Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSmmZYhHGrLaUdtdCGe15RaGY9SihX31MKFGCpXUsC7k/1/34352e3136392e38342e302f32322d3234203d3e20323638313030.roa
File:                     34352e3136392e38342e302f32322d3234203d3e20323638313030.roa (raw, json)
Hash identifier:          uriPXWyn7lgO+TmWHip4La55w7yU/fLBc2VRxgiHXt0=
Subject key identifier:   48:B9:17:8F:E8:17:8C:01:29:1E:09:78:5E:CF:01:1D:F3:D7:39:7C
Certificate issuer:       /CN=0EB4D9213D3C6D2C54B0733ADB0D5F54C8F38891
Certificate serial:       5F63E2AF19B7DEEDE1B13F321E0C32A6D175129F
Authority key identifier: 0E:B4:D9:21:3D:3C:6D:2C:54:B0:73:3A:DB:0D:5F:54:C8:F3:88:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EB4D9213D3C6D2C54B0733ADB0D5F54C8F38891.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSmmZYhHGrLaUdtdCGe15RaGY9SihX31MKFGCpXUsC7k/1/34352e3136392e38342e302f32322d3234203d3e20323638313030.roa
Signing time:             Thu 04 Apr 2024 12:16:52 +0000
ROA not before:           Thu 04 Apr 2024 12:11:52 +0000
ROA not after:            Thu 03 Apr 2025 12:16:52 +0000
asID:                     268100
IP address blocks:        45.169.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:63:e2:af:19:b7:de:ed:e1:b1:3f:32:1e:0c:32:a6:d1:75:12:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EB4D9213D3C6D2C54B0733ADB0D5F54C8F38891
        Validity
            Not Before: Apr  4 12:11:52 2024 GMT
            Not After : Apr  3 12:16:52 2025 GMT
        Subject: CN=48B9178FE8178C01291E09785ECF011DF3D7397C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e5:c4:1f:30:96:d3:21:12:e0:7b:52:17:8c:
                    6d:72:83:52:39:cd:58:2a:29:5c:b1:b8:43:85:83:
                    87:64:14:6c:0c:07:ea:e2:4b:cc:f8:f1:26:16:79:
                    0e:44:31:22:60:b5:fe:e6:63:09:4d:6f:dc:ca:14:
                    df:24:6b:a9:2f:90:47:eb:38:20:f3:36:a5:d5:98:
                    5a:59:00:4a:ec:96:8a:dd:83:57:d7:c7:59:83:8f:
                    7d:16:0f:72:8d:4e:1c:0d:9c:dd:87:a9:d7:c4:0a:
                    61:31:0e:32:9b:50:b9:d7:8d:80:56:57:4a:4e:73:
                    72:b6:7d:49:ad:9f:4b:52:bf:06:ab:f5:d7:f3:af:
                    b7:7a:47:68:f4:c0:44:11:ca:f6:f5:da:0e:ed:05:
                    91:10:7e:03:5e:e1:54:85:46:87:44:2e:04:7f:64:
                    8d:f6:3f:bd:a4:1b:d8:97:11:6e:55:4d:0f:a8:b8:
                    a6:6e:41:68:01:03:15:27:ac:4a:e4:7a:0e:59:87:
                    b2:76:d6:d6:4f:b6:f1:2c:32:30:06:1d:e2:5e:d6:
                    af:2a:a9:47:d7:ad:3a:47:a4:87:ac:a5:37:c1:21:
                    99:4d:7f:fe:b4:79:54:99:87:65:e1:3b:f2:73:c9:
                    85:9a:c1:cb:83:fd:fc:2a:9e:44:49:8b:d1:11:0c:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B9:17:8F:E8:17:8C:01:29:1E:09:78:5E:CF:01:1D:F3:D7:39:7C
            X509v3 Authority Key Identifier:
                keyid:0E:B4:D9:21:3D:3C:6D:2C:54:B0:73:3A:DB:0D:5F:54:C8:F3:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSmmZYhHGrLaUdtdCGe15RaGY9SihX31MKFGCpXUsC7k/1/0EB4D9213D3C6D2C54B0733ADB0D5F54C8F38891.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EB4D9213D3C6D2C54B0733ADB0D5F54C8F38891.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSmmZYhHGrLaUdtdCGe15RaGY9SihX31MKFGCpXUsC7k/1/34352e3136392e38342e302f32322d3234203d3e20323638313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:ba:dc:57:c6:6b:1d:9b:00:e3:39:dc:4c:d9:da:9a:a2:1e:
         30:28:32:11:53:b4:6e:7d:de:12:09:0e:45:ad:19:5f:6a:dd:
         9d:e7:d6:93:c5:62:c4:4f:22:8e:6c:a5:fa:6a:39:07:50:b5:
         79:ec:6e:c9:33:7d:22:55:e9:10:76:b3:5b:1b:11:59:c0:96:
         ed:45:5c:b1:4c:ad:be:a8:2b:49:97:cd:e5:58:a4:26:14:5a:
         55:c1:df:35:af:8e:fe:18:83:67:7c:c4:52:5a:69:bf:50:ef:
         56:66:75:f1:e7:4d:9b:ed:f4:85:fc:9c:80:39:5b:a1:bf:e5:
         2d:e2:1d:9d:8c:df:6d:85:7f:97:a5:cb:03:84:ba:1c:21:5c:
         92:7c:b9:a4:c5:09:fd:d7:47:98:9d:8d:78:ef:79:fd:5a:8a:
         57:bc:aa:10:58:64:14:68:a3:b6:07:83:7d:6a:a2:b9:b3:41:
         1d:82:7b:31:af:21:be:b1:3d:42:2e:1a:38:2e:d5:f5:a7:a1:
         ec:c3:d6:34:d8:42:23:9d:bd:27:57:b7:16:fd:76:e9:d0:57:
         52:e4:35:3b:99:44:95:87:ac:f2:36:7f:4e:d9:f1:0d:68:88:
         ed:69:ba:fd:6e:f8:59:66:cb:cc:4c:7b:38:2e:fa:f7:78:1f:
         e3:4e:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org