Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e32392e302f32342d3234203d3e20323639313630.roa
File:                     34352e3138312e32392e302f32342d3234203d3e20323639313630.roa (raw, json)
Hash identifier:          L6/fJ1XQOBLWvpel3s8Go4M8ZsD+ZgYVYBvOu8sF8XA=
Subject key identifier:   25:E4:34:3D:CE:C0:0A:1F:73:BB:C9:8C:B7:75:82:D6:D1:5A:43:11
Certificate issuer:       /CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
Certificate serial:       7503C8CF7FA6BF6A88D79DFB59DD2274936088A3
Authority key identifier: 0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e32392e302f32342d3234203d3e20323639313630.roa
Signing time:             Thu 04 Apr 2024 00:49:47 +0000
ROA not before:           Thu 04 Apr 2024 00:44:47 +0000
ROA not after:            Thu 03 Apr 2025 00:49:47 +0000
asID:                     269160
IP address blocks:        45.181.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:03:c8:cf:7f:a6:bf:6a:88:d7:9d:fb:59:dd:22:74:93:60:88:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
        Validity
            Not Before: Apr  4 00:44:47 2024 GMT
            Not After : Apr  3 00:49:47 2025 GMT
        Subject: CN=25E4343DCEC00A1F73BBC98CB77582D6D15A4311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:9f:0d:8d:3a:a5:95:ba:99:d9:d0:17:cc:
                    d5:5a:f4:30:37:de:cc:b2:27:b6:4c:c5:34:56:b3:
                    4b:8d:e6:ea:96:2b:04:59:f2:69:d8:2f:da:29:80:
                    a4:43:e8:48:77:70:fa:1d:72:75:a9:2e:19:3a:22:
                    f1:95:b8:b4:8c:91:32:64:bd:aa:bc:f6:b1:4e:61:
                    bb:c7:08:fe:26:f3:fd:62:42:82:09:97:72:56:37:
                    6a:f3:42:6a:b8:95:b7:36:15:20:bc:77:5c:fb:bc:
                    58:e6:e9:2a:c9:bb:8f:c3:30:2c:ea:e3:f5:90:82:
                    a7:62:a3:c1:8c:11:ad:05:82:36:1f:e0:2b:c7:4a:
                    49:a5:f8:e9:0f:3f:4c:f9:85:b7:ba:83:92:75:c8:
                    af:dd:f0:ea:b8:0b:1f:92:8b:f6:c7:2e:11:62:08:
                    f0:bc:46:c1:d9:3b:dd:ba:14:23:49:0c:a4:50:20:
                    cc:6f:1b:93:24:d7:35:b5:41:2c:2b:2f:10:f1:ce:
                    82:29:f9:6f:22:f3:da:0c:e1:f4:67:aa:ec:6f:d2:
                    bb:3a:8a:26:1f:2e:ca:06:33:e3:83:91:26:98:c0:
                    a8:ac:df:97:f6:4d:75:f4:4f:22:e7:5e:10:58:3e:
                    bc:03:55:19:f0:62:4e:96:88:cc:82:72:88:08:b1:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E4:34:3D:CE:C0:0A:1F:73:BB:C9:8C:B7:75:82:D6:D1:5A:43:11
            X509v3 Authority Key Identifier:
                keyid:0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e32392e302f32342d3234203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:2d:9b:89:ec:fc:f1:00:10:1c:97:0e:c1:c6:49:58:c7:db:
         41:2c:b8:49:39:27:2a:6a:0d:3b:4d:48:bc:d4:07:75:71:43:
         21:55:dd:17:69:ce:a8:e9:ed:5a:3c:29:a3:7c:1d:29:a6:b4:
         1e:ff:65:5a:f8:48:23:80:ee:a8:a3:90:34:2c:cd:c6:e6:7e:
         7d:1d:c3:28:a9:c1:4f:a0:2c:47:1f:d4:85:21:37:60:a5:ec:
         cd:a5:bb:dc:51:54:6e:4d:1b:8a:a9:2a:3c:27:d2:2b:fe:56:
         4b:95:05:cb:62:7a:16:52:5a:8f:50:ca:29:da:62:7b:eb:26:
         f5:e4:27:3a:a9:85:23:83:0f:a9:7c:33:6c:20:c6:2d:fc:60:
         26:44:19:f7:2d:ef:c5:f1:a1:04:60:b3:79:f7:20:e5:9e:84:
         89:aa:43:d4:b3:f1:88:bc:53:73:e9:0f:e9:96:fc:7c:e0:3e:
         b4:bd:b0:09:ba:1d:c3:b6:da:03:53:7a:ef:ea:4b:54:5a:54:
         b0:ff:09:d7:b5:e9:3f:02:fa:bf:7a:2a:1d:7d:99:d9:03:75:
         da:c5:41:86:98:06:0e:8a:19:fc:73:9f:75:f3:5c:90:03:2d:
         e5:8b:ca:26:85:f9:01:15:56:a4:f4:41:07:5e:69:f0:3e:35:
         df:75:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org