Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132382e302f32322d3234203d3e20323638373730.roa
File:                     34352e3137322e3132382e302f32322d3234203d3e20323638373730.roa (raw, json)
Hash identifier:          YTT6fbS+XysXEgdPW6bIN/XwAXVZFD0jAqnZV6x0AGg=
Subject key identifier:   A0:11:EB:FC:B5:A4:4E:8B:1E:EC:58:69:65:F9:98:D6:79:B7:64:6A
Certificate issuer:       /CN=F9163E8D87C81BF724750C693F14B5ADB55775F2
Certificate serial:       51E7E83D69AA484F9B73ACB2E6A577B766857F08
Authority key identifier: F9:16:3E:8D:87:C8:1B:F7:24:75:0C:69:3F:14:B5:AD:B5:57:75:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9163E8D87C81BF724750C693F14B5ADB55775F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132382e302f32322d3234203d3e20323638373730.roa
Signing time:             Tue 12 Mar 2024 18:31:46 +0000
ROA not before:           Tue 12 Mar 2024 18:26:46 +0000
ROA not after:            Tue 11 Mar 2025 18:31:46 +0000
asID:                     268770
IP address blocks:        45.172.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e7:e8:3d:69:aa:48:4f:9b:73:ac:b2:e6:a5:77:b7:66:85:7f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9163E8D87C81BF724750C693F14B5ADB55775F2
        Validity
            Not Before: Mar 12 18:26:46 2024 GMT
            Not After : Mar 11 18:31:46 2025 GMT
        Subject: CN=A011EBFCB5A44E8B1EEC586965F998D679B7646A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:e0:29:68:4d:a4:a5:14:17:7e:08:47:7a:
                    ff:39:e1:ef:9a:38:3d:67:e7:1c:ea:84:88:7c:e4:
                    f3:fa:b1:e2:5c:a0:36:94:7f:67:88:f4:a5:69:06:
                    9c:79:f3:da:9b:30:e8:ef:f2:68:c9:0a:ad:3d:03:
                    d9:f3:36:7b:51:f8:68:b8:72:5a:58:53:0d:ba:8c:
                    69:6f:32:d1:18:4a:6c:21:3f:61:56:e5:97:ae:65:
                    72:28:bb:3d:15:19:d5:04:d9:f9:3f:28:2a:72:2c:
                    d1:1f:f7:bb:41:8b:3c:55:17:ce:0c:a0:42:ac:21:
                    f5:4b:21:f4:cd:da:49:f0:da:a9:e8:1f:9e:ea:4e:
                    87:a8:21:9f:11:49:76:2e:50:45:15:60:58:74:97:
                    76:c7:38:11:e4:0e:27:47:7d:76:b5:53:65:6b:bf:
                    88:b3:d0:f8:f6:cb:7f:47:65:91:57:8d:d1:0b:fb:
                    d2:82:ba:0e:0a:a7:83:75:07:2b:0c:88:fe:64:eb:
                    3c:a3:30:aa:fe:02:1f:e2:d2:37:23:a5:5e:72:c9:
                    c3:2e:2e:04:e5:2a:a5:09:cf:6e:86:6e:71:76:52:
                    e6:76:76:44:fa:67:99:af:66:d1:2e:6a:f3:1b:db:
                    8f:f2:af:05:23:e3:39:de:83:f2:27:0c:3f:20:37:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:11:EB:FC:B5:A4:4E:8B:1E:EC:58:69:65:F9:98:D6:79:B7:64:6A
            X509v3 Authority Key Identifier:
                keyid:F9:16:3E:8D:87:C8:1B:F7:24:75:0C:69:3F:14:B5:AD:B5:57:75:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/F9163E8D87C81BF724750C693F14B5ADB55775F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9163E8D87C81BF724750C693F14B5ADB55775F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/0/34352e3137322e3132382e302f32322d3234203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:02:32:ca:1a:bf:41:8e:43:39:2e:67:b2:02:85:a4:bd:45:
         ff:e8:bf:4e:87:cc:c4:4f:93:47:47:c4:7e:e7:c6:4e:1b:95:
         29:35:fa:8b:e7:44:74:38:0f:47:8b:bb:95:e1:3e:f9:23:ad:
         32:e0:d2:72:de:7f:fd:79:31:34:c2:4a:8d:d2:6f:8e:4f:6c:
         44:6f:e5:f9:11:95:0f:37:d8:21:15:a0:bd:17:b3:57:55:7e:
         1f:31:1b:9f:ec:9d:25:a9:68:d2:25:3c:02:e2:12:af:c6:59:
         99:00:bb:8e:ee:4a:4a:98:19:ba:20:e5:78:6d:cf:4f:6a:4d:
         48:5e:0b:6d:48:68:84:79:a8:d6:04:08:2f:c0:86:64:75:5b:
         8e:dd:b2:ad:8b:84:1f:55:00:54:c5:89:fd:82:fe:0a:f1:0d:
         e5:44:fe:38:f1:dc:a3:f3:95:2e:a4:32:d5:a7:18:a3:79:08:
         b5:23:10:f1:38:40:61:95:ba:b2:f2:2b:4c:3a:50:ed:55:c8:
         d8:cb:4e:6c:3d:cc:6f:9a:01:5b:00:65:d7:7b:b8:54:b7:05:
         a7:da:e2:d7:c6:60:83:b1:34:e0:39:a5:84:4d:42:df:c6:ac:
         d8:6e:b8:ce:3e:45:cc:45:44:96:d4:50:c0:d8:44:ba:50:1c:
         8a:26:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org