Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32342d3234203d3e20323632343934.roa
File:                     34352e3137392e3131322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          ir2vRJHCDDIvxNARmPxhzejiPbcDQt4IMIfkMsyKkWg=
Subject key identifier:   F3:1A:DC:32:78:06:31:94:BE:5B:6E:F4:9C:24:2D:0A:AF:96:02:B0
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       41368AEF051EFCDD87FF563C0739E9B4DA7A0A3A
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 10 Apr 2024 11:26:01 +0000
ROA not before:           Wed 10 Apr 2024 11:21:01 +0000
ROA not after:            Thu 10 Apr 2025 11:26:01 +0000
asID:                     262494
IP address blocks:        45.179.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:36:8a:ef:05:1e:fc:dd:87:ff:56:3c:07:39:e9:b4:da:7a:0a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Apr 10 11:21:01 2024 GMT
            Not After : Apr 10 11:26:01 2025 GMT
        Subject: CN=3082010A0282010100C182BC46498AF96FC91B170752E27CF3AE25A7B8DA25EF08B653258737853A092DDF9AB4A72EAA08D1F85B615DC3154B3452BB30AA0C66F6D160B51EC261B7C08D3CDDCC946976E27534B1499723EE26827C4E6AC2B05863068902857AD0D7607F55084A7B31674D176861D12C992262827BB67BEFE71C539DA0354E65DEFF39022C1F5BBCBAFD2DBEC573DDBF141D9337254E5707FB355C68B35256D5123CC22BD2F71936B1D5C94D79A63A00613F014FBEAC1B99A68C4665F69C47C874D15D869B719BADB3AACC81D3F4B5774BB8ADED6023883DCC8BB7EDF4BB898E16448A6F62A597BB11DAAA64032D9525758B2355BA2C0C25B925B81CF2F202FDF94E1F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:bc:46:49:8a:f9:6f:c9:1b:17:07:52:e2:
                    7c:f3:ae:25:a7:b8:da:25:ef:08:b6:53:25:87:37:
                    85:3a:09:2d:df:9a:b4:a7:2e:aa:08:d1:f8:5b:61:
                    5d:c3:15:4b:34:52:bb:30:aa:0c:66:f6:d1:60:b5:
                    1e:c2:61:b7:c0:8d:3c:dd:cc:94:69:76:e2:75:34:
                    b1:49:97:23:ee:26:82:7c:4e:6a:c2:b0:58:63:06:
                    89:02:85:7a:d0:d7:60:7f:55:08:4a:7b:31:67:4d:
                    17:68:61:d1:2c:99:22:62:82:7b:b6:7b:ef:e7:1c:
                    53:9d:a0:35:4e:65:de:ff:39:02:2c:1f:5b:bc:ba:
                    fd:2d:be:c5:73:dd:bf:14:1d:93:37:25:4e:57:07:
                    fb:35:5c:68:b3:52:56:d5:12:3c:c2:2b:d2:f7:19:
                    36:b1:d5:c9:4d:79:a6:3a:00:61:3f:01:4f:be:ac:
                    1b:99:a6:8c:46:65:f6:9c:47:c8:74:d1:5d:86:9b:
                    71:9b:ad:b3:aa:cc:81:d3:f4:b5:77:4b:b8:ad:ed:
                    60:23:88:3d:cc:8b:b7:ed:f4:bb:89:8e:16:44:8a:
                    6f:62:a5:97:bb:11:da:aa:64:03:2d:95:25:75:8b:
                    23:55:ba:2c:0c:25:b9:25:b8:1c:f2:f2:02:fd:f9:
                    4e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1A:DC:32:78:06:31:94:BE:5B:6E:F4:9C:24:2D:0A:AF:96:02:B0
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0d:b3:31:67:d8:05:35:e8:40:a2:0e:67:ec:93:f5:02:95:
         ee:d1:65:cf:d5:0d:84:67:7a:73:46:4a:68:1d:ec:ed:ef:c6:
         68:fe:d3:ba:1f:ee:e2:75:ab:e3:5e:47:a1:ed:02:ad:79:4a:
         bb:69:2d:39:98:d9:00:9b:62:66:2f:fd:4d:cd:83:dd:63:57:
         64:4b:e4:b8:e5:46:60:75:87:37:15:2a:fd:fe:ba:1e:cd:b3:
         48:7a:fb:d1:4e:2a:ee:4e:c9:34:95:54:ca:99:c4:71:a7:af:
         25:75:03:3e:25:82:af:f4:e4:f6:44:ed:30:a7:cd:5e:8c:c6:
         8a:41:6f:37:27:0e:2d:2f:c1:1b:53:f4:25:9b:ee:31:66:76:
         b6:f7:6d:8c:52:61:a1:60:c8:de:31:5e:8e:84:0e:f2:7d:f3:
         30:10:f5:ba:30:60:08:b9:d7:b7:c8:59:18:dd:7f:a3:39:24:
         98:af:56:20:df:51:4b:7d:b0:9b:d0:9a:b0:0f:43:4e:12:33:
         49:62:de:0b:73:a8:ff:e8:d6:d9:b2:14:77:17:fd:28:56:7f:
         32:c9:0d:80:cb:92:27:cd:3e:28:bd:b0:e6:dc:a7:50:9d:96:
         5c:ec:9a:42:a3:a7:59:b0:a8:62:6b:5d:c6:c6:62:82:5b:07:
         13:a7:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org