Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/34352e3137362e32342e302f32322d3234203d3e20323638393339.roa
File:                     34352e3137362e32342e302f32322d3234203d3e20323638393339.roa (raw, json)
Hash identifier:          L1fr+TACgo48e1z3u6K0h5l7Y+28Gx6xRnTvNApjLeE=
Subject key identifier:   8D:CB:8D:CA:3B:28:F3:F7:1B:8A:49:D3:F6:7D:C2:E4:0A:5F:CD:99
Certificate issuer:       /CN=844070BFA170F9C3D85A72401D93A864B2E4ACF0
Certificate serial:       2653714A37AAD2E7E8F630BAEBB90103E132F94E
Authority key identifier: 84:40:70:BF:A1:70:F9:C3:D8:5A:72:40:1D:93:A8:64:B2:E4:AC:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/34352e3137362e32342e302f32322d3234203d3e20323638393339.roa
Signing time:             Thu 15 Feb 2024 23:40:08 +0000
ROA not before:           Thu 15 Feb 2024 23:35:08 +0000
ROA not after:            Thu 13 Feb 2025 23:40:08 +0000
asID:                     268939
IP address blocks:        45.176.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:53:71:4a:37:aa:d2:e7:e8:f6:30:ba:eb:b9:01:03:e1:32:f9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844070BFA170F9C3D85A72401D93A864B2E4ACF0
        Validity
            Not Before: Feb 15 23:35:08 2024 GMT
            Not After : Feb 13 23:40:08 2025 GMT
        Subject: CN=8DCB8DCA3B28F3F71B8A49D3F67DC2E40A5FCD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b5:41:82:25:58:6d:bd:21:a0:5c:a7:74:6d:
                    e5:69:76:8f:66:66:bb:7e:46:e2:da:8a:70:e7:0b:
                    ed:47:80:27:34:00:b0:42:02:3c:8f:28:09:65:d9:
                    88:d4:17:0d:e7:46:ab:ac:13:4b:93:83:64:96:4d:
                    a4:6f:f7:0a:09:5d:c5:75:cf:df:8d:ca:b2:1e:bf:
                    89:7b:5f:2b:37:66:6b:b8:2a:b9:11:8f:f3:54:ef:
                    a6:ba:8d:9f:0d:ca:87:a6:cf:3c:76:15:8e:c8:39:
                    ac:39:33:4e:00:1f:42:c1:f3:d4:e1:ee:95:c9:e5:
                    9d:89:52:8d:09:ae:eb:06:e1:ad:22:71:68:4d:71:
                    20:49:fa:f6:83:78:a3:50:58:6b:f4:97:0e:a8:47:
                    f3:fa:b2:ac:b9:d4:a9:14:4b:72:65:38:c8:08:52:
                    a8:a2:16:da:45:0f:6b:8d:6c:f0:69:b3:9e:c9:7f:
                    39:c1:8c:07:80:a9:24:0c:74:78:37:4c:40:d4:e5:
                    0b:12:69:35:b0:79:97:28:7e:fb:63:6b:15:45:4e:
                    c7:6b:77:71:f5:d6:c0:ea:a6:58:ea:ae:07:e5:aa:
                    2b:37:ea:d5:04:a4:05:41:fd:30:4a:ec:55:be:85:
                    f0:56:a8:87:0e:41:d4:ee:ab:4a:97:3d:18:64:97:
                    83:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CB:8D:CA:3B:28:F3:F7:1B:8A:49:D3:F6:7D:C2:E4:0A:5F:CD:99
            X509v3 Authority Key Identifier:
                keyid:84:40:70:BF:A1:70:F9:C3:D8:5A:72:40:1D:93:A8:64:B2:E4:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/844070BFA170F9C3D85A72401D93A864B2E4ACF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/0/34352e3137362e32342e302f32322d3234203d3e20323638393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:cf:55:0e:65:42:91:f3:d0:8f:71:55:21:92:5c:51:1d:43:
         59:69:ab:1a:6c:2a:3f:74:c9:8f:38:f0:54:71:b4:69:72:73:
         54:3f:f9:a6:d9:b8:1e:b3:35:87:f7:28:cf:d4:db:49:af:e5:
         08:a8:64:60:7d:80:f7:49:1c:31:65:00:82:d9:eb:90:65:34:
         be:93:7c:35:2a:93:3a:70:23:ad:87:61:f7:cb:a2:72:81:5c:
         b1:5f:e9:40:14:73:4c:59:1c:08:bc:5b:21:b8:07:1b:6f:73:
         0b:c5:97:f0:7f:1b:db:12:1b:cf:08:db:b6:65:2f:14:c5:eb:
         18:0f:9f:c3:3a:e5:c8:7e:4c:3e:17:18:ac:55:9e:cd:25:0a:
         87:cb:20:66:97:d7:eb:1b:0d:c2:f7:57:cd:bb:f1:b9:ef:1a:
         87:63:30:94:ad:50:7f:87:26:a3:b4:55:31:4e:46:95:17:5b:
         9e:4d:6b:3a:11:b2:1f:99:bc:0d:e6:44:8a:e7:46:8c:a4:d3:
         8f:b0:cc:0b:36:99:a8:aa:06:ea:ed:48:06:02:31:73:87:57:
         06:d5:ed:82:2a:f2:af:61:2f:f6:c4:86:ef:a6:04:d5:52:89:
         b2:e0:59:6a:c8:d0:35:da:37:a8:cd:98:b1:d6:14:42:a8:6c:
         d0:6f:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org