Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/34352e342e32312e302f32342d3234203d3e20323632343539.roa
File:                     34352e342e32312e302f32342d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          vQdTwKR+uBieoIKn3CEBav3rgDSZ+qibCC98u+GQATs=
Subject key identifier:   2F:F2:53:91:CB:54:36:B3:6C:0C:E8:DD:97:7E:21:71:E5:1B:80:95
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       2A971AB432D0EBC7BFA5A5428ED5349CEBFA6723
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/34352e342e32312e302f32342d3234203d3e20323632343539.roa
Signing time:             Fri 12 Jan 2024 16:44:29 +0000
ROA not before:           Fri 12 Jan 2024 16:39:29 +0000
ROA not after:            Fri 10 Jan 2025 16:44:29 +0000
asID:                     262459
IP address blocks:        45.4.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:97:1a:b4:32:d0:eb:c7:bf:a5:a5:42:8e:d5:34:9c:eb:fa:67:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jan 12 16:39:29 2024 GMT
            Not After : Jan 10 16:44:29 2025 GMT
        Subject: CN=2FF25391CB5436B36C0CE8DD977E2171E51B8095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ac:eb:8e:c5:cb:1c:b4:c7:48:62:d5:fb:d1:
                    47:c0:07:ff:a0:8d:02:19:f0:cf:17:7b:ff:a9:ad:
                    a3:80:a3:0b:c9:37:0c:bf:c1:a1:28:4f:2c:c0:79:
                    a7:2b:5a:7d:1a:4b:45:8c:c3:e2:2b:56:18:6b:f3:
                    d0:83:22:b6:73:e6:56:7c:d9:18:61:28:f4:dd:da:
                    f7:28:1e:1e:bb:80:e4:55:a3:6a:68:ed:d9:af:24:
                    9b:ae:b7:8a:d4:57:de:37:77:16:9d:b6:e1:80:25:
                    56:85:91:af:0e:43:f2:06:2a:3a:96:05:3a:fe:48:
                    f8:93:65:75:7d:55:0b:16:6e:38:22:72:59:bf:f0:
                    13:fb:cc:77:fb:31:51:cb:cd:11:9a:fa:c6:1c:a4:
                    4f:5a:0e:57:74:85:71:06:a8:23:9b:2b:74:8b:61:
                    8c:a2:6c:71:58:9f:7f:e2:db:c5:67:83:0f:f7:2a:
                    d6:06:24:6e:79:99:95:df:fb:27:cf:cf:d7:29:6c:
                    b7:6a:68:d4:6d:48:46:e8:f9:6f:05:6d:27:20:c3:
                    22:b7:2c:7a:c3:05:fd:56:ad:99:3f:05:6b:00:ff:
                    8a:8c:9e:50:2c:ae:da:c9:17:df:ed:de:8a:49:da:
                    5c:4d:b6:2c:0f:16:96:bd:69:e8:e2:41:3e:db:3b:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F2:53:91:CB:54:36:B3:6C:0C:E8:DD:97:7E:21:71:E5:1B:80:95
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/34352e342e32312e302f32342d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:3e:d6:23:74:5e:0a:6f:6b:c5:f7:3f:5f:9b:b8:50:ea:f6:
         40:ee:e5:0d:7a:6f:d6:61:93:5d:a0:34:77:83:38:cb:9a:24:
         84:47:f7:63:d7:5f:0d:f6:c8:aa:6a:7a:6d:59:ad:42:db:8a:
         40:b1:a5:6a:7a:8a:18:b9:4b:44:2f:a8:72:a9:b6:61:9c:77:
         8a:5a:fd:c0:fa:07:59:97:be:b4:76:fa:79:87:0f:fa:09:84:
         fc:a2:ac:4b:f2:d7:48:e9:16:7c:4d:a6:da:15:8d:a1:f1:1d:
         82:28:e7:ff:3a:54:c2:01:80:04:46:26:3e:8d:2c:d3:9d:4e:
         c8:bc:62:25:ca:eb:18:3c:8a:c8:ec:5c:88:a1:12:9d:f9:8f:
         c9:c3:56:46:e9:e1:00:d0:7f:a9:67:b8:f2:9e:a9:05:b7:b8:
         75:20:79:23:89:d0:2e:e5:ca:8a:91:09:4b:f6:14:79:36:be:
         03:52:d8:67:72:df:f0:72:60:2a:5c:67:a4:a3:f7:8a:f8:a1:
         75:4c:c7:dd:b5:51:11:62:58:21:29:05:36:e7:44:0e:fa:58:
         1c:eb:16:0d:49:26:8e:2e:a4:eb:aa:ab:2d:56:72:86:a1:72:
         5a:1a:7b:9c:e5:12:39:21:10:65:5f:ff:70:18:8d:f9:fc:f7:
         f3:85:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org