Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e33312e302f32342d3234203d3e20323639313630.roa
File:                     34352e3138312e33312e302f32342d3234203d3e20323639313630.roa (raw, json)
Hash identifier:          3+fex9WPg0BP9GBo9JX5UD6TuU9sB1E/jn761XEI5Wo=
Subject key identifier:   B0:5C:8F:87:24:10:FB:33:A6:03:64:35:F2:31:18:1E:17:CF:25:09
Certificate issuer:       /CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
Certificate serial:       2489AB8C041A02E9066F153D469AA730D96002F4
Authority key identifier: 72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e33312e302f32342d3234203d3e20323639313630.roa
Signing time:             Thu 11 Apr 2024 10:56:37 +0000
ROA not before:           Thu 11 Apr 2024 10:51:37 +0000
ROA not after:            Thu 10 Apr 2025 10:56:37 +0000
asID:                     269160
IP address blocks:        45.181.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:89:ab:8c:04:1a:02:e9:06:6f:15:3d:46:9a:a7:30:d9:60:02:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Validity
            Not Before: Apr 11 10:51:37 2024 GMT
            Not After : Apr 10 10:56:37 2025 GMT
        Subject: CN=B05C8F872410FB33A6036435F231181E17CF2509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:28:19:41:1a:51:26:09:18:6b:e7:1a:c0:
                    b9:52:a4:33:9f:07:41:77:5b:e2:18:76:6d:12:01:
                    bd:95:1f:a6:5f:98:ce:07:4b:bb:1d:69:d4:43:f4:
                    2c:fa:bb:cb:1d:cb:26:85:49:b4:04:a6:5c:95:f6:
                    8d:77:dd:15:3a:9d:6e:1e:86:59:17:65:29:d4:4b:
                    cc:80:2c:31:4b:7a:ec:98:68:ae:5e:91:73:e4:f4:
                    e7:c7:15:82:94:e6:72:b1:36:e4:c3:37:44:d7:85:
                    e0:cb:03:f9:a0:7a:0b:1a:29:57:84:09:e4:03:16:
                    95:28:3f:34:c2:0f:f3:7f:af:03:41:92:04:ab:57:
                    ee:95:69:26:ae:d2:f2:2d:54:85:6d:8d:30:d1:10:
                    5a:19:84:1b:34:71:76:9f:96:32:ad:04:cf:5d:90:
                    82:42:08:eb:6e:59:c0:6b:45:b5:e5:fa:3d:15:95:
                    bc:4c:6e:62:7f:40:d0:1d:c1:ab:61:35:08:14:77:
                    4e:5c:e4:21:af:18:da:0e:ef:6e:02:aa:c0:17:8a:
                    c7:fe:56:20:97:96:c0:eb:53:97:b7:9f:eb:a4:df:
                    cb:23:86:21:d0:49:b4:d7:c5:6d:dc:a2:e0:5c:ea:
                    31:a5:7f:87:cf:7b:da:b3:e8:51:28:93:a3:bb:4b:
                    fd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:8F:87:24:10:FB:33:A6:03:64:35:F2:31:18:1E:17:CF:25:09
            X509v3 Authority Key Identifier:
                keyid:72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e33312e302f32342d3234203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:56:17:26:c6:48:98:eb:53:52:c6:33:8f:ff:f7:c7:82:ed:
         4b:13:99:11:66:58:49:dc:ad:32:8b:8c:e3:22:77:03:0e:c8:
         c4:7b:6b:38:2c:e4:56:ef:9e:f4:63:00:3b:b2:b7:d8:c4:bb:
         5f:89:43:e8:b4:19:36:9c:e4:03:91:ec:89:c8:77:b7:36:fe:
         d5:e6:17:7e:6e:3f:8d:fd:8c:09:b6:01:62:51:fb:f5:59:a1:
         4e:58:21:60:5f:22:93:79:3f:8f:33:66:09:bc:24:45:0f:af:
         b2:f7:bc:fd:3f:ea:91:03:21:1c:9a:cb:a9:7a:ea:97:07:25:
         15:3e:97:66:11:6c:8c:3c:2c:53:4f:5d:c3:e8:3a:ab:83:f1:
         aa:e0:ce:4c:13:56:62:05:da:01:88:90:79:88:7e:98:9f:99:
         a7:32:a8:b7:ab:78:0e:c4:db:6f:ef:06:da:2f:c7:42:e1:e2:
         b2:cb:a9:f1:b6:f8:d3:45:71:42:ac:f0:2a:b8:64:b6:59:a3:
         35:61:ae:b7:b4:8d:2d:04:f8:65:df:c8:d8:74:bb:40:9a:42:
         eb:30:37:27:55:4d:c0:78:b3:84:d0:06:a7:e7:d7:56:b7:24:
         78:0b:ad:d9:f1:e2:6c:d9:94:7f:fa:3b:d1:83:b0:69:67:de:
         9b:2c:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org