Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/34352e3137392e38362e302f32332d3234203d3e20323633363631.roa
File:                     34352e3137392e38362e302f32332d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          Pz6eye/EsBeWU6svU6585ABKyM9uko1fC5EbhKMn5FM=
Subject key identifier:   A4:37:19:44:36:9B:C7:29:BD:8D:5E:D1:98:8F:CA:4F:02:7B:D7:5C
Certificate issuer:       /CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
Certificate serial:       2E008F08C4A0EBE38580B715C5066DD71B97D14B
Authority key identifier: 43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/34352e3137392e38362e302f32332d3234203d3e20323633363631.roa
Signing time:             Wed 08 Sep 2021 19:18:48 +0000
ROA not before:           Wed 08 Sep 2021 19:13:48 +0000
ROA not after:            Wed 07 Sep 2022 19:18:48 +0000
asID:                     263661
IP address blocks:        45.179.86.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:00:8f:08:c4:a0:eb:e3:85:80:b7:15:c5:06:6d:d7:1b:97:d1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47
        Validity
            Not Before: Sep  8 19:13:48 2021 GMT
            Not After : Sep  7 19:18:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9e:f7:8e:0b:09:93:24:6d:65:4b:c3:75:05:
                    59:0f:1f:a1:1e:db:09:a7:94:5f:c4:d1:ec:eb:19:
                    0b:c2:4d:a4:52:f3:c1:ba:d7:98:18:0d:ff:69:ff:
                    25:e1:f1:ed:b2:3d:b3:5f:12:0f:f8:ed:c1:6b:c1:
                    c9:6e:96:85:f0:b6:48:f3:67:fb:7f:d6:dc:17:79:
                    c0:21:40:04:d6:20:bb:15:74:81:8c:4e:e5:33:8e:
                    29:87:30:25:97:98:c0:57:9f:4a:f3:8c:cd:89:40:
                    24:6e:6c:c3:1f:8e:1f:aa:59:ca:85:23:92:3e:1f:
                    a2:87:86:1b:32:bd:96:5d:55:00:71:37:d9:21:84:
                    db:34:68:a0:3a:df:13:70:c1:62:36:83:79:ab:6e:
                    be:8f:bc:83:dd:35:c1:d8:53:fa:39:9f:5f:19:be:
                    c7:6e:c9:74:6a:a5:d0:32:d5:56:96:05:34:21:58:
                    0c:a4:8b:f1:08:ef:e7:76:f7:37:f6:20:b0:3a:38:
                    4e:51:dd:ae:bb:2a:72:51:50:89:31:9c:ef:dc:a6:
                    52:85:7a:0e:ce:97:5f:ff:38:dc:46:31:6f:bc:01:
                    84:8c:7c:00:31:d8:38:78:1d:78:bf:76:bc:1a:95:
                    5c:15:e4:85:64:2c:11:f7:31:34:b6:25:6c:df:ea:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:37:19:44:36:9B:C7:29:BD:8D:5E:D1:98:8F:CA:4F:02:7B:D7:5C
            X509v3 Authority Key Identifier:
                keyid:43:AF:1F:27:5D:41:CA:BA:31:64:AC:3D:1B:A7:DD:D2:E3:E0:AC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43AF1F275D41CABA3164AC3D1BA7DDD2E3E0AC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/34352e3137392e38362e302f32332d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:22:5a:0c:e1:1c:7d:04:6a:78:f6:a2:a3:b2:05:dd:bf:9d:
         d8:f7:84:5a:88:73:cb:29:a3:db:6f:98:5c:02:42:ca:a1:11:
         f4:b7:c1:ce:07:0a:91:72:d9:d8:6c:eb:8e:17:9e:e5:16:03:
         ec:f1:d1:0f:42:36:f9:95:08:e6:05:42:a0:fa:f2:af:0e:b6:
         a5:a0:f1:2d:5c:1b:73:e9:5b:c1:d6:95:77:ca:45:67:d7:d2:
         db:3e:79:8e:f0:ac:86:70:36:51:8a:4b:2d:16:c1:b3:61:94:
         46:2c:7e:fa:d1:22:25:fd:aa:71:ac:bd:ac:37:b1:e5:7f:13:
         4d:da:44:3d:88:6d:a3:d9:7a:1f:7e:4e:33:d3:24:10:f4:06:
         d3:b4:c3:4d:1d:79:cc:f3:1e:68:c3:48:ed:82:30:1b:29:83:
         a8:dd:69:7e:82:ba:90:00:7b:0b:d2:e8:91:05:48:12:04:60:
         5a:90:d5:59:67:47:3c:b6:fc:d8:5a:bf:b4:99:1c:97:e8:64:
         43:f4:71:2a:d5:f0:4b:9d:5e:28:72:54:55:96:94:23:66:5e:
         29:b5:e8:80:44:aa:0e:6e:99:a3:33:bb:0d:67:48:70:64:89:
         0a:8c:41:94:2b:11:c4:a7:88:42:c2:29:04:38:e2:ae:58:b1:
         be:c9:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:32 2023 by rpki-client on console.sobornost.net