Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e32382e302f32342d3234203d3e20323639313630.roa
File:                     34352e3138312e32382e302f32342d3234203d3e20323639313630.roa (raw, json)
Hash identifier:          MBxW7c15cXe7dq4vWTyFEvEar9p3sRlx2A6ZEkJ2opA=
Subject key identifier:   40:0D:A3:71:6C:80:10:67:5E:B7:12:56:59:5C:99:E4:06:F0:47:BE
Certificate issuer:       /CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
Certificate serial:       4F75170D2456D526ADDF6C6121C451FC5A7691C5
Authority key identifier: 0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e32382e302f32342d3234203d3e20323639313630.roa
Signing time:             Thu 04 Apr 2024 00:49:47 +0000
ROA not before:           Thu 04 Apr 2024 00:44:47 +0000
ROA not after:            Thu 03 Apr 2025 00:49:47 +0000
asID:                     269160
IP address blocks:        45.181.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:75:17:0d:24:56:d5:26:ad:df:6c:61:21:c4:51:fc:5a:76:91:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
        Validity
            Not Before: Apr  4 00:44:47 2024 GMT
            Not After : Apr  3 00:49:47 2025 GMT
        Subject: CN=400DA3716C8010675EB71256595C99E406F047BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:ae:53:3c:27:d6:8b:c7:4a:95:dc:65:e9:
                    5e:17:89:a5:33:0f:7d:0d:8f:8b:ca:39:7b:80:43:
                    65:67:2e:19:19:bc:56:d3:f2:88:7e:e8:ba:ff:01:
                    b0:cd:4e:81:6b:8b:03:7f:85:ea:c2:df:2b:e8:0a:
                    b6:6c:0d:2c:69:17:14:6c:9f:e9:a2:33:a5:79:28:
                    9d:9c:39:7a:64:ae:4a:e3:4d:f3:3c:85:1f:b5:be:
                    99:a2:2f:f9:d6:38:21:cc:41:b2:15:84:01:e4:40:
                    f8:cb:d2:69:e3:59:03:4e:44:9e:b3:d3:9f:30:5c:
                    d3:85:bc:de:c4:d5:e9:2d:ee:16:3f:38:80:04:69:
                    29:03:20:9c:eb:9b:6b:77:ae:9c:92:73:b1:03:50:
                    d6:d3:9f:04:4c:3c:fe:32:b1:11:68:46:e6:04:77:
                    3e:10:55:9a:1e:1e:17:6f:a6:8a:7d:2e:16:9e:97:
                    9b:d9:6d:7e:48:49:4f:ea:7d:20:f2:92:e0:da:be:
                    33:5a:cf:65:3c:21:0e:72:e8:70:16:57:7e:5d:ac:
                    fc:44:83:2e:b1:e5:d6:b8:ff:38:5b:47:1e:bc:00:
                    a2:ea:0b:95:f2:1c:92:a7:ba:21:8a:e0:d7:9e:ec:
                    a7:ad:c4:38:59:ec:e1:54:49:43:10:95:cc:fe:88:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0D:A3:71:6C:80:10:67:5E:B7:12:56:59:5C:99:E4:06:F0:47:BE
            X509v3 Authority Key Identifier:
                keyid:0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e32382e302f32342d3234203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:81:d7:fc:c5:24:f5:30:5a:50:96:76:8d:a4:18:d5:b4:72:
         68:b3:e4:03:5e:70:97:e7:22:9a:2e:c4:26:67:e9:12:1b:78:
         88:9c:a5:51:23:cb:97:6c:95:4b:4e:87:63:69:60:96:7c:b0:
         7e:14:34:e3:1c:d7:3c:40:bc:35:dd:12:66:d2:cb:37:df:ea:
         4a:21:2b:e7:84:b7:61:70:0b:46:86:76:50:8e:ea:65:ae:ea:
         f2:b2:7d:e0:cb:7a:95:d0:8c:41:bd:b1:4f:3e:5c:fb:78:91:
         7e:0a:65:f1:c1:90:2c:bf:bf:52:d3:5f:56:6e:86:bf:0d:21:
         8c:39:d5:7a:6b:76:a5:05:26:82:8a:8f:52:ec:07:0f:1b:e0:
         27:04:94:0e:fe:a7:25:07:44:ae:ed:ea:fa:de:08:26:2c:25:
         63:d2:4c:11:90:fc:b1:0f:ae:ed:1a:b7:89:86:fa:0e:37:33:
         21:94:b7:76:22:ee:4d:ee:12:ed:d8:5e:3b:35:d8:8b:db:ba:
         32:c5:4f:58:72:d1:29:c5:c6:d1:90:24:ce:4d:fb:fa:c0:a9:
         d4:ae:da:16:06:37:c6:12:e0:73:87:9d:23:d8:d2:6f:b8:c8:
         0c:01:f7:5b:a6:3f:8c:72:35:94:53:36:46:42:7a:e5:b2:1e:
         20:6a:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org