Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/0/34352e3138372e3136382e302f32322d3232203d3e20323639343733.roa
File:                     34352e3138372e3136382e302f32322d3232203d3e20323639343733.roa (raw, json)
Hash identifier:          GYZlYmQFGrM9AO7zPxNFxSPn+zGY5Txue5JjPYiF0jg=
Subject key identifier:   95:E2:85:F6:D8:FF:AD:A5:AA:2F:A8:68:96:B0:18:06:A2:B4:1E:7F
Certificate issuer:       /CN=FC249576766C8B2426656C425843715C26193ED7
Certificate serial:       465403F93EC8B30F2032E9717FF8CA1F0659D282
Authority key identifier: FC:24:95:76:76:6C:8B:24:26:65:6C:42:58:43:71:5C:26:19:3E:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC249576766C8B2426656C425843715C26193ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/0/34352e3138372e3136382e302f32322d3232203d3e20323639343733.roa
Signing time:             Fri 01 Dec 2023 17:19:23 +0000
ROA not before:           Fri 01 Dec 2023 17:14:23 +0000
ROA not after:            Fri 29 Nov 2024 17:19:23 +0000
asID:                     269473
IP address blocks:        45.187.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:54:03:f9:3e:c8:b3:0f:20:32:e9:71:7f:f8:ca:1f:06:59:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC249576766C8B2426656C425843715C26193ED7
        Validity
            Not Before: Dec  1 17:14:23 2023 GMT
            Not After : Nov 29 17:19:23 2024 GMT
        Subject: CN=95E285F6D8FFADA5AA2FA86896B01806A2B41E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:4a:af:15:52:69:9d:d0:22:b2:1f:5c:b1:
                    59:fc:c5:67:6d:5b:44:f0:ec:fa:ee:c4:b9:98:79:
                    57:48:f8:49:5a:89:46:a3:62:4a:c5:9e:97:e6:ed:
                    b4:39:ea:07:ef:40:a6:90:42:cb:71:f7:e4:43:e5:
                    6a:33:af:80:16:e8:6f:9f:29:2b:cc:d7:5b:3b:58:
                    01:70:37:75:a2:61:d2:75:3b:f7:a2:61:ab:ed:6b:
                    f7:10:86:19:5c:b1:bc:67:40:9c:68:89:77:c6:16:
                    6a:da:2c:c3:d6:8d:d7:85:1d:4b:c5:14:16:9e:10:
                    bb:80:4d:fc:b3:7e:51:43:35:df:17:3d:b6:d3:95:
                    66:49:ce:00:62:4c:de:a0:00:63:c7:b0:c4:23:06:
                    0e:a9:75:7b:95:62:7c:48:14:ea:fb:cd:bd:ee:55:
                    49:2a:ac:76:ed:84:5b:bb:18:12:79:53:1c:e2:80:
                    da:17:f4:c9:10:5c:8e:1c:70:e0:46:9e:f7:87:d9:
                    50:51:2a:41:91:14:4d:46:f1:18:e3:55:77:d7:d1:
                    a8:7d:ce:38:ea:21:0b:21:2c:1b:0b:1e:bf:58:06:
                    3c:01:e3:2d:df:7f:94:8c:cf:2c:ce:86:05:bc:95:
                    03:87:49:84:9b:9f:bd:53:82:b0:c4:b9:a7:6c:0d:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E2:85:F6:D8:FF:AD:A5:AA:2F:A8:68:96:B0:18:06:A2:B4:1E:7F
            X509v3 Authority Key Identifier:
                keyid:FC:24:95:76:76:6C:8B:24:26:65:6C:42:58:43:71:5C:26:19:3E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/0/FC249576766C8B2426656C425843715C26193ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC249576766C8B2426656C425843715C26193ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/0/34352e3138372e3136382e302f32322d3232203d3e20323639343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:76:98:78:6c:d9:29:64:4e:76:32:30:40:48:6c:1e:54:d5:
         dd:9d:f6:52:75:5f:3a:20:71:e2:97:10:23:e0:c9:9f:bf:88:
         2a:bb:27:56:dc:c3:bd:b0:17:ac:ad:40:4e:f0:cb:b3:ca:e7:
         bb:a2:a0:11:28:33:16:a4:71:9d:aa:5e:3a:9e:d5:ea:2d:d7:
         c1:aa:ab:36:10:db:b5:80:3f:55:48:4e:fc:c3:b8:c9:cf:ee:
         3d:57:ef:0e:b2:ee:3e:b5:9c:31:1e:c5:3a:cc:72:5c:15:5b:
         3b:aa:20:54:90:92:90:75:2d:ab:54:c7:04:b1:3a:a7:ca:13:
         dc:3c:d2:98:a5:75:4d:52:1f:ec:74:c6:0f:5f:52:08:f6:e3:
         38:c2:b9:e9:5b:32:bd:02:c0:a4:9e:62:d5:ae:53:5b:51:bb:
         58:9d:af:97:70:20:3e:98:f1:aa:cc:b9:96:57:81:37:ee:0b:
         42:19:c8:f5:ab:ba:d3:9f:c4:76:f6:35:92:93:a0:4a:4b:dd:
         1b:fb:ca:2d:05:98:85:4b:6a:9d:25:a4:ad:6d:6f:05:b7:f5:
         55:80:52:a2:10:34:3d:82:22:ad:7f:ca:a7:e0:88:8a:f4:cc:
         7d:70:0c:3c:59:52:d9:b2:c8:9e:12:1d:4f:ad:03:b0:00:12:
         34:f4:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org