Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/34352e3137322e3134342e302f32322d3234203d3e203238333730.roa
File:                     34352e3137322e3134342e302f32322d3234203d3e203238333730.roa (raw, json)
Hash identifier:          0Y1orWoT1kke8NsXR59wGMRxRbIeAME5E+Ex0JPnGy0=
Subject key identifier:   E9:00:1B:42:BD:55:74:6F:4F:E8:92:C1:8C:74:46:B0:AE:78:85:07
Certificate issuer:       /CN=ACED7F3D5F45458F3754EC755B6951DE6D19CDDE
Certificate serial:       5DC587FF2D5D2FE248D1EEE7F91BB014E5ED7E8A
Authority key identifier: AC:ED:7F:3D:5F:45:45:8F:37:54:EC:75:5B:69:51:DE:6D:19:CD:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/34352e3137322e3134342e302f32322d3234203d3e203238333730.roa
Signing time:             Wed 07 Feb 2024 23:07:17 +0000
ROA not before:           Wed 07 Feb 2024 23:02:17 +0000
ROA not after:            Wed 05 Feb 2025 23:07:17 +0000
asID:                     28370
IP address blocks:        45.172.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c5:87:ff:2d:5d:2f:e2:48:d1:ee:e7:f9:1b:b0:14:e5:ed:7e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACED7F3D5F45458F3754EC755B6951DE6D19CDDE
        Validity
            Not Before: Feb  7 23:02:17 2024 GMT
            Not After : Feb  5 23:07:17 2025 GMT
        Subject: CN=E9001B42BD55746F4FE892C18C7446B0AE788507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:f5:e3:8a:65:a3:f9:db:1c:1f:a8:1f:47:
                    ba:59:a3:bd:fb:0a:0b:1c:df:aa:52:92:ad:0d:65:
                    f1:2d:85:1c:96:c8:6c:e7:83:70:0a:df:c1:ef:28:
                    51:88:2e:9c:90:0e:f6:6b:49:f9:a6:a4:f8:7c:85:
                    6a:2d:70:6b:f6:95:b3:f0:31:84:80:44:6e:3d:44:
                    a9:8d:dc:4b:cb:87:76:bc:20:5a:c8:82:f4:fe:2e:
                    4b:2e:85:a2:ab:9a:22:7b:6a:10:4f:08:ab:54:61:
                    69:1e:4b:47:1b:c9:d3:83:a5:03:4d:4f:dd:80:5c:
                    15:ca:33:a1:10:63:11:54:4b:47:17:92:19:cc:fb:
                    43:b0:2d:d8:a1:25:36:67:f9:32:e5:11:9b:a7:33:
                    4c:06:2b:e7:73:80:b2:8d:23:bf:ef:66:73:0b:82:
                    92:95:c9:d6:f9:6a:76:93:d8:4f:ba:57:d6:46:8e:
                    3e:d9:8b:49:9b:9d:c1:e3:15:6a:60:43:fd:c6:88:
                    39:b1:b0:1e:c0:0d:23:3d:df:95:be:f4:af:27:2c:
                    fd:de:37:46:5e:59:6a:46:f6:88:bc:ae:f1:f1:3c:
                    af:22:68:83:f3:b7:7c:0c:98:ac:de:63:5b:6e:b8:
                    7c:b6:b0:93:29:7e:47:05:12:e9:d6:5f:f8:8a:cd:
                    7f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:00:1B:42:BD:55:74:6F:4F:E8:92:C1:8C:74:46:B0:AE:78:85:07
            X509v3 Authority Key Identifier:
                keyid:AC:ED:7F:3D:5F:45:45:8F:37:54:EC:75:5B:69:51:DE:6D:19:CD:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/34352e3137322e3134342e302f32322d3234203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:4e:03:ef:15:b6:eb:0f:20:33:b4:e7:8c:8d:c9:3d:e4:77:
         86:c4:79:84:1b:fd:8d:28:eb:80:93:01:1a:b8:2d:29:c8:8f:
         bb:67:d1:f7:7d:9d:16:e9:9a:9a:af:e8:17:fd:cf:4f:a3:6b:
         26:08:04:bc:74:48:7b:f6:42:21:d1:be:11:47:f3:24:ac:0d:
         80:c7:32:e3:6e:71:45:5a:c1:02:84:f6:9a:c4:d7:bf:33:5a:
         99:3d:c2:56:de:d2:67:1e:39:9a:b3:e5:e2:f8:54:0d:3b:eb:
         ea:dd:9c:39:29:b5:17:0c:ce:6e:22:a2:3b:7b:68:a1:6e:68:
         67:59:c8:98:a0:87:16:2f:f0:c0:1f:51:19:cc:46:c8:64:8b:
         c7:85:01:a5:11:72:c2:ba:94:ae:16:7a:2d:21:5a:af:a6:e9:
         ba:9c:72:74:23:84:49:2d:fa:27:97:ad:01:af:9e:05:a5:76:
         ae:8f:7b:f9:9a:e4:cf:8b:dd:36:7b:b9:a4:3b:9e:7e:56:16:
         d6:90:15:51:77:78:b0:4c:62:cc:05:01:a6:40:9d:5b:17:11:
         79:bc:be:bb:8a:ac:79:57:96:23:52:7b:0e:f4:44:5f:19:bd:
         e6:a2:a8:0e:21:84:4b:83:08:6c:d9:a5:a7:6e:72:ad:13:b1:
         85:cf:41:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org