Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa
File:                     34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa (raw, json)
Hash identifier:          zMxnNDCfJL2T46IC5+hawfIxJnnMSu5Vg/7YDht1TvU=
Subject key identifier:   71:D6:5A:26:A4:79:A2:30:83:5B:8A:9F:A2:83:F4:94:69:35:06:CB
Certificate issuer:       /CN=E8214DF93C84952C85789DC14F08528DEBA22E43
Certificate serial:       2F8775005355878D59001B4780CA6C53B5FC71E8
Authority key identifier: E8:21:4D:F9:3C:84:95:2C:85:78:9D:C1:4F:08:52:8D:EB:A2:2E:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8214DF93C84952C85789DC14F08528DEBA22E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa
Signing time:             Tue 07 Nov 2023 15:10:48 +0000
ROA not before:           Tue 07 Nov 2023 15:05:48 +0000
ROA not after:            Tue 05 Nov 2024 15:10:48 +0000
asID:                     269514
IP address blocks:        45.186.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:87:75:00:53:55:87:8d:59:00:1b:47:80:ca:6c:53:b5:fc:71:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8214DF93C84952C85789DC14F08528DEBA22E43
        Validity
            Not Before: Nov  7 15:05:48 2023 GMT
            Not After : Nov  5 15:10:48 2024 GMT
        Subject: CN=71D65A26A479A230835B8A9FA283F494693506CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:f3:e7:dc:56:c7:72:bd:e5:6d:b4:aa:d3:
                    b3:f5:3a:7a:21:0f:7d:4d:05:ef:79:7f:5c:51:5a:
                    3f:a3:c5:4e:42:4a:87:32:0c:18:52:51:cf:6c:1a:
                    77:f2:ac:94:13:7a:31:96:a4:6f:13:b3:08:b2:82:
                    e5:be:74:3c:cb:f3:af:73:87:b4:f8:f4:ba:74:67:
                    e3:55:93:cb:a1:77:90:36:e6:dc:2e:50:9d:af:d6:
                    4f:7a:c7:b2:76:d4:fe:93:ff:df:d3:85:ce:b6:cf:
                    84:33:d0:c5:df:3a:85:2f:ae:4a:cd:24:88:83:10:
                    be:26:b1:24:4d:d9:9b:22:d1:1c:8b:4d:c6:f4:ac:
                    39:f9:67:99:9b:48:87:4b:b1:9c:25:dd:45:49:68:
                    a1:68:99:6b:31:d3:60:7d:b8:b0:84:b2:3c:9c:77:
                    37:16:28:35:c0:e6:a3:79:dc:67:ac:c1:de:01:46:
                    c7:7d:0e:49:02:13:d0:16:03:f1:19:1f:d8:8b:82:
                    fd:f8:73:49:43:78:bc:28:20:9e:db:0a:2d:13:84:
                    b6:70:f0:d2:2e:53:41:d4:e1:d4:78:c7:b4:e7:69:
                    d8:8b:36:84:3c:af:64:25:f0:c5:7d:8b:9c:1a:73:
                    78:65:e1:7d:b9:18:00:f8:a5:97:07:16:26:3d:96:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:5A:26:A4:79:A2:30:83:5B:8A:9F:A2:83:F4:94:69:35:06:CB
            X509v3 Authority Key Identifier:
                keyid:E8:21:4D:F9:3C:84:95:2C:85:78:9D:C1:4F:08:52:8D:EB:A2:2E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/E8214DF93C84952C85789DC14F08528DEBA22E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8214DF93C84952C85789DC14F08528DEBA22E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/0/34352e3138362e3233372e302f32342d3234203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:47:59:a3:6a:a0:b3:f4:d4:bb:a4:f6:46:9c:44:57:de:33:
         3e:cf:44:36:34:c2:6a:58:cf:e9:4c:17:81:67:a2:e5:f3:03:
         16:04:27:1b:4c:58:40:5b:96:3c:d9:c9:e1:b0:2b:ea:cf:52:
         8e:f7:78:cf:11:cc:b0:7d:e7:50:37:f5:f8:ba:03:86:46:74:
         10:11:54:89:88:95:73:3a:fd:90:4e:c1:ed:e9:fe:f8:76:d0:
         9c:fb:a5:48:1a:47:06:cc:72:9e:69:79:81:a2:55:d3:d3:11:
         dd:85:4c:71:cc:fb:39:64:a2:cd:00:cd:c9:64:bd:86:28:62:
         2f:88:be:0d:d3:13:08:1e:2d:73:07:98:7c:f3:2e:ac:25:40:
         33:e7:f4:12:9c:1c:6f:07:18:cb:dc:80:f5:ad:02:d2:a9:79:
         15:72:9e:23:bd:ab:35:58:a0:f4:36:38:58:fa:62:11:92:e5:
         d2:8b:52:05:77:31:cd:90:06:84:bd:79:9f:11:38:73:6b:a8:
         60:8d:38:d1:99:b2:9a:e6:95:11:2e:1b:62:ed:c3:31:ac:c7:
         2c:ce:18:27:23:36:f7:e9:54:66:8a:cf:fe:fa:0b:4c:09:b4:
         86:a6:e3:5e:92:06:6a:9b:09:28:99:6c:d1:18:eb:25:f4:56:
         30:87:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org