Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32342d3234203d3e20323638343434.roa
File:                     34352e3136312e36342e302f32342d3234203d3e20323638343434.roa (raw, json)
Hash identifier:          99VjfopVn6O7v40w1h93oQqh42T8CNtQADK/R6Oc0JQ=
Subject key identifier:   7F:BA:07:E3:9E:A4:73:52:A4:71:5B:B4:6E:C8:CF:14:64:D5:E4:BC
Certificate issuer:       /CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Certificate serial:       74C893B07D5AB7256A4B47C6249E4C79C42BF6DE
Authority key identifier: AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32342d3234203d3e20323638343434.roa
Signing time:             Mon 08 Jan 2024 16:45:41 +0000
ROA not before:           Mon 08 Jan 2024 16:40:41 +0000
ROA not after:            Mon 06 Jan 2025 16:45:41 +0000
asID:                     268444
IP address blocks:        45.161.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c8:93:b0:7d:5a:b7:25:6a:4b:47:c6:24:9e:4c:79:c4:2b:f6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
        Validity
            Not Before: Jan  8 16:40:41 2024 GMT
            Not After : Jan  6 16:45:41 2025 GMT
        Subject: CN=7FBA07E39EA47352A4715BB46EC8CF1464D5E4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:87:82:a7:a3:52:74:de:ea:92:13:ca:8d:
                    ce:d6:63:6b:fc:52:34:0b:e4:9a:08:ba:d7:02:3e:
                    28:04:c9:25:f4:8f:db:7c:d5:b1:ed:a3:c0:c1:ac:
                    6d:a1:37:4f:90:b3:08:58:da:a1:8d:65:a6:36:f5:
                    58:23:0e:f1:65:77:fe:86:88:84:0c:ae:b5:86:a0:
                    6f:b8:a8:07:7c:12:ef:d9:95:03:9a:91:3b:f7:9f:
                    fe:f0:c0:c9:07:2c:87:78:d7:64:94:8a:41:84:a7:
                    66:7d:5f:c4:27:95:34:88:aa:0c:d8:2e:ec:f4:f5:
                    12:be:01:6f:de:73:2c:bb:88:b7:9e:3e:e5:5a:ff:
                    b6:b2:a1:31:11:88:b5:25:e2:0d:c9:d3:b7:d3:52:
                    74:8c:61:e2:60:ab:4f:d3:7e:21:55:5e:6e:6a:9e:
                    a6:ff:7e:13:da:a4:fb:47:6b:39:25:2e:bf:c5:29:
                    cd:4d:66:9e:00:b9:8d:7e:1b:43:7b:9c:fd:9e:ee:
                    2a:2b:bc:5d:b9:e9:05:25:2a:77:24:82:cd:e3:1a:
                    36:8e:0f:61:60:1e:c8:8a:fb:cb:c5:11:25:e0:f0:
                    85:9a:1d:f5:d9:4e:af:11:e2:8a:99:5c:90:6a:d5:
                    2c:ac:b0:d5:e8:3a:c7:5f:6d:e4:60:06:b0:dc:15:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BA:07:E3:9E:A4:73:52:A4:71:5B:B4:6E:C8:CF:14:64:D5:E4:BC
            X509v3 Authority Key Identifier:
                keyid:AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32342d3234203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1f:ce:2d:8d:ae:be:6e:26:1a:0c:a9:7e:8c:da:73:47:a5:
         ff:14:b8:ed:ef:f7:53:fd:68:2c:f8:a7:9a:b8:a3:43:9d:cd:
         c2:26:6d:ea:1f:71:84:bf:c1:8a:b6:c5:95:a4:28:5d:c5:eb:
         b9:b7:18:3f:65:8b:19:24:5c:30:c3:99:b6:14:5a:c8:ff:d5:
         ff:58:78:29:c0:66:fe:29:40:8b:37:37:f3:77:26:2d:3b:a5:
         97:37:1b:db:86:56:ea:b3:32:32:0e:7f:2b:3f:83:96:1c:7a:
         97:10:88:5c:6d:fe:3c:06:9c:27:f8:a8:eb:8a:31:dc:f3:9d:
         32:3d:b6:f3:96:cc:f1:22:e5:f1:1a:9e:b1:ed:d8:04:c2:f6:
         7a:33:e9:2c:e8:a5:81:42:44:2f:f2:9e:3d:02:19:fd:74:21:
         99:a4:86:53:9d:e8:ee:c5:38:f3:60:96:6c:10:38:e5:0d:6f:
         af:0f:34:d1:0c:2e:be:a1:9c:86:36:a6:e9:36:62:e3:63:66:
         c1:37:cd:c2:05:d5:e7:77:bb:2d:f4:df:c5:40:6e:da:98:e4:
         a3:46:c8:02:bd:f5:18:ca:67:d5:c0:f1:5e:bc:28:8f:b6:23:
         b9:61:28:59:52:5e:31:34:0c:74:5b:8e:c1:f0:76:e1:81:5a:
         36:fc:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org