Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/34352e342e32302e302f32322d3234203d3e20323632343539.roa
File:                     34352e342e32302e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          0w+MV0nBtVf+K+IC/dyC2Yp+fHdfb+JfZzhWzesbLxQ=
Subject key identifier:   C0:00:A5:63:19:C7:4A:7F:56:C3:19:DE:C7:05:E7:F1:DB:16:42:98
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       35EB5B9F317543FD226B44B452CEB3EA42233D99
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/34352e342e32302e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 12 Jan 2024 14:13:05 +0000
ROA not before:           Fri 12 Jan 2024 14:08:05 +0000
ROA not after:            Fri 10 Jan 2025 14:13:05 +0000
asID:                     262459
IP address blocks:        45.4.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:eb:5b:9f:31:75:43:fd:22:6b:44:b4:52:ce:b3:ea:42:23:3d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jan 12 14:08:05 2024 GMT
            Not After : Jan 10 14:13:05 2025 GMT
        Subject: CN=C000A56319C74A7F56C319DEC705E7F1DB164298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:9a:80:ce:e7:76:2a:de:3c:09:d4:c3:2f:
                    af:c2:e8:12:42:98:e7:4f:0f:f2:9c:49:d8:46:64:
                    09:c9:1f:a7:20:f5:7d:f5:f4:d7:b6:c2:12:64:2a:
                    27:dc:60:61:68:25:2a:7b:91:f9:32:52:2f:a3:6b:
                    1e:91:5d:d8:3a:e0:25:e5:b5:b2:eb:97:c8:43:21:
                    02:ee:ba:02:12:7b:ef:f2:bd:dd:ba:7f:11:53:98:
                    ad:cf:06:a7:f8:56:ea:e1:ed:98:15:13:b8:90:d5:
                    b0:e7:a3:0a:90:04:3a:1a:a7:cc:ba:9e:83:2a:bf:
                    6e:86:16:6e:80:9b:9b:b1:a2:a7:59:60:29:35:a0:
                    40:d3:90:10:d0:62:ce:69:19:98:a9:b4:5f:fa:f1:
                    ac:46:d8:bb:16:a5:91:5f:b4:92:84:57:de:e7:3c:
                    b5:39:c9:b5:cc:9e:f8:ba:39:43:45:8a:b0:2a:ec:
                    dc:b9:de:4a:31:4d:eb:59:7a:d5:26:5c:49:10:02:
                    08:b6:e9:5f:78:c5:80:09:47:f7:fe:f5:32:dc:78:
                    d7:bc:3f:51:b8:48:a7:6d:e6:27:2e:05:92:41:e9:
                    75:da:95:fe:c7:63:38:33:91:9e:62:d6:11:f0:ca:
                    c7:c4:14:1b:57:97:93:2e:8f:ec:79:1c:7c:91:3d:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:00:A5:63:19:C7:4A:7F:56:C3:19:DE:C7:05:E7:F1:DB:16:42:98
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/34352e342e32302e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:28:ee:91:88:28:53:53:09:0c:96:e5:49:b7:4b:4d:26:
         85:ce:8b:ca:ac:08:71:4c:20:f4:cf:1b:a4:48:88:61:22:58:
         cd:53:68:bd:55:e9:50:36:18:42:21:70:96:71:9c:d9:f6:15:
         44:46:24:8e:e4:23:c0:e8:de:1b:51:85:0b:8b:64:77:b7:64:
         b6:9b:b4:e5:d4:18:4d:44:8e:69:4c:8b:6c:20:61:1a:cb:a3:
         d4:b3:58:ce:51:2d:d5:3d:1f:97:b2:78:f5:93:51:35:4e:af:
         2c:92:d5:cf:db:89:cf:65:c6:f0:dc:47:1a:a9:8c:d7:70:d2:
         92:1d:5c:9d:b9:3f:33:01:12:c0:31:0d:10:d6:b0:15:b9:60:
         c3:09:43:dd:e8:ff:42:be:93:8e:23:f9:00:23:90:9e:4e:a9:
         23:04:5a:2c:8a:68:f1:1e:c2:5a:10:b5:86:8f:12:3d:6f:be:
         8e:af:72:ac:ec:e3:a6:cb:2c:30:53:04:8f:2f:75:f7:c1:3f:
         b6:2b:08:03:03:35:09:52:7c:54:6e:d4:63:2f:07:45:17:54:
         42:18:32:5a:66:00:50:bd:35:8f:f1:2d:33:ce:09:78:e7:61:
         10:50:6b:bc:79:2b:d1:59:15:a5:73:97:d1:7b:6b:8c:19:6f:
         a8:b4:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org