Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32312e302f32342d3234203d3e203631383434.roa
File:                     34352e3137392e32312e302f32342d3234203d3e203631383434.roa (raw, json)
Hash identifier:          pyl73X+wlv6IiAL6p5T3qZ24+jSRiLewO1VJMltDcdk=
Subject key identifier:   93:46:C1:0C:1A:61:38:0E:DD:54:6D:3D:1C:A9:0F:4E:1A:30:5B:39
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       324FC7DC0CEEC8FBAB28703B8238B8075520D59E
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32312e302f32342d3234203d3e203631383434.roa
Signing time:             Thu 28 Sep 2023 00:44:00 +0000
ROA not before:           Thu 28 Sep 2023 00:39:00 +0000
ROA not after:            Thu 26 Sep 2024 00:44:00 +0000
asID:                     61844
IP address blocks:        45.179.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4f:c7:dc:0c:ee:c8:fb:ab:28:70:3b:82:38:b8:07:55:20:d5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 28 00:39:00 2023 GMT
            Not After : Sep 26 00:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:80:d1:ef:4a:78:74:09:84:ca:88:b4:64:05:
                    8e:44:84:ca:d3:d6:85:07:8f:85:b2:3a:51:52:bb:
                    bd:9a:18:ac:c4:53:bc:7b:2d:09:ba:4a:8b:83:7a:
                    fe:a8:17:24:f6:f0:aa:21:58:e2:92:8e:20:7a:74:
                    6a:b2:b2:b5:e4:5e:22:b0:ab:8a:6a:6a:c9:13:14:
                    4d:b8:1a:ee:55:16:d7:4c:8d:e4:cd:66:74:e0:1f:
                    b8:73:ad:41:b5:f1:06:a9:a5:84:79:dd:2a:3f:cd:
                    75:bc:12:ae:80:e5:e9:82:bf:01:df:2b:27:9b:7a:
                    b5:cc:7e:c9:f5:0c:82:7b:eb:63:ee:b2:4a:1c:ad:
                    6c:b6:0d:76:ae:32:b8:ce:85:8f:98:6b:e9:95:30:
                    eb:37:8e:fc:43:9f:18:6c:3a:17:a8:28:fe:67:63:
                    a2:43:00:76:22:25:67:18:16:40:6b:bd:07:df:b7:
                    9d:58:ee:10:f4:78:ce:3a:c1:ed:45:82:6b:50:df:
                    56:e1:88:b6:c7:05:4f:b1:01:1c:15:0c:7c:0a:ff:
                    66:71:7c:dc:b7:0b:04:b8:8a:92:eb:4b:c3:0e:cc:
                    4b:8b:34:51:2e:b4:03:36:10:73:cf:af:d5:10:08:
                    d7:59:e4:fc:e9:98:38:c6:3b:c9:93:6c:ac:fb:07:
                    2a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:46:C1:0C:1A:61:38:0E:DD:54:6D:3D:1C:A9:0F:4E:1A:30:5B:39
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32312e302f32342d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:cc:51:bd:07:1f:c8:55:9d:d1:e9:d0:f1:a9:88:2c:a7:04:
         f6:a4:bc:3d:d4:f9:6f:f4:8e:74:5e:0b:a2:9d:4b:ac:8b:71:
         4f:ce:f1:89:9d:ae:cf:a7:8c:f7:f2:8c:03:5e:34:22:f8:03:
         3a:77:d7:d5:f3:62:63:75:c0:68:60:1c:2c:44:b7:a8:14:01:
         ad:10:3c:2a:1c:57:3d:9a:25:8a:43:0f:81:0d:2d:49:2f:f8:
         89:36:b6:37:71:21:69:8a:68:69:1b:ac:59:8b:73:d3:e4:ff:
         2a:64:ec:00:34:f2:c3:d2:a7:97:13:58:4b:39:a0:28:c4:4a:
         e0:66:67:ce:e2:18:4f:43:20:d4:a6:07:39:7b:9c:05:2b:27:
         ea:40:94:d8:0c:97:a8:05:7d:54:79:3a:04:79:97:14:6d:f3:
         2f:88:b0:b2:dc:54:47:10:9a:75:9d:a1:e1:05:28:b2:c5:88:
         ed:20:22:50:ea:13:f0:8c:ce:da:28:b6:c7:9e:25:ab:3d:a7:
         3f:01:30:6f:c6:ae:19:a0:c7:55:c2:54:cf:e9:65:af:ab:c6:
         d4:da:42:6c:1b:a5:f3:d3:13:8b:c2:08:a5:c2:72:9b:43:18:
         f2:5a:38:6e:36:db:f2:d7:36:6d:05:59:83:a9:49:68:4e:4d:
         ef:52:4f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org