Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3232203d3e20323731353832.roa
File:                     34352e3136352e3138302e302f32322d3232203d3e20323731353832.roa (raw, json)
Hash identifier:          AiJgcK0zV/mzlR2kR0/YPxhIl6aPN6IrKe5LS5nUKT4=
Subject key identifier:   B5:AD:2E:94:D7:71:03:E7:90:23:2D:F0:5C:FE:F9:70:A4:9B:73:86
Certificate issuer:       /CN=C932A24EC705A8BEBC3C663ACEF965792455753E
Certificate serial:       47F93CB21CC2E3269FCD451BF825E732CDF911B2
Authority key identifier: C9:32:A2:4E:C7:05:A8:BE:BC:3C:66:3A:CE:F9:65:79:24:55:75:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C932A24EC705A8BEBC3C663ACEF965792455753E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3232203d3e20323731353832.roa
Signing time:             Thu 25 Jan 2024 17:10:19 +0000
ROA not before:           Thu 25 Jan 2024 17:05:19 +0000
ROA not after:            Thu 23 Jan 2025 17:10:19 +0000
asID:                     271582
IP address blocks:        45.165.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f9:3c:b2:1c:c2:e3:26:9f:cd:45:1b:f8:25:e7:32:cd:f9:11:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C932A24EC705A8BEBC3C663ACEF965792455753E
        Validity
            Not Before: Jan 25 17:05:19 2024 GMT
            Not After : Jan 23 17:10:19 2025 GMT
        Subject: CN=B5AD2E94D77103E790232DF05CFEF970A49B7386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:29:e7:82:f9:f8:8a:11:52:16:bb:11:b2:21:
                    fa:f5:52:46:2e:e0:c9:ba:8b:6e:46:de:63:90:94:
                    a8:72:6a:0c:30:4c:f0:c5:a9:76:aa:82:3c:9f:0b:
                    a6:cd:bf:fa:03:cf:e2:cf:be:b1:9b:a0:35:c1:6c:
                    5c:0d:16:95:1e:c9:43:e6:25:eb:c4:41:c9:c8:2e:
                    b9:cb:44:16:60:72:55:90:bb:b1:57:0c:47:3b:5b:
                    7f:0b:7b:ca:d6:2e:fd:72:a9:a5:4e:e2:31:42:04:
                    03:08:6e:2d:ec:19:57:1f:0b:19:4c:8e:ca:e9:71:
                    ea:8f:9e:8a:6d:4e:50:aa:3e:c1:37:0e:e2:44:e0:
                    3a:5a:e7:85:84:7e:ec:6c:31:f5:66:db:6b:82:bd:
                    63:14:ef:24:99:2e:b4:5a:f7:7f:f0:ff:86:5e:f0:
                    f3:6c:7e:c8:9b:aa:c2:ef:a9:0e:75:1b:3c:e4:92:
                    1f:59:e6:19:e2:c0:0e:eb:92:f4:68:f0:55:59:2b:
                    89:96:83:33:15:12:6c:70:53:31:68:72:98:cc:d8:
                    ca:56:9e:99:7b:cf:01:53:6a:b3:c1:4d:4b:d1:1e:
                    bf:2f:a0:fd:ff:06:82:38:7b:4c:d3:2c:df:cb:27:
                    80:6d:49:10:fc:0f:79:eb:7f:1e:09:73:40:5f:8a:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AD:2E:94:D7:71:03:E7:90:23:2D:F0:5C:FE:F9:70:A4:9B:73:86
            X509v3 Authority Key Identifier:
                keyid:C9:32:A2:4E:C7:05:A8:BE:BC:3C:66:3A:CE:F9:65:79:24:55:75:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/C932A24EC705A8BEBC3C663ACEF965792455753E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C932A24EC705A8BEBC3C663ACEF965792455753E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3232203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:49:f2:92:37:81:35:7a:77:b2:b7:03:35:97:dd:7a:0a:a4:
         44:7d:87:02:08:d7:e3:cd:dd:09:16:79:fb:58:c8:d2:71:5e:
         a4:2f:28:cf:c5:94:91:f1:55:cd:2b:09:19:4a:df:e0:2f:f1:
         ea:8d:81:dd:7a:2e:5c:19:43:67:7a:90:ad:9b:b5:e9:23:06:
         01:5e:19:b2:92:ae:60:77:2a:96:7d:85:db:7d:80:0f:b2:a0:
         91:04:87:6a:07:de:b3:ca:3d:39:7e:67:dd:11:9b:cd:1b:18:
         bd:3a:a1:4f:6c:f0:3d:de:f2:49:c0:00:14:81:59:2b:77:43:
         21:f2:ee:83:38:e8:88:57:4a:cf:fb:9c:e1:d7:29:a4:18:66:
         1d:e2:8c:69:66:22:e5:d0:a8:d3:9a:d4:35:62:c7:7d:86:40:
         a7:04:51:ed:6f:56:dc:7c:6d:27:07:c8:a2:3a:83:d4:7a:70:
         00:84:b9:8b:20:2a:b5:c8:33:a9:6f:38:2e:d0:e7:c1:40:b9:
         fd:47:78:d7:41:8e:2e:d2:78:8a:0b:74:9b:a3:2d:d6:98:58:
         53:a6:9d:d1:89:ba:73:10:e6:32:76:36:c6:4f:e8:3f:ff:5e:
         7e:39:79:5c:c3:0c:a5:7d:97:bf:1f:91:a0:d1:40:b5:d8:b6:
         30:2e:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org