Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e33302e302f32342d3234203d3e20323639313630.roa
File:                     34352e3138312e33302e302f32342d3234203d3e20323639313630.roa (raw, json)
Hash identifier:          Hk9EjbiNZGVA90RZJlMHCGLBTkXJCTRzpLK5kdvXNZI=
Subject key identifier:   85:CA:D2:43:F2:E2:53:44:B6:4C:66:9D:52:4D:F7:8C:B3:26:B7:A6
Certificate issuer:       /CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
Certificate serial:       4DC09070FE9C2B61C0F1F5F01339977EDDFE95EF
Authority key identifier: 0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e33302e302f32342d3234203d3e20323639313630.roa
Signing time:             Thu 04 Apr 2024 00:49:48 +0000
ROA not before:           Thu 04 Apr 2024 00:44:48 +0000
ROA not after:            Thu 03 Apr 2025 00:49:48 +0000
asID:                     269160
IP address blocks:        45.181.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c0:90:70:fe:9c:2b:61:c0:f1:f5:f0:13:39:97:7e:dd:fe:95:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
        Validity
            Not Before: Apr  4 00:44:48 2024 GMT
            Not After : Apr  3 00:49:48 2025 GMT
        Subject: CN=85CAD243F2E25344B64C669D524DF78CB326B7A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:ee:da:c7:dd:af:46:4d:29:61:5c:99:1c:
                    89:9d:9f:77:0d:11:a9:9a:c2:36:a8:00:04:3d:32:
                    f3:79:e1:b4:91:34:9e:bf:31:e1:ac:0e:3e:2b:32:
                    89:f6:db:ad:da:5b:a7:61:71:d7:fa:55:41:56:4c:
                    c6:01:a2:4a:d7:ac:b9:6c:af:45:79:36:86:62:12:
                    4c:f3:22:4f:b8:f4:7d:4d:a0:41:50:85:7c:54:25:
                    65:59:d6:36:06:f7:79:27:6c:8a:35:87:63:b1:97:
                    c8:8c:df:65:00:73:e6:05:fd:8d:22:1a:c3:6d:d1:
                    3b:9a:9b:6e:c6:eb:84:b7:23:d1:1a:f4:bc:b6:6c:
                    89:dc:93:db:ed:8e:07:74:9b:b9:6f:5b:5d:2b:c9:
                    e4:2d:f6:f1:78:62:68:02:dc:54:c0:f6:e2:6a:72:
                    a9:96:ad:77:cd:fe:21:5b:b2:08:c4:f1:88:2b:aa:
                    b7:20:ad:72:20:17:09:e2:ad:db:7d:c8:7f:e5:03:
                    12:7a:ea:7c:51:10:52:b2:ff:56:83:e0:67:56:38:
                    ab:a1:5d:b1:04:7d:10:31:f6:4b:7c:ec:8a:13:b8:
                    04:7d:80:19:3b:b6:da:e8:80:37:59:da:f5:8c:5d:
                    c6:24:39:b8:ad:8c:c3:56:b6:03:7a:c9:49:a5:cd:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CA:D2:43:F2:E2:53:44:B6:4C:66:9D:52:4D:F7:8C:B3:26:B7:A6
            X509v3 Authority Key Identifier:
                keyid:0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e33302e302f32342d3234203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:18:2a:56:62:40:1d:3e:3a:44:d0:a6:0a:ee:44:29:2a:9c:
         51:37:be:f5:33:be:f2:c8:bb:68:5b:77:76:17:24:1a:57:40:
         ec:02:5b:e6:04:9c:c6:9d:22:b1:36:c2:52:21:4e:fa:20:8c:
         05:63:68:1f:ac:17:a9:c4:d7:f2:33:ea:e3:0a:53:9c:74:8a:
         67:18:f7:4c:1f:7e:2e:b6:84:1b:d2:43:be:31:eb:97:f6:ac:
         2f:ef:51:f8:1e:12:d9:df:59:80:7e:e7:85:9e:67:81:5f:16:
         67:11:7f:ba:a2:10:b5:59:e6:9c:0c:93:e9:7d:69:f3:4a:ac:
         f0:c5:b3:b0:f9:e8:1b:ff:18:0e:eb:08:e2:dd:89:93:58:ae:
         c8:b8:17:b8:ed:64:d7:6b:5f:03:02:75:09:ba:08:3e:77:19:
         8e:9d:0a:54:38:70:59:43:8f:09:bb:d0:40:4a:fd:ad:14:70:
         c0:6c:2a:2c:8e:ce:fd:59:56:40:d5:3d:92:b6:5c:34:f2:03:
         a7:7e:78:f7:11:46:a7:33:5b:6f:52:27:0e:8f:c5:79:36:e6:
         17:fa:1b:b5:bf:f8:41:4c:e4:f2:5a:18:3c:44:fa:d9:8b:4e:
         4a:08:0a:ae:53:0b:c0:ce:9d:e3:3e:ed:04:a1:62:77:a4:95:
         a4:27:e0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org