Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131332e302f32342d3234203d3e20323632343934.roa
File:                     34352e3137392e3131332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          hvdkx4RckFbvjl1qjhT9F38Ai4ioFP9ie/93ZgCDeLU=
Subject key identifier:   1A:36:8D:F8:37:9C:BC:96:4E:D1:EC:98:F6:C8:96:8E:11:5C:85:61
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       177C1043252F9D0D2CAE3FE54E43F5C9ACFD782B
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131332e302f32342d3234203d3e20323632343934.roa
Signing time:             Wed 10 Apr 2024 11:26:53 +0000
ROA not before:           Wed 10 Apr 2024 11:21:53 +0000
ROA not after:            Thu 10 Apr 2025 11:26:53 +0000
asID:                     262494
IP address blocks:        45.179.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7c:10:43:25:2f:9d:0d:2c:ae:3f:e5:4e:43:f5:c9:ac:fd:78:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Apr 10 11:21:53 2024 GMT
            Not After : Apr 10 11:26:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:23:19:18:c0:7e:a6:e2:ae:32:d7:11:1e:
                    40:30:66:83:40:61:ff:f0:f0:14:54:93:49:90:9c:
                    e2:67:ff:27:1a:b6:a7:af:27:5f:26:ac:89:66:e6:
                    c0:c4:35:0b:d9:1d:65:e5:83:dc:7a:5d:99:82:ff:
                    b4:72:76:48:5f:10:57:e8:cc:1f:49:b9:56:40:68:
                    34:5f:b6:2d:12:5a:02:c8:76:14:88:0c:5f:42:3f:
                    25:37:87:ac:b9:9f:27:3c:9e:67:f3:e9:16:b2:3e:
                    ca:19:39:b3:52:67:86:e7:56:08:0e:57:43:4a:a8:
                    6a:7d:a6:07:27:eb:24:2d:27:be:49:ac:cc:ff:a3:
                    66:6a:7f:14:ce:0e:10:77:b0:e1:c0:4f:b8:f4:1e:
                    81:52:3f:75:f5:c0:95:f0:e8:20:e7:63:65:23:88:
                    bb:00:7d:86:d1:05:76:6b:a6:3d:b3:f0:35:fd:0e:
                    1e:16:6f:72:5c:03:c8:b0:6d:9c:fc:d8:c7:52:ca:
                    c1:9b:85:3c:bc:6c:fe:25:a3:a4:7e:79:bc:9c:2b:
                    88:55:7c:95:f5:82:2f:64:50:e7:0c:38:aa:89:22:
                    8e:f2:ae:a1:fe:c5:bf:fd:ab:71:c9:9f:1a:35:50:
                    61:df:48:72:5b:cc:c7:f6:9d:a8:af:3f:f6:97:c3:
                    1c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:36:8D:F8:37:9C:BC:96:4E:D1:EC:98:F6:C8:96:8E:11:5C:85:61
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ce:b3:33:e0:09:0b:65:51:99:b1:c9:91:d8:a5:aa:f7:97:
         3f:c2:d5:8d:b4:68:a1:e1:98:6e:c6:c8:5e:8c:3d:a8:65:97:
         9e:96:84:95:f2:28:a0:5c:21:be:78:e5:af:40:a0:6f:a0:f5:
         73:5f:74:ee:ca:94:db:bd:f3:6f:81:94:62:30:b8:7c:e8:93:
         27:b5:55:be:e2:10:b0:0e:2d:26:59:50:60:03:28:0c:f8:0b:
         0d:cd:11:48:75:a5:d8:bb:de:7f:24:1c:59:79:05:ea:59:f5:
         4c:ef:bf:4c:8b:a4:01:5c:22:dd:1d:25:37:fa:92:46:d1:0d:
         1a:75:13:34:c7:97:1e:fa:da:b7:2e:87:65:f9:1f:c8:32:7f:
         e4:a8:1a:00:29:69:e7:94:71:f6:a3:72:5f:35:a5:6b:d8:e3:
         2a:d9:b2:c1:21:0c:2b:d3:11:a7:b0:ba:a4:92:b4:aa:fd:f5:
         e8:72:0e:20:23:55:7e:b7:d7:b8:f1:d0:e7:0a:88:4b:42:0b:
         61:bb:74:75:88:05:4b:53:bf:66:5d:12:ad:1f:b2:db:4d:d0:
         18:a4:26:ef:63:bc:18:3a:c3:70:82:ea:7a:41:d3:18:2d:4b:
         cc:e1:46:16:29:ef:88:3c:0f:8d:95:e5:8b:ae:21:a9:2d:c0:
         44:ff:d9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org