Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132312e302f32342d3234203d3e20323639303834.roa
File:                     34352e3137392e3132312e302f32342d3234203d3e20323639303834.roa (raw, json)
Hash identifier:          3BKkQ6WMQSJQ8bC2zoqv9kQiNoqPWJAgk5GuXDp9OGo=
Subject key identifier:   DE:C7:1E:47:B3:9E:3F:EA:12:34:C5:24:F2:EB:36:48:1E:FD:90:44
Certificate issuer:       /CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
Certificate serial:       4830C9D59755C4508F51B243E54740519676B0D9
Authority key identifier: FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132312e302f32342d3234203d3e20323639303834.roa
Signing time:             Wed 31 Jan 2024 21:51:25 +0000
ROA not before:           Wed 31 Jan 2024 21:46:25 +0000
ROA not after:            Wed 29 Jan 2025 21:51:25 +0000
asID:                     269084
IP address blocks:        45.179.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:30:c9:d5:97:55:c4:50:8f:51:b2:43:e5:47:40:51:96:76:b0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC91ABE2B9C46E0650B987CA9366CF084CEAAA96
        Validity
            Not Before: Jan 31 21:46:25 2024 GMT
            Not After : Jan 29 21:51:25 2025 GMT
        Subject: CN=DEC71E47B39E3FEA1234C524F2EB36481EFD9044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:59:47:df:3a:13:2a:4a:2a:88:28:3e:ab:eb:
                    f6:13:3a:2a:ff:fc:5f:da:60:41:82:b8:26:50:eb:
                    a1:83:3a:f4:92:1b:c3:fe:42:b2:2a:ce:d5:cb:c9:
                    c2:d2:c9:9b:85:57:d3:23:62:f8:e0:51:af:bd:55:
                    d3:b3:bc:5f:96:d8:73:a6:68:8b:d7:91:2c:3d:a4:
                    7c:7b:47:08:10:92:9b:fd:82:25:02:3c:31:16:46:
                    4a:9d:b3:59:64:b6:73:06:a3:17:0f:f8:77:37:d5:
                    e1:68:f0:b1:bb:0a:cf:a0:2e:f6:62:21:ca:25:0a:
                    4d:82:58:04:24:f7:be:72:70:3f:c8:a7:b1:16:27:
                    b0:d8:bc:c7:d3:86:04:b4:f9:86:be:8c:18:97:79:
                    1b:25:39:3a:ee:1a:37:cb:83:67:ed:60:60:a5:39:
                    ea:3a:a8:62:ff:bc:ba:5b:22:6c:99:82:49:47:3a:
                    f2:5a:22:ab:2f:aa:03:88:80:90:5a:b8:8c:19:f0:
                    f2:df:c0:b6:65:ba:f8:0f:e1:3f:dd:ca:ec:d3:59:
                    6f:ac:0e:5a:d9:a5:e8:72:23:70:91:35:7b:b9:99:
                    88:01:9d:fd:5d:c7:a8:91:e5:3a:f7:87:a3:21:d4:
                    42:21:df:5c:fd:0b:6c:5c:a1:df:2b:ab:be:ba:21:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C7:1E:47:B3:9E:3F:EA:12:34:C5:24:F2:EB:36:48:1E:FD:90:44
            X509v3 Authority Key Identifier:
                keyid:FC:91:AB:E2:B9:C4:6E:06:50:B9:87:CA:93:66:CF:08:4C:EA:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC91ABE2B9C46E0650B987CA9366CF084CEAAA96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HUXoMFP76a3b3TGtVHVKPD6A7hNjWQG1qDg9LN1RRop/0/34352e3137392e3132312e302f32342d3234203d3e20323639303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ea:ff:b1:92:77:1f:fa:4e:77:0e:43:72:62:38:65:7b:cf:
         0c:cd:e2:89:1d:22:d8:43:56:4a:b1:a2:4a:7f:15:0c:26:07:
         aa:85:64:6b:cf:d6:10:a0:cd:51:38:5c:09:38:3f:6e:6b:8f:
         57:06:74:96:a1:77:40:ae:d3:37:e1:f7:1f:85:b2:ef:a1:58:
         7c:53:4e:33:81:58:ec:53:74:4b:52:02:f5:94:86:70:0e:28:
         0b:49:d6:1b:1a:03:4e:4c:1d:25:6d:f6:fd:06:35:49:b7:97:
         2d:9c:82:db:0f:d3:64:4d:77:de:27:1e:ae:ab:b1:bc:0f:11:
         88:92:a2:45:f4:17:10:f9:91:cb:5e:f9:8c:1b:53:15:ba:ba:
         74:cc:7b:35:89:d0:d5:dd:c6:03:2c:53:e8:5f:15:da:10:54:
         de:e6:35:36:9f:72:5a:6e:df:ba:ce:87:3d:bc:2e:28:60:33:
         20:e8:0a:2b:7d:21:a3:d1:9c:f0:c6:ef:6d:03:a8:cd:4a:4a:
         be:98:3f:58:db:ac:68:34:e8:ca:7b:8d:60:a9:f9:f1:cb:dc:
         aa:17:1f:03:24:65:d5:8b:f1:c0:07:0e:ce:7b:73:3e:4d:2c:
         27:22:a4:2e:9e:d5:19:c0:e0:04:11:3b:c0:a9:dd:ac:ce:50:
         7a:d6:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org