Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137332e302f32342d3234203d3e20323638303334.roa
File:                     34352e3136372e3137332e302f32342d3234203d3e20323638303334.roa (raw, json)
Hash identifier:          izcyTG3U18NPkLJkRtYxd8ZOvEW67TGBi0oTEHwRPHA=
Subject key identifier:   0C:96:AA:0A:13:6B:01:45:02:C6:4F:2C:3B:35:29:27:18:F7:35:F3
Certificate issuer:       /CN=9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC
Certificate serial:       62E63D2EF34FA47C5CC754034899D41623BCC658
Authority key identifier: 9E:22:BA:4D:80:00:A0:BC:2E:D9:B9:BE:FC:9E:9A:30:F7:71:66:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137332e302f32342d3234203d3e20323638303334.roa
Signing time:             Fri 13 Jan 2023 15:35:05 +0000
ROA not before:           Fri 13 Jan 2023 15:30:05 +0000
ROA not after:            Fri 12 Jan 2024 15:35:05 +0000
asID:                     268034
IP address blocks:        45.167.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e6:3d:2e:f3:4f:a4:7c:5c:c7:54:03:48:99:d4:16:23:bc:c6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC
        Validity
            Not Before: Jan 13 15:30:05 2023 GMT
            Not After : Jan 12 15:35:05 2024 GMT
        Subject: CN=0C96AA0A136B014502C64F2C3B35292718F735F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:27:49:ca:ed:d3:44:cd:51:81:25:7a:f3:
                    08:a8:1d:0c:8f:4b:35:06:ad:44:db:f6:27:88:51:
                    58:e4:b2:67:7b:57:4b:9c:7a:5a:53:70:89:bf:f6:
                    f7:c2:60:66:88:5d:00:af:24:cf:01:43:43:1c:f7:
                    54:13:88:70:7b:ae:49:f7:68:21:28:f6:55:fa:51:
                    d0:04:d9:42:e4:ec:ac:c8:87:80:56:4e:94:16:04:
                    14:09:d1:86:e8:d6:11:ea:29:22:4e:6d:be:88:aa:
                    a4:42:29:e7:3f:3b:09:e4:a5:89:23:52:e7:6b:7a:
                    5b:1e:72:25:d9:ae:c7:82:4b:6e:74:31:17:24:fb:
                    af:dc:21:4d:f5:42:42:75:17:2c:35:b6:85:28:45:
                    f0:d8:ed:21:e3:93:1e:3c:1e:7a:a6:2c:0a:af:4c:
                    79:3a:23:51:b7:5e:d3:72:15:a0:ce:f1:ea:00:3c:
                    d8:92:99:6f:45:ec:2c:45:7c:e7:58:f4:53:aa:a5:
                    ea:fe:c7:a2:ef:49:c4:4a:40:c1:74:4b:0b:d0:73:
                    8e:60:2f:9a:26:61:c1:bf:0c:9f:bb:c7:9b:01:3e:
                    a1:21:1f:b4:85:0e:65:14:ca:cd:4c:18:70:de:77:
                    92:bc:7a:76:e3:de:5d:6f:bf:1c:fb:66:af:03:82:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:96:AA:0A:13:6B:01:45:02:C6:4F:2C:3B:35:29:27:18:F7:35:F3
            X509v3 Authority Key Identifier:
                keyid:9E:22:BA:4D:80:00:A0:BC:2E:D9:B9:BE:FC:9E:9A:30:F7:71:66:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E22BA4D8000A0BC2ED9B9BEFC9E9A30F77166FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137332e302f32342d3234203d3e20323638303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:05:11:5c:85:55:28:87:f9:3c:e9:84:bd:8e:76:5d:65:e7:
         60:2a:18:9b:ae:9b:11:6a:63:1b:01:f2:73:81:c2:eb:f3:d3:
         fb:f1:bf:8d:3e:8c:0f:f9:45:29:a8:8b:dd:e6:16:4a:e5:75:
         82:7c:e8:f4:31:f7:4c:a2:f9:c5:cb:98:93:93:92:99:20:bb:
         41:d2:a0:d9:a2:fa:ed:54:19:50:1e:53:93:64:9a:2c:f8:48:
         55:82:9c:72:5a:ef:d1:c5:7d:8f:3e:71:d7:aa:75:9b:38:37:
         c3:5a:56:f1:df:65:37:7f:67:f8:d0:e2:c6:06:87:60:2f:a8:
         23:d0:19:b9:85:b0:8e:98:58:c6:d9:b8:cc:ee:e8:59:c3:79:
         43:41:2b:b5:a5:9e:54:67:d8:2c:61:07:2f:d5:9d:5b:0b:78:
         5b:8c:d4:35:45:da:43:4d:c4:7d:cf:83:8f:98:6b:81:ce:37:
         ee:7e:8c:14:a2:ed:26:62:f1:77:1f:42:83:89:4f:27:99:6d:
         bf:15:fd:fb:60:db:13:54:1f:27:62:95:92:54:1a:6f:fd:9d:
         b8:01:83:0b:da:72:da:56:98:91:3f:2c:38:96:34:44:54:e3:
         c6:d6:4d:79:9b:09:6e:bd:14:fa:f7:5c:ca:0c:24:51:85:68:
         2b:b5:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org