Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135322e302f32322d3234203d3e20323638303133.roa
File:                     34352e3136372e3135322e302f32322d3234203d3e20323638303133.roa (raw, json)
Hash identifier:          qVPu2VIMhrws1QYLKGkV4KDEqcw0wx2FIfM0BaIi+RM=
Subject key identifier:   4F:F7:4C:6A:FE:7D:24:C5:38:69:F4:DA:4A:22:E7:BC:FB:1F:BB:66
Certificate issuer:       /CN=D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277
Certificate serial:       3483AD9B6F53D5C644D86C0187FD8394CC6EF8D6
Authority key identifier: D5:0F:17:8B:3B:5E:87:2F:5D:2B:CA:07:D8:2A:F2:CA:1F:81:C2:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135322e302f32322d3234203d3e20323638303133.roa
Signing time:             Fri 02 Feb 2024 18:19:54 +0000
ROA not before:           Fri 02 Feb 2024 18:14:54 +0000
ROA not after:            Fri 31 Jan 2025 18:19:54 +0000
asID:                     268013
IP address blocks:        45.167.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:83:ad:9b:6f:53:d5:c6:44:d8:6c:01:87:fd:83:94:cc:6e:f8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277
        Validity
            Not Before: Feb  2 18:14:54 2024 GMT
            Not After : Jan 31 18:19:54 2025 GMT
        Subject: CN=4FF74C6AFE7D24C53869F4DA4A22E7BCFB1FBB66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:34:6a:4f:7f:f3:e5:3c:bf:79:b6:28:69:
                    a3:7e:ec:94:59:00:62:1b:44:27:25:7d:00:39:9a:
                    46:6a:35:75:49:1e:6d:04:8d:38:9b:3d:8c:a3:4c:
                    0a:51:99:d1:26:b8:14:9a:0c:ea:84:7a:5c:96:fd:
                    41:de:bf:d5:66:1c:ae:0c:ea:a1:bd:36:c3:ce:93:
                    b5:c6:2b:21:8e:92:f5:27:7f:48:f0:9b:69:22:52:
                    45:c9:db:60:5d:5a:28:cb:87:3d:29:16:10:29:18:
                    73:89:f3:ed:31:cf:9b:0d:69:93:ad:47:a7:26:97:
                    d2:6b:49:52:c1:36:75:5d:8e:5f:ef:1c:7d:65:0d:
                    1f:9e:f5:97:3c:fe:24:6a:db:34:f7:55:f6:4f:f7:
                    6e:d5:50:27:5a:bf:9e:54:8c:a2:7c:3c:78:1e:e6:
                    d6:0f:4b:ee:f3:26:d6:72:58:c0:41:6f:e7:2f:6e:
                    f0:60:d6:e4:18:14:ec:61:01:0b:6d:09:74:14:fc:
                    7f:f1:c0:30:09:c2:af:36:46:ec:77:05:23:24:10:
                    f0:e2:0a:ad:9b:19:fb:48:76:9a:67:cc:36:82:38:
                    cb:dc:4d:cc:f1:ca:13:bb:a8:3f:e5:6c:f5:46:25:
                    ff:ac:64:5d:64:23:cd:05:11:27:f1:41:75:3f:c7:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F7:4C:6A:FE:7D:24:C5:38:69:F4:DA:4A:22:E7:BC:FB:1F:BB:66
            X509v3 Authority Key Identifier:
                keyid:D5:0F:17:8B:3B:5E:87:2F:5D:2B:CA:07:D8:2A:F2:CA:1F:81:C2:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135322e302f32322d3234203d3e20323638303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:db:d8:01:8d:5b:7a:be:ef:86:8f:cf:e1:cd:ba:a9:09:
         d7:d3:60:44:60:c2:17:7a:79:bb:20:63:48:12:12:49:49:a3:
         1d:aa:1d:f5:1e:93:e2:af:18:34:fd:18:a8:3b:61:35:27:54:
         3e:b6:19:f0:fc:b9:9f:df:ec:40:8f:92:aa:c4:4c:d2:b9:2b:
         2e:5f:d8:65:66:07:0e:3d:f0:fc:90:8b:17:7c:a3:d3:75:28:
         83:13:be:41:7b:76:e9:8a:15:4c:5b:aa:3b:6d:bf:2e:0e:bf:
         4a:7f:4c:15:5c:77:36:29:5f:b4:e1:a7:04:4b:48:b8:32:20:
         42:1f:60:1f:73:c9:50:03:1d:4e:60:d5:ca:2a:5a:ef:a2:4b:
         8c:4a:3e:86:c7:86:a0:c6:d2:5c:b2:a1:17:cb:bb:f8:ad:73:
         ec:40:d6:33:95:2e:1d:12:97:b3:26:d5:06:73:1e:e8:01:b7:
         bb:a8:c0:e2:07:e5:18:56:e1:ac:00:e3:e8:72:d5:ef:dc:d4:
         de:23:84:79:ed:17:37:37:21:f8:52:7b:8f:c6:e8:5e:61:5d:
         6d:7e:ad:5b:0f:95:37:19:75:4c:3a:5a:bb:40:bc:b6:ed:d3:
         73:59:51:97:ef:f8:f8:cd:99:cd:3f:bf:0b:1c:cf:48:49:dc:
         a8:64:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org