Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/3139302e3130322e34362e302f32342d3234203d3e20323731353134.roa
File:                     3139302e3130322e34362e302f32342d3234203d3e20323731353134.roa (raw, json)
Hash identifier:          yP2RmPiXGDSFcptnm7cYEIyhCswAGGzpNFRcWmnq7ss=
Subject key identifier:   B4:03:19:B4:6B:70:33:E7:44:4F:B7:35:04:CA:0F:17:A8:3E:5E:7F
Certificate issuer:       /CN=34480FB5377B9D616C84A3C34C05E236C464E996
Certificate serial:       5A528F239EC85F69D1C4987B0D53D4A146109A2F
Authority key identifier: 34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34480FB5377B9D616C84A3C34C05E236C464E996.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/3139302e3130322e34362e302f32342d3234203d3e20323731353134.roa
Signing time:             Mon 01 Apr 2024 11:52:16 +0000
ROA not before:           Mon 01 Apr 2024 11:47:16 +0000
ROA not after:            Mon 31 Mar 2025 11:52:16 +0000
asID:                     271514
IP address blocks:        190.102.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:52:8f:23:9e:c8:5f:69:d1:c4:98:7b:0d:53:d4:a1:46:10:9a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34480FB5377B9D616C84A3C34C05E236C464E996
        Validity
            Not Before: Apr  1 11:47:16 2024 GMT
            Not After : Mar 31 11:52:16 2025 GMT
        Subject: CN=B40319B46B7033E7444FB73504CA0F17A83E5E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:5f:51:5a:8a:28:36:11:84:cb:dc:c0:28:
                    55:5c:4d:9a:26:04:d7:24:b3:13:b4:67:8d:4c:cc:
                    69:98:1b:30:a6:0c:b3:ed:6c:da:b7:4b:0e:fc:ab:
                    7a:ec:7a:b3:a4:7c:be:18:7e:76:44:e0:f0:97:bb:
                    5d:f7:1b:79:77:7d:fb:f6:08:10:ae:95:7f:7c:7f:
                    c2:58:c7:cb:66:30:84:db:29:6e:81:0e:e1:6a:24:
                    3a:19:35:8a:86:43:8f:a5:5e:f1:93:91:6d:58:22:
                    4d:1d:74:69:d2:ef:f7:52:ef:b1:e1:a4:ce:de:79:
                    4f:dd:8c:8c:e7:78:33:40:19:cf:56:13:31:14:f0:
                    8a:5a:5a:4a:9d:d0:0a:0c:26:33:8a:38:2d:5c:92:
                    cb:20:20:4f:a5:f8:f7:09:69:21:52:b6:e6:5b:96:
                    bd:f3:3e:c8:c0:13:f9:65:71:60:0a:b6:9e:01:7c:
                    44:d1:45:66:16:fb:c7:f1:ed:f5:54:ea:83:91:7e:
                    60:85:f6:b6:cb:a0:9e:5e:a7:02:9a:fc:44:a1:b6:
                    78:8e:10:f1:53:88:b4:19:db:1b:ff:b2:31:10:5f:
                    5b:de:e5:82:da:73:23:6d:19:3e:57:5c:14:5c:1a:
                    85:de:bf:e6:e2:52:88:14:24:1c:d5:d0:cd:12:12:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:03:19:B4:6B:70:33:E7:44:4F:B7:35:04:CA:0F:17:A8:3E:5E:7F
            X509v3 Authority Key Identifier:
                keyid:34:48:0F:B5:37:7B:9D:61:6C:84:A3:C3:4C:05:E2:36:C4:64:E9:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/34480FB5377B9D616C84A3C34C05E236C464E996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34480FB5377B9D616C84A3C34C05E236C464E996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/0/3139302e3130322e34362e302f32342d3234203d3e20323731353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d6:7a:58:18:d3:bd:55:3d:6b:ad:e3:1f:1e:af:9d:d4:49:
         f8:53:f6:6a:f5:6c:98:79:5c:c5:d0:ad:b0:2b:ca:a3:66:1d:
         81:3f:0a:db:b8:58:9e:ab:83:31:6b:fc:1e:fa:60:bd:6f:6f:
         95:8e:27:d0:8f:24:c8:e5:ee:f7:5c:70:2a:17:27:51:20:3d:
         19:43:4e:71:74:69:a1:11:61:bc:ba:9e:8e:2d:da:d7:c2:5d:
         c6:88:68:d9:e7:13:b8:32:e6:43:ba:02:01:b6:7e:f0:83:5d:
         a1:88:3d:e3:05:09:6a:a0:47:06:51:e2:56:5e:c6:30:df:dc:
         16:e2:af:7d:01:08:dc:5f:80:96:97:25:19:ea:e4:a1:cc:a9:
         b9:9b:c9:d4:1b:8a:63:56:43:df:53:68:21:1e:0e:2c:6f:b9:
         82:f4:d2:95:ff:74:70:43:85:d1:4a:a4:dd:07:8a:e9:64:e1:
         a2:76:46:7b:d5:e8:82:a7:01:b5:36:f0:dd:76:41:78:cc:8b:
         c3:cd:d6:7a:87:e3:cb:05:ba:1d:55:6e:70:f5:48:f2:93:40:
         ac:c9:48:bc:37:98:39:e4:40:21:a9:0a:8c:1c:d2:31:10:70:
         80:21:73:da:fb:6d:47:c9:5c:d1:28:2f:8d:8e:ba:fe:56:a7:
         e7:e1:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org