:f4:
         50:fb:e0:0f:0f:35:2d:e1:cc:bb:e9:5d:02:12:ae:b4:bc:4a:
         ab:d9:2b:2d:1a:3d:90:b7:0d:f7:7b:a6:d6:4f:52:9a:84:8c:
         cc:80:98:c5:66:51:18:55:e0:eb:b2:86:55:76:42:d6:72:9a:
         11:0a:29:02:c3:4e:c5:55:57:1b:46:c5:c1:38:64:1c:e9:42:
         80:ec:11:cf:f5:15:71:f0:cd:7f:eb:61:84:01:a8:02:0f:11:
         06:14:8e:39:7a:2d:b5:a5:b5:f4:f4:92:9f:ea:d0:c9:c3:8d:
         53:55:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:39 2024 by rpki-client on console-ams.rpki-client.org