Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa
File:                     34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa (raw, json)
Hash identifier:          dGXKvBwV4DbWvOHSKs4HVQGoIO6jVsdi51F9V/Zizfg=
Subject key identifier:   5F:5A:E6:FE:21:3F:B0:23:3E:92:47:39:AE:DC:3B:44:58:ED:E2:0D
Certificate issuer:       /CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
Certificate serial:       37A978544E50B1AA6468AFEBCE3086CAC0698DA4
Authority key identifier: 44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa
Signing time:             Thu 18 Jan 2024 18:00:00 +0000
ROA not before:           Thu 18 Jan 2024 17:55:00 +0000
ROA not after:            Thu 16 Jan 2025 18:00:00 +0000
asID:                     268732
IP address blocks:        45.171.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a9:78:54:4e:50:b1:aa:64:68:af:eb:ce:30:86:ca:c0:69:8d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
        Validity
            Not Before: Jan 18 17:55:00 2024 GMT
            Not After : Jan 16 18:00:00 2025 GMT
        Subject: CN=5F5AE6FE213FB0233E924739AEDC3B4458EDE20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:39:d6:f3:a7:75:36:fa:5b:bf:a8:66:f0:
                    ef:dd:41:1a:61:23:91:8c:3c:a3:d5:48:ce:99:d7:
                    20:90:27:cd:5e:f5:12:34:56:8b:2f:7c:ee:d1:b5:
                    f6:a0:73:ed:bb:cd:ec:b3:97:2a:f1:05:ee:f1:96:
                    6e:bf:f2:07:ec:23:69:54:85:34:59:26:74:52:3c:
                    c7:1e:f6:e0:1a:bc:82:88:10:7c:b0:b5:b1:f4:0b:
                    c2:35:f4:82:c8:4b:42:44:ac:3d:de:85:fc:ad:3c:
                    ac:21:5c:e6:5a:31:00:58:41:62:e0:90:46:d7:3c:
                    c1:3d:b0:02:33:95:80:43:9d:5b:2e:74:d5:89:27:
                    6b:d7:f7:3e:8a:40:11:de:0e:ce:c5:00:c6:13:24:
                    3d:b3:c1:a1:55:ef:37:53:c4:49:11:7a:05:04:41:
                    86:79:e8:ef:53:aa:85:5d:52:a2:fc:0b:ce:ee:e4:
                    cf:00:8f:c7:22:da:d5:29:83:a3:e8:e8:f9:28:7e:
                    38:e7:f5:b5:1a:fb:40:dd:0c:87:68:a7:c8:0e:01:
                    60:43:b8:1d:62:82:63:f4:4c:32:63:03:ef:cf:12:
                    f8:09:fc:9a:c9:ac:65:8a:58:44:a1:3d:0f:63:f3:
                    9e:d8:c8:82:55:22:dc:65:cf:4c:1d:db:86:b2:5a:
                    7f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:E6:FE:21:3F:B0:23:3E:92:47:39:AE:DC:3B:44:58:ED:E2:0D
            X509v3 Authority Key Identifier:
                keyid:44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:58:70:78:27:38:01:cb:b7:0e:e7:af:99:76:d6:7a:69:61:
         4c:c3:ae:7e:da:4e:f1:a3:a2:13:2f:b1:a1:9e:21:98:54:2f:
         6b:88:10:0d:68:30:a3:7d:b0:77:7d:93:2a:72:bb:47:96:93:
         c0:5f:5d:d1:a6:a8:7d:b2:1c:af:47:d4:21:8d:1d:e9:75:34:
         aa:70:dc:50:0f:b9:8f:8b:ad:d7:59:64:6d:82:8c:e3:32:b9:
         73:10:ae:ba:1b:f7:47:f4:6c:71:93:c0:79:a7:4c:2d:99:6c:
         68:64:2b:79:bc:f6:de:3b:33:39:42:a3:c5:16:cc:3a:71:a6:
         11:66:cc:20:68:47:0b:9a:c3:18:97:e9:30:7f:91:4e:68:ea:
         a4:95:73:87:64:46:d4:78:14:2f:d2:88:d3:c7:ce:dc:64:90:
         ed:8c:83:46:5f:a5:b5:6b:5a:d1:af:58:c7:cf:b9:9e:53:19:
         dc:5d:99:c9:30:16:12:0a:2b:12:75:7c:f6:9c:73:b4:26:23:
         ca:c7:c1:3e:5e:db:69:57:04:42:5c:68:44:fc:6b:8d:d6:ea:
         5a:f0:a2:f2:19:c7:05:07:86:3f:bc:a8:81:be:38:ee:ed:b8:
         75:64:71:ee:90:a8:9f:c8:e6:26:a3:6b:f2:8b:eb:83:63:61:
         96:3c:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org