Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/34352e3137342e3134372e302f32342d3234203d3e20323638383534.roa
File:                     34352e3137342e3134372e302f32342d3234203d3e20323638383534.roa (raw, json)
Hash identifier:          46Uo6krvdPs1UAxenDq2psmvRbA/FqvZSVN7MvQivNg=
Subject key identifier:   2B:C1:85:77:AC:08:CE:E9:53:2C:CD:E9:09:90:98:CD:AE:1A:74:15
Certificate issuer:       /CN=7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F
Certificate serial:       4DC45CE57FDF3AAA7028DBE0862D43F4DE8E339C
Authority key identifier: 7B:B6:A1:BE:9B:83:78:9D:0A:A4:CE:A6:F7:BA:3F:66:23:DB:84:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/34352e3137342e3134372e302f32342d3234203d3e20323638383534.roa
Signing time:             Fri 10 Mar 2023 12:52:03 +0000
ROA not before:           Fri 10 Mar 2023 12:47:03 +0000
ROA not after:            Fri 08 Mar 2024 12:52:03 +0000
asID:                     268854
IP address blocks:        45.174.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c4:5c:e5:7f:df:3a:aa:70:28:db:e0:86:2d:43:f4:de:8e:33:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F
        Validity
            Not Before: Mar 10 12:47:03 2023 GMT
            Not After : Mar  8 12:52:03 2024 GMT
        Subject: CN=2BC18577AC08CEE9532CCDE9099098CDAE1A7415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:9b:22:1b:76:f7:ad:d0:b0:7a:1a:32:89:
                    ba:8f:e2:52:79:9b:e5:3e:07:50:76:36:78:cb:cf:
                    1f:62:ca:b3:a9:fd:da:cf:76:10:aa:3d:34:db:c9:
                    bf:98:46:a7:e4:0f:10:18:e3:fb:f1:91:33:81:67:
                    cc:ec:28:a2:82:72:85:3c:2c:6b:03:76:c8:c4:ca:
                    78:cf:4f:84:56:b3:35:e4:31:d0:f3:0d:31:14:a9:
                    9f:e3:fe:fe:49:a7:9d:41:50:76:92:ec:de:95:c9:
                    f8:90:3b:51:93:2c:24:aa:86:dd:63:cc:cd:9a:b0:
                    89:92:93:4f:f1:8e:e6:ea:17:4b:38:6c:66:db:cd:
                    8c:76:ab:b6:e8:d9:93:ab:f8:3d:3d:b0:6c:a8:4f:
                    eb:9e:7b:0f:e3:d0:4b:5c:0e:ba:5b:05:0c:39:88:
                    55:67:e2:a1:f4:ba:9f:fb:49:70:47:8f:a2:31:34:
                    72:ed:75:19:4f:5a:a9:58:35:bf:0e:d4:45:c7:07:
                    6d:46:6b:2b:c1:6c:d4:69:d8:85:0f:f1:a9:7e:fe:
                    bf:83:05:37:97:bc:ad:a7:87:27:83:00:da:e2:de:
                    dc:a1:d2:a1:ce:19:21:60:f0:00:4c:c5:e1:e4:9d:
                    39:88:7a:df:ed:db:05:1f:8f:88:3d:92:c7:5f:4b:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C1:85:77:AC:08:CE:E9:53:2C:CD:E9:09:90:98:CD:AE:1A:74:15
            X509v3 Authority Key Identifier:
                keyid:7B:B6:A1:BE:9B:83:78:9D:0A:A4:CE:A6:F7:BA:3F:66:23:DB:84:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BB6A1BE9B83789D0AA4CEA6F7BA3F6623DB841F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4Eg9KnE3bCK82WrBusNbH9wd6Pe8QZVaACByEWhXQqG/0/34352e3137342e3134372e302f32342d3234203d3e20323638383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:4f:3e:ed:13:b6:ca:ea:ed:8d:22:5a:1e:b3:41:e2:92:
         84:b2:7d:8d:52:42:7b:e2:7a:a6:3d:fa:cb:71:5d:24:01:f3:
         28:3c:f4:ad:42:c2:ec:e7:9d:98:8a:f5:bd:5a:da:5b:58:0a:
         d6:ab:d2:64:b3:38:68:cb:e9:36:dd:a7:59:26:98:6d:d6:00:
         fc:ef:a5:32:3c:56:64:48:84:7d:d3:8c:0c:39:89:06:9f:16:
         27:d4:3a:70:6d:69:fb:ab:8e:7f:46:9d:2b:0b:1b:79:57:46:
         15:87:aa:d5:07:e6:7b:9e:ed:b3:c7:96:f2:10:59:58:87:be:
         5d:10:28:40:89:0a:6a:15:ee:81:0a:eb:b0:9a:0a:0b:c3:bf:
         0c:84:0a:b5:ff:24:d9:4c:60:3b:41:53:1c:bf:89:19:64:1b:
         2b:a2:b6:d4:20:84:c7:f4:23:b6:e8:4c:35:4c:65:ce:0f:d4:
         72:6f:9d:d6:fc:fe:cb:1e:2b:9a:b8:d7:4d:9d:df:de:a8:11:
         e2:20:4b:63:c9:85:28:68:74:d4:66:71:6e:1e:fa:62:c0:15:
         d5:19:67:5f:d6:65:77:05:4b:e6:34:5e:2b:10:22:a8:56:6c:
         cb:a7:5d:10:cf:71:f7:6d:0f:77:a8:0e:62:13:9e:f5:ae:ad:
         f1:ce:be:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org