Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31392e302f32342d3234203d3e20323638383738.roa
File:                     34352e3137342e31392e302f32342d3234203d3e20323638383738.roa (raw, json)
Hash identifier:          miWc4sHK4h0pUY+0Y2lEO7d/waGlhsq3TsKnio9W0oY=
Subject key identifier:   BE:EF:7A:D7:D2:1F:74:63:02:35:41:84:69:29:B8:E8:80:B1:CF:72
Certificate issuer:       /CN=B41C5D20FCE773495931567B28D958303BB191D0
Certificate serial:       6717AE47918545240EA3F6CA04FE9AAFC019EC05
Authority key identifier: B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31392e302f32342d3234203d3e20323638383738.roa
Signing time:             Fri 09 Feb 2024 12:32:33 +0000
ROA not before:           Fri 09 Feb 2024 12:27:33 +0000
ROA not after:            Fri 07 Feb 2025 12:32:33 +0000
asID:                     268878
IP address blocks:        45.174.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:17:ae:47:91:85:45:24:0e:a3:f6:ca:04:fe:9a:af:c0:19:ec:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41C5D20FCE773495931567B28D958303BB191D0
        Validity
            Not Before: Feb  9 12:27:33 2024 GMT
            Not After : Feb  7 12:32:33 2025 GMT
        Subject: CN=BEEF7AD7D21F7463023541846929B8E880B1CF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f1:1e:77:7f:6a:ff:34:4f:07:ba:ec:41:a5:
                    e2:9b:2b:1d:a1:07:29:79:c7:cd:be:02:03:94:a0:
                    da:bc:58:20:a4:31:95:94:24:c1:97:c8:b8:c1:6e:
                    fc:5b:41:61:35:00:a7:d0:64:25:07:48:bf:bb:0e:
                    01:f4:75:4c:df:bd:91:d1:27:1b:49:4b:46:b6:57:
                    5d:04:bd:ad:2a:04:a2:92:ff:23:40:69:0b:97:2e:
                    ea:f2:0d:5d:88:53:2c:dd:2f:4f:84:20:38:7e:5d:
                    86:fd:10:7d:86:4b:75:53:ab:33:d9:ee:c0:e7:88:
                    14:5d:4c:a3:5e:66:0b:7d:b2:df:aa:a8:32:1b:c1:
                    87:6b:b1:f8:d0:c0:a6:56:c8:97:47:1a:31:62:df:
                    24:fe:67:3a:32:87:96:07:f4:45:10:95:af:f0:af:
                    75:fc:91:b3:73:2e:0e:1e:2c:fd:7a:6a:04:6c:8e:
                    8d:97:e7:02:79:1f:38:c4:b6:5b:03:31:68:ce:54:
                    e8:b6:da:11:63:04:fb:61:a6:39:e7:17:17:86:19:
                    6a:5f:b3:e9:a6:33:6c:79:a2:5c:c2:24:5d:60:d6:
                    ec:73:92:bf:97:34:54:ca:1c:52:72:28:bb:2e:f2:
                    3a:39:b7:bd:b8:88:23:3e:88:11:fe:25:b0:26:0f:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:7A:D7:D2:1F:74:63:02:35:41:84:69:29:B8:E8:80:B1:CF:72
            X509v3 Authority Key Identifier:
                keyid:B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/B41C5D20FCE773495931567B28D958303BB191D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31392e302f32342d3234203d3e20323638383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:1e:fe:de:85:63:07:0d:16:11:5c:29:07:48:62:e4:8c:a6:
         0d:5c:c7:b6:3f:23:cd:6d:52:2f:d3:ce:66:a7:26:fd:8b:3e:
         06:34:87:ee:3b:de:93:02:69:5d:02:aa:5d:1d:69:1f:d4:09:
         c8:07:50:38:ca:94:f5:7d:a6:ee:e3:25:81:a9:64:1b:c7:a7:
         1d:8d:b7:f4:3b:3e:e1:22:2b:3b:c3:c0:68:32:a3:14:7f:5b:
         bf:ac:94:4a:5d:55:98:e7:40:87:1b:21:70:08:47:21:6a:1f:
         6e:bb:8a:ff:db:d6:5f:dd:c2:5a:ef:58:f1:ee:ad:e4:df:8a:
         f8:15:35:15:a1:2d:ee:38:ab:d3:34:0f:42:2b:32:35:c1:92:
         8b:c0:ed:e9:9f:04:89:cd:c9:58:79:6a:fa:10:4c:d0:a8:f8:
         e5:c3:82:9f:d4:52:47:d3:a4:32:2c:c9:af:1b:a7:e1:a3:3d:
         82:70:a7:6c:38:b3:71:b7:24:44:df:0d:5c:13:d8:4e:f3:c3:
         a4:55:56:2a:6d:b6:56:f1:74:58:d2:8c:f8:ec:8f:20:ab:aa:
         39:26:44:d4:54:b5:26:23:b0:bb:6e:5a:d8:a5:1b:24:e3:0a:
         91:47:cf:80:05:c1:4b:c3:5f:36:6a:76:ed:6f:b0:51:9e:80:
         11:03:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org