Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/34352e3136372e3137322e302f32322d3232203d3e20323638303334.roa
File:                     34352e3136372e3137322e302f32322d3232203d3e20323638303334.roa (raw, json)
Hash identifier:          LGwWkAlFZygexbFz46eE/vUnMEUX4Rv6sx2NbDQQEqQ=
Subject key identifier:   5C:57:25:F3:83:89:8D:DC:81:6F:1A:0D:3B:F1:A8:7F:59:6B:BE:6D
Certificate issuer:       /CN=EB74AE14B6387B3CA84854FD9E48785797E8F327
Certificate serial:       3BA3A34718FC6BEE8DC5CE8F3E9A3896C968090A
Authority key identifier: EB:74:AE:14:B6:38:7B:3C:A8:48:54:FD:9E:48:78:57:97:E8:F3:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB74AE14B6387B3CA84854FD9E48785797E8F327.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/34352e3136372e3137322e302f32322d3232203d3e20323638303334.roa
Signing time:             Tue 02 Jan 2024 15:59:47 +0000
ROA not before:           Tue 02 Jan 2024 15:54:47 +0000
ROA not after:            Tue 31 Dec 2024 15:59:47 +0000
asID:                     268034
IP address blocks:        45.167.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a3:a3:47:18:fc:6b:ee:8d:c5:ce:8f:3e:9a:38:96:c9:68:09:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB74AE14B6387B3CA84854FD9E48785797E8F327
        Validity
            Not Before: Jan  2 15:54:47 2024 GMT
            Not After : Dec 31 15:59:47 2024 GMT
        Subject: CN=5C5725F383898DDC816F1A0D3BF1A87F596BBE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:c8:ed:88:16:39:f5:7b:8c:46:66:3c:ee:
                    50:83:21:71:cd:b4:c2:05:92:a4:dc:a5:6a:e9:2b:
                    9a:a5:e0:be:b6:9b:cc:4e:37:91:e6:eb:c4:78:a3:
                    a5:5f:37:cd:ce:5f:40:71:f7:6c:53:5a:6b:83:0e:
                    a4:4f:63:de:dc:95:e1:9b:c3:7d:d9:fd:00:ef:8c:
                    dd:97:3f:34:c9:51:a0:23:6d:ce:39:af:63:96:09:
                    4f:c2:ef:e7:14:51:e4:2c:0e:9c:0f:e1:8c:f0:54:
                    37:7c:03:81:56:d6:10:b3:da:ff:c4:32:9a:ee:79:
                    71:d8:cc:90:6e:9e:6f:bc:49:8d:d1:0b:93:9f:9c:
                    b5:42:b2:da:6f:d1:02:e7:b1:61:82:07:ee:9e:94:
                    41:d9:64:7b:91:27:93:72:ca:88:b5:a4:e4:49:ca:
                    68:2d:99:83:aa:65:1b:d0:9d:dd:01:2c:3c:f8:6c:
                    1b:4a:bb:ff:67:77:32:e7:62:95:5f:ef:c4:91:67:
                    da:ae:36:4e:48:af:0c:dc:b0:8f:c6:71:d4:cf:eb:
                    51:33:dc:92:bb:b6:3b:79:22:4b:06:69:72:11:fb:
                    a5:76:80:c1:05:dc:9f:40:99:0b:70:90:23:a6:56:
                    b6:8d:49:8b:59:4f:23:08:8b:9a:32:89:60:51:7e:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:57:25:F3:83:89:8D:DC:81:6F:1A:0D:3B:F1:A8:7F:59:6B:BE:6D
            X509v3 Authority Key Identifier:
                keyid:EB:74:AE:14:B6:38:7B:3C:A8:48:54:FD:9E:48:78:57:97:E8:F3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/EB74AE14B6387B3CA84854FD9E48785797E8F327.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB74AE14B6387B3CA84854FD9E48785797E8F327.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/1/34352e3136372e3137322e302f32322d3232203d3e20323638303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:74:47:fc:c1:ac:1e:e5:18:f5:d4:bd:98:06:92:63:cd:cf:
         b8:d6:05:c5:f5:80:05:40:26:c1:09:16:60:87:76:a4:48:61:
         dc:b5:38:55:55:7d:c4:f6:ce:c6:12:66:07:1e:d3:37:a7:5e:
         81:f9:f7:0a:17:ad:9f:73:bc:69:ce:cb:d7:6a:8c:a2:38:5a:
         aa:e5:c6:96:8d:9c:c3:46:58:bc:91:b8:a3:99:44:7f:c0:f5:
         c5:73:6d:b6:1c:e0:14:20:7e:c9:71:ff:ed:d2:d0:e3:1a:f8:
         d1:ce:1d:76:6c:00:73:05:3d:8d:c2:c2:f5:af:5d:52:70:7b:
         f1:07:e1:d9:d8:8e:c7:a4:dc:e9:d8:f0:49:b3:6d:40:94:2d:
         13:9e:55:64:65:c9:04:77:8e:3a:18:fa:10:b3:fc:21:41:28:
         b0:4d:d7:86:a1:ff:e6:bd:a6:56:f8:54:9c:db:ce:e1:9a:4f:
         f4:68:d3:40:e8:7d:63:93:53:9c:6e:f4:4c:22:25:b0:94:46:
         7e:52:18:0c:9f:77:ae:e2:ce:06:0a:1c:41:21:53:5b:62:10:
         7c:6e:40:e7:61:f2:47:f1:c0:95:48:31:87:a4:6e:f7:ca:ae:
         d5:1b:bf:8e:03:68:43:db:8d:46:1d:68:3d:86:33:f7:d7:60:
         9c:67:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org