Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          lcJ2ModBNFxy5VDyf154rALq2YrEJUDdBsSU4Sdp5NM=
Subject key identifier:   DD:E4:5F:44:B8:04:36:69:D2:74:09:A2:B1:2D:A8:B1:E0:9E:7C:DA
Certificate issuer:       /CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
Certificate serial:       6F9642F0387BDAD2DC4BA2CCBCE1E7962573764E
Authority key identifier: D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa
Signing time:             Wed 03 Apr 2024 22:27:40 +0000
ROA not before:           Wed 03 Apr 2024 22:22:40 +0000
ROA not after:            Wed 02 Apr 2025 22:27:40 +0000
asID:                     269423
IP address blocks:        45.186.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:96:42:f0:38:7b:da:d2:dc:4b:a2:cc:bc:e1:e7:96:25:73:76:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
        Validity
            Not Before: Apr  3 22:22:40 2024 GMT
            Not After : Apr  2 22:27:40 2025 GMT
        Subject: CN=DDE45F44B8043669D27409A2B12DA8B1E09E7CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:8f:b9:88:9f:22:38:76:a2:37:e8:a2:4d:
                    9e:e5:fc:0f:2e:48:0a:12:28:9c:ee:6a:1d:53:d3:
                    82:11:69:2e:3e:44:a5:06:d0:4c:99:46:59:60:9e:
                    4b:ec:0d:24:0e:05:1e:ea:6a:c1:f6:66:a4:e3:be:
                    f6:71:8c:ab:1b:81:1e:8a:2f:68:3d:10:1e:42:ac:
                    4f:dd:3c:a1:eb:18:eb:c3:a5:54:a0:3a:1a:99:03:
                    41:f3:cf:f4:cb:aa:ad:dc:40:7e:f1:8d:f0:8d:f2:
                    fe:e2:1c:b7:59:4c:70:09:16:2b:da:90:ee:1e:ce:
                    e5:61:7c:af:5d:bd:62:3b:0c:50:6e:cf:41:0d:f9:
                    23:96:19:a8:03:f0:e0:ce:c5:df:79:8b:19:b5:91:
                    32:7b:ee:94:92:23:77:39:1b:d3:d7:50:3b:b5:15:
                    28:6a:c1:80:2b:21:7c:26:97:fd:4c:01:9b:59:75:
                    10:16:97:f5:9e:f3:b9:d0:77:bb:6d:93:2f:f8:fa:
                    ac:90:a3:63:ab:72:df:62:f1:e4:c7:47:bb:26:91:
                    45:7f:75:b8:01:30:e4:21:50:01:50:9e:23:8b:df:
                    6d:30:61:20:c4:11:09:f1:fb:b7:15:17:32:87:77:
                    48:87:3a:54:43:ac:2f:12:1e:a2:74:8a:19:cc:5a:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E4:5F:44:B8:04:36:69:D2:74:09:A2:B1:2D:A8:B1:E0:9E:7C:DA
            X509v3 Authority Key Identifier:
                keyid:D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/D037231865C4494DAE0A707D2C8705DFEDDA26FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132322e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:aa:fe:d5:63:04:a5:14:d3:7e:f7:07:60:e4:a0:f1:be:
         5d:fa:99:23:20:74:9f:76:03:b5:7a:41:76:cd:39:09:84:ab:
         74:09:87:03:ed:19:d5:99:96:53:e5:92:d0:21:01:e5:1f:5f:
         a6:74:18:8c:a9:41:ae:7f:7f:74:0b:54:61:3d:15:39:37:7a:
         99:a9:6f:d6:69:40:7a:af:a2:41:29:1c:6a:3f:ee:1a:77:2e:
         64:01:aa:56:74:33:9b:d1:1d:6a:31:98:39:ec:7d:96:20:24:
         f6:6c:ea:bc:b6:b1:42:16:46:34:50:31:d7:1b:2f:b2:1d:7e:
         80:5e:39:21:98:2f:7f:aa:5f:7a:c0:b6:8f:08:33:1c:60:cc:
         a1:b1:59:1f:25:20:4d:13:d4:e3:24:52:ff:28:be:ac:99:f4:
         23:9f:90:d7:65:71:e4:93:04:b3:60:65:df:05:3b:96:b4:c0:
         54:70:51:78:b9:95:d6:6d:98:c9:1d:25:ec:4a:ca:5e:64:81:
         e3:86:f6:5a:9f:b3:11:0b:be:f5:08:ea:89:ee:e0:29:7c:05:
         19:24:5f:9e:0f:55:d8:3a:dd:40:ca:dd:f3:b7:5e:3b:b1:e2:
         e4:31:3e:83:aa:d6:67:8e:2a:fd:f7:6c:c6:8e:41:27:f4:81:
         ca:8c:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org