Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39382e302f32342d3234203d3e20323639333732.roa
File:                     34352e3138352e39382e302f32342d3234203d3e20323639333732.roa (raw, json)
Hash identifier:          SOOCE/hK2YYt0IBiAxCVrkLWYVdOe4bglPd+VGtkuBQ=
Subject key identifier:   E3:36:E7:B7:55:AB:7B:56:33:D0:97:4C:F2:8D:7B:B8:E0:3C:D4:9B
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       29CAACEAC9CAFA57E7EC2A449E0CF98520BF13A8
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39382e302f32342d3234203d3e20323639333732.roa
Signing time:             Mon 18 Dec 2023 19:14:58 +0000
ROA not before:           Mon 18 Dec 2023 19:09:58 +0000
ROA not after:            Mon 16 Dec 2024 19:14:58 +0000
asID:                     269372
IP address blocks:        45.185.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ca:ac:ea:c9:ca:fa:57:e7:ec:2a:44:9e:0c:f9:85:20:bf:13:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Dec 18 19:09:58 2023 GMT
            Not After : Dec 16 19:14:58 2024 GMT
        Subject: CN=E336E7B755AB7B5633D0974CF28D7BB8E03CD49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:1d:12:ab:cb:ac:d5:ab:9b:a6:cd:5e:32:
                    6b:4b:88:c0:39:d3:8f:90:71:82:5f:5b:e9:96:e9:
                    34:ff:9c:14:35:11:7d:b8:87:c3:a7:d2:1f:34:7e:
                    d3:da:d6:cb:c1:2b:8b:6e:72:cd:d8:95:9d:c9:07:
                    03:c9:06:6f:27:85:49:b4:24:5c:80:9d:83:d1:74:
                    cb:5a:27:d4:8b:12:8f:fe:81:c6:4d:d5:af:22:72:
                    1d:ad:67:d1:40:f8:7d:d2:cc:67:89:ff:7e:d2:84:
                    24:37:38:a7:87:73:d7:7f:7b:79:d2:28:42:1d:3a:
                    9b:5d:3c:a5:01:7d:ea:9b:23:26:57:2f:2f:14:c7:
                    a3:e6:30:44:e3:0a:d7:59:d2:fe:3b:11:9d:03:a5:
                    7c:f8:6a:07:01:69:dc:cb:a9:55:d9:1e:d1:0e:68:
                    3a:aa:72:81:b9:91:01:3e:45:23:ff:4e:c9:86:9a:
                    28:84:a4:ba:18:06:f6:17:f1:a2:c0:2d:40:8a:d5:
                    a3:3b:f5:18:99:89:87:6a:b6:4a:52:87:0c:cb:3b:
                    e1:9c:74:45:1b:d8:ff:d9:84:77:d7:9d:f7:56:cc:
                    87:4f:f8:a1:32:57:73:4b:3a:94:f1:da:56:2e:ce:
                    42:93:9b:81:c8:b9:0d:8b:1b:de:20:22:f0:45:22:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:36:E7:B7:55:AB:7B:56:33:D0:97:4C:F2:8D:7B:B8:E0:3C:D4:9B
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39382e302f32342d3234203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:48:64:6c:92:72:be:36:d3:6d:ff:5d:94:df:e5:70:59:e3:
         60:75:e3:32:ad:30:ae:ad:aa:49:45:18:b7:8b:26:7b:53:36:
         c8:5a:8c:16:2c:b3:d0:c5:6f:98:eb:e7:e2:8b:7e:5c:0e:d8:
         85:58:a3:f1:18:45:51:48:59:dd:77:c8:4e:57:6b:ce:bb:1b:
         06:1f:7f:79:6a:09:05:c3:c0:41:9e:dc:57:f5:c8:b6:f5:28:
         b5:5b:a4:1c:07:8c:76:9f:69:54:f8:35:a3:72:f8:33:d2:45:
         c5:57:76:1e:a7:3b:33:92:e0:85:e4:fb:44:f6:98:a5:b5:89:
         32:6f:3b:df:6b:47:b3:6e:2c:2f:70:04:3d:d7:c0:dd:6f:23:
         45:62:fc:f8:63:fe:03:32:54:86:c8:13:4c:5a:50:ac:5e:8d:
         66:61:f7:e6:0b:d4:de:52:a6:7b:4b:db:cf:29:63:8d:d6:03:
         91:6d:58:d0:f2:29:f5:b4:87:9c:04:e4:da:07:25:0e:0c:84:
         5a:de:2d:f5:93:53:18:60:11:9c:7c:69:8b:2e:ce:33:98:49:
         52:73:95:d3:4e:c9:0f:f1:cf:e8:c7:c5:9b:0a:b3:c8:31:98:
         26:68:da:a8:ba:f3:47:5b:67:c4:28:cb:27:1a:8c:e9:2c:6a:
         7e:3a:f5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org