Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa
File:                     34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa (raw, json)
Hash identifier:          wG8EdAVRRxDHNNjtiBfxYS1/dHpfZlMal+J9ivjB0K0=
Subject key identifier:   C1:E1:94:74:E3:85:05:7E:1A:0E:66:5F:28:F4:0C:AE:06:13:58:05
Certificate issuer:       /CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Certificate serial:       3856166CDCC60DE80028AB55C4605B22A4A1CBAD
Authority key identifier: CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa
Signing time:             Fri 14 Jul 2023 18:58:00 +0000
ROA not before:           Fri 14 Jul 2023 18:53:00 +0000
ROA not after:            Fri 12 Jul 2024 18:58:00 +0000
asID:                     268101
IP address blocks:        45.168.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:56:16:6c:dc:c6:0d:e8:00:28:ab:55:c4:60:5b:22:a4:a1:cb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
        Validity
            Not Before: Jul 14 18:53:00 2023 GMT
            Not After : Jul 12 18:58:00 2024 GMT
        Subject: CN=C1E19474E385057E1A0E665F28F40CAE06135805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:86:96:3b:95:23:83:05:ef:0c:6e:95:a1:
                    9e:63:51:aa:22:55:c0:18:8f:95:0a:17:52:cf:e0:
                    8c:03:6f:e1:28:c2:96:eb:9e:0f:6a:1f:f8:93:ad:
                    b5:76:73:36:e9:b8:c8:43:a3:05:1c:8e:58:5e:c7:
                    49:5c:f1:30:65:14:76:f5:66:91:7c:ff:18:f3:a8:
                    b0:9f:09:26:21:7a:38:7d:95:04:fe:88:af:a7:b0:
                    04:c2:fa:bc:2b:86:0f:d4:d4:42:a2:8e:b1:ad:97:
                    ad:fa:d3:e2:a3:16:3a:60:f8:d2:a2:5a:c3:ff:f7:
                    ca:d8:fa:26:70:91:75:82:03:77:44:eb:0d:0b:ca:
                    a0:cc:c7:df:0e:8d:85:26:ec:70:23:7a:4e:9e:37:
                    3e:4b:82:4f:9c:38:0a:5b:fa:87:65:b6:7c:4c:b2:
                    14:e6:b7:fa:47:a8:1c:02:7a:91:2a:95:b9:da:ab:
                    e2:c2:fb:a7:05:1c:7b:3d:94:ab:f1:ba:e6:3f:ac:
                    de:e1:8e:38:8c:ab:f5:bb:5e:35:6c:80:40:13:02:
                    6a:3f:36:e3:df:17:08:b3:84:4a:7f:87:57:b7:0c:
                    cc:c3:65:c8:b7:ed:6d:18:c3:f6:62:1c:85:59:1a:
                    a3:b2:3d:0d:c2:c7:38:5e:c5:06:f3:4a:61:f6:e0:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E1:94:74:E3:85:05:7E:1A:0E:66:5F:28:F4:0C:AE:06:13:58:05
            X509v3 Authority Key Identifier:
                keyid:CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32342d3234203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ea:c6:3b:50:a8:b5:97:aa:3e:62:f4:8f:53:7a:c2:74:ff:
         ce:1b:d7:ae:af:59:18:20:7f:8c:51:30:50:eb:35:c5:68:fa:
         15:b4:f4:80:07:2a:ba:e0:a2:99:52:a4:3b:d9:e4:3e:3c:a0:
         54:9c:3e:14:26:b1:55:3e:29:00:83:9e:34:2b:0e:db:57:07:
         79:5f:3f:60:e8:f8:84:17:cf:de:91:c3:13:9a:45:88:a7:6a:
         9f:6a:27:63:f7:bb:ca:85:81:08:7a:03:f7:c4:16:cf:41:6d:
         b4:30:32:21:ab:85:a6:e2:73:48:64:36:84:44:c9:da:de:43:
         ba:b9:83:fa:d3:de:29:1b:9d:f1:48:7b:6c:3f:1c:fe:69:2e:
         93:71:b0:2f:34:45:34:0e:bc:5e:e9:26:9b:03:09:3c:05:df:
         3a:a5:91:60:74:11:5a:b3:f6:bc:23:a2:2c:c6:23:3e:2f:2c:
         36:06:35:aa:10:28:0d:4f:87:49:f3:b6:62:3b:3b:fd:8d:79:
         3d:97:58:94:20:e4:25:4a:58:99:25:f8:77:79:c2:f3:e9:e4:
         a3:3f:2f:85:6b:b7:42:dd:63:81:d2:70:97:3a:c4:ac:5c:42:
         ff:73:12:2c:29:7a:eb:dd:2f:4b:44:70:59:88:48:e8:f2:64:
         2f:b8:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:58 2024 by rpki-client on console.sobornost.net