Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32332d3233203d3e20323638383738.roa
File:                     34352e3137342e31382e302f32332d3233203d3e20323638383738.roa (raw, json)
Hash identifier:          bpy2eQzuRebtHZcCtnwog1z3q6pb1xxIn5HGu/IxNFY=
Subject key identifier:   A8:0B:E2:93:41:33:6F:3B:95:44:09:83:8C:15:24:7A:78:B6:8A:25
Certificate issuer:       /CN=B41C5D20FCE773495931567B28D958303BB191D0
Certificate serial:       08B014E474257F3A1D99A31C5ED3F8D1CAE8C404
Authority key identifier: B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32332d3233203d3e20323638383738.roa
Signing time:             Fri 09 Feb 2024 12:32:33 +0000
ROA not before:           Fri 09 Feb 2024 12:27:33 +0000
ROA not after:            Fri 07 Feb 2025 12:32:33 +0000
asID:                     268878
IP address blocks:        45.174.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b0:14:e4:74:25:7f:3a:1d:99:a3:1c:5e:d3:f8:d1:ca:e8:c4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41C5D20FCE773495931567B28D958303BB191D0
        Validity
            Not Before: Feb  9 12:27:33 2024 GMT
            Not After : Feb  7 12:32:33 2025 GMT
        Subject: CN=A80BE29341336F3B954409838C15247A78B68A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:41:67:5f:83:3f:6c:9d:1e:a6:cc:a8:23:
                    53:e2:cb:67:b0:ea:99:3f:ab:e2:3d:4b:c5:98:5b:
                    2c:9e:91:5b:44:b5:4f:16:97:28:ae:8d:5c:ed:aa:
                    d0:f5:b4:b3:2a:2c:49:02:ea:68:b0:48:b3:aa:f8:
                    fb:46:bf:44:49:af:1a:79:23:a4:e9:9c:7c:fc:f2:
                    27:f1:fe:f5:76:12:ce:a5:cd:4f:3d:e0:de:16:ec:
                    82:af:12:26:77:ef:2d:5e:70:30:b6:71:15:e8:55:
                    fa:96:0e:ba:20:3f:ee:4c:0a:09:71:53:4a:1f:58:
                    ba:36:5a:f1:01:28:f7:ee:5f:1f:ee:35:c0:af:80:
                    b6:99:7d:11:3f:1f:5a:ea:d8:8c:10:42:cc:94:5b:
                    b4:ba:4d:4d:30:92:6b:f2:13:05:6e:eb:d1:42:11:
                    bf:ce:1e:08:59:56:29:1b:a8:b2:44:a9:b3:a5:b1:
                    7a:54:3f:85:80:7c:55:4c:87:31:a6:b4:48:26:07:
                    e3:6a:3f:55:67:e4:c8:b2:f5:ba:99:4a:8b:f4:24:
                    67:50:a3:01:43:cf:77:9c:fd:0d:db:78:08:2d:30:
                    16:48:d6:91:ab:66:be:10:1a:ce:cc:0b:c4:15:a9:
                    e3:7e:15:81:cc:2a:37:cb:0d:ca:ca:24:cd:bf:27:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0B:E2:93:41:33:6F:3B:95:44:09:83:8C:15:24:7A:78:B6:8A:25
            X509v3 Authority Key Identifier:
                keyid:B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/B41C5D20FCE773495931567B28D958303BB191D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32332d3233203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:b7:14:66:e2:e5:62:83:47:c9:be:53:17:ad:e9:18:ee:
         f0:ab:22:d4:ef:63:04:e1:2e:3b:14:54:08:92:00:1a:f5:2f:
         16:0e:21:33:85:e1:e3:20:39:27:ef:81:bb:91:6b:1a:d8:d7:
         e7:7f:59:9a:60:ff:01:37:72:83:84:5c:f5:6a:b1:72:6f:de:
         9f:7e:e4:9f:c7:b6:75:31:91:a1:1f:b2:dd:5e:72:a7:3c:c7:
         d9:3d:8a:d6:5f:62:56:77:e3:bc:6b:c6:41:e8:97:bc:18:db:
         7a:90:06:28:67:83:2c:12:1e:87:ff:71:8a:e1:e7:cb:ef:3b:
         2f:71:79:49:e8:ff:8e:86:35:29:6c:23:88:ff:f6:c2:4b:2d:
         c8:5b:f7:6a:92:6f:b3:28:5e:09:45:7e:3a:57:68:d9:66:b7:
         36:cc:55:de:23:6f:57:b6:a3:90:dc:28:a9:3d:4b:23:24:63:
         5c:0f:5d:a7:3a:fe:99:74:73:f8:91:0a:ac:f2:13:b6:7b:1e:
         96:b3:10:f2:8b:4f:cb:f5:6b:62:b3:2b:3e:9e:e1:2e:d1:88:
         7b:38:ec:f6:dd:c3:34:d5:a1:07:15:85:54:0b:71:cf:3a:38:
         b0:98:68:f9:03:97:2b:40:5b:75:70:63:fb:8b:7e:3e:ff:0a:
         3c:49:37:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org