Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa
File:                     34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa (raw, json)
Hash identifier:          CetLHW/S3PPdRs68b+7SGPDkpIubVptIs9+jWitP8pQ=
Subject key identifier:   ED:6E:D8:8C:3C:F9:0D:ED:CC:0E:9A:50:DF:AA:08:C6:45:26:3B:31
Certificate issuer:       /CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
Certificate serial:       0876FB57DAE833CD10BC76E302679C2D2917BF12
Authority key identifier: 44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa
Signing time:             Thu 18 Jan 2024 18:00:00 +0000
ROA not before:           Thu 18 Jan 2024 17:55:00 +0000
ROA not after:            Thu 16 Jan 2025 18:00:00 +0000
asID:                     268732
IP address blocks:        45.171.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:76:fb:57:da:e8:33:cd:10:bc:76:e3:02:67:9c:2d:29:17:bf:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
        Validity
            Not Before: Jan 18 17:55:00 2024 GMT
            Not After : Jan 16 18:00:00 2025 GMT
        Subject: CN=ED6ED88C3CF90DEDCC0E9A50DFAA08C645263B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:2f:41:51:12:7c:6a:f7:24:c1:17:92:20:
                    97:b5:07:bc:cf:7a:4c:d8:57:49:60:8c:32:5c:34:
                    ad:ca:1f:cb:87:0c:31:44:8e:8b:4b:7c:f6:16:3c:
                    58:d5:4b:97:91:55:d5:af:c5:c3:2b:25:06:56:7b:
                    62:37:f3:d2:93:e8:bf:bf:78:a5:62:72:cc:ae:bf:
                    56:aa:e1:c5:38:8b:be:a8:22:ca:c5:81:c0:8e:f4:
                    88:62:40:f8:3f:71:66:c8:6f:93:46:80:55:b6:bf:
                    a4:e8:28:e0:c5:76:e1:2e:d9:e5:c1:19:ab:59:e8:
                    2b:29:ec:d2:31:bf:a6:f7:63:8a:8f:40:09:47:58:
                    5d:ed:5d:ed:6e:9b:37:e4:e7:5b:8e:1d:6d:00:4f:
                    43:34:b0:0a:05:19:f7:78:fa:da:17:92:d2:fe:7c:
                    8a:b1:2d:3c:b5:ff:73:01:44:2b:31:e6:fd:e9:07:
                    15:b9:53:48:c7:b5:85:8f:b7:3a:57:49:8e:e5:c3:
                    df:90:22:bd:76:3b:cf:19:25:39:98:19:6f:f1:5a:
                    40:1a:02:e8:cc:18:0b:26:fc:dc:f1:b7:b7:ed:f2:
                    01:7d:b3:14:00:72:db:93:96:3b:11:90:cf:ef:6c:
                    8f:84:b8:d8:80:1c:2d:a3:15:a5:cb:5e:13:55:cc:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6E:D8:8C:3C:F9:0D:ED:CC:0E:9A:50:DF:AA:08:C6:45:26:3B:31
            X509v3 Authority Key Identifier:
                keyid:44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231372e302f32342d3234203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ce:8d:ea:43:a7:65:5c:27:d8:dd:6b:36:a9:cb:fc:30:91:
         4f:4d:c5:d1:81:35:12:11:b8:7e:8b:4c:95:f4:a3:6b:c5:02:
         f0:c8:c6:d6:18:55:71:ee:3c:1c:d7:61:62:ca:5c:e7:5b:96:
         4f:75:1e:38:8c:70:60:63:fd:77:c2:90:12:ca:c5:62:e5:0a:
         0e:30:66:76:8b:0c:a3:6b:51:14:a5:5b:87:bd:24:0e:74:e2:
         6d:c4:04:76:76:8c:d2:ad:9f:87:fc:59:20:bb:2c:b6:f5:5e:
         30:0a:a8:14:bf:59:53:83:56:de:90:b3:2e:b0:d1:32:80:49:
         0c:63:f2:b4:5e:79:bc:b5:52:fd:6c:29:8d:7b:f8:d3:7e:c0:
         fc:15:8e:45:2e:21:66:0d:95:ba:f5:af:6b:0f:af:4a:ab:74:
         d2:83:72:b1:54:f5:42:44:58:0d:d9:6f:47:80:72:a4:72:ac:
         e7:55:7f:b5:83:40:90:09:55:92:62:d3:8b:de:53:f3:c8:56:
         e6:7f:69:78:58:75:1c:4f:cf:b4:48:d9:54:25:0f:fb:6f:ae:
         fa:85:73:ea:6c:ce:95:af:f6:1e:3e:cd:40:70:69:8b:c1:69:
         2c:52:a0:77:62:0b:29:18:4d:d3:ef:c1:ff:07:60:91:06:b8:
         b6:40:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org