Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/34352e3136302e3135322e302f32322d3234203d3e20323638343331.roa
File:                     34352e3136302e3135322e302f32322d3234203d3e20323638343331.roa (raw, json)
Hash identifier:          tF3bLf7bw0oCdEMaWoPVmuTt+YQx2nzHYG5bMD4CQBE=
Subject key identifier:   81:73:E6:B6:54:C7:4E:FA:BD:6F:BB:13:DE:10:8D:7B:62:DA:E9:CD
Certificate issuer:       /CN=F5B1E2DE3922BE45CD0899545537337BDA94DC01
Certificate serial:       3E4116963BFD14D423259B2D8335A72BDC043E95
Authority key identifier: F5:B1:E2:DE:39:22:BE:45:CD:08:99:54:55:37:33:7B:DA:94:DC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/34352e3136302e3135322e302f32322d3234203d3e20323638343331.roa
Signing time:             Fri 01 Dec 2023 18:01:20 +0000
ROA not before:           Fri 01 Dec 2023 17:56:20 +0000
ROA not after:            Fri 29 Nov 2024 18:01:20 +0000
asID:                     268431
IP address blocks:        45.160.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:41:16:96:3b:fd:14:d4:23:25:9b:2d:83:35:a7:2b:dc:04:3e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B1E2DE3922BE45CD0899545537337BDA94DC01
        Validity
            Not Before: Dec  1 17:56:20 2023 GMT
            Not After : Nov 29 18:01:20 2024 GMT
        Subject: CN=8173E6B654C74EFABD6FBB13DE108D7B62DAE9CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7b:33:49:12:15:bc:8a:70:db:b9:68:e9:f4:
                    d2:f2:3d:15:b1:8a:08:eb:7e:c2:f5:98:d1:1f:b8:
                    ab:b2:84:73:c2:a7:1d:22:87:6f:57:85:37:ce:47:
                    b2:05:2d:5c:e6:5b:86:10:d9:f5:f9:66:16:91:af:
                    cf:13:48:05:0b:c8:e6:76:b9:7d:9c:47:53:9e:04:
                    6f:47:19:0e:dd:03:20:5e:57:c2:e8:cb:20:7e:71:
                    9d:33:4d:05:60:16:1a:59:2b:57:e7:57:c9:b2:99:
                    d1:2c:e6:dc:80:64:51:e9:32:4c:b2:56:c5:a8:39:
                    09:2b:bb:11:5b:ed:c7:c4:f9:aa:f0:59:96:25:5d:
                    c4:b8:2b:ef:3b:d7:f7:56:e9:e3:18:4a:9b:17:6a:
                    35:63:9a:fd:dd:d3:68:98:88:85:15:4f:15:8e:ba:
                    36:c8:94:ce:0c:35:66:63:f4:e3:66:c8:c0:17:43:
                    83:d6:27:ed:99:3e:a2:ca:72:04:13:95:45:c7:77:
                    82:3f:44:d7:1b:7e:ba:69:a6:05:d5:ac:8b:27:99:
                    90:13:ee:e3:54:28:e9:57:1d:1a:27:67:3f:57:5f:
                    78:5e:f0:60:70:a4:e6:80:07:06:93:31:8e:c0:ff:
                    36:fd:bd:a4:4f:d4:72:98:2e:ec:57:3d:cb:86:f6:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:73:E6:B6:54:C7:4E:FA:BD:6F:BB:13:DE:10:8D:7B:62:DA:E9:CD
            X509v3 Authority Key Identifier:
                keyid:F5:B1:E2:DE:39:22:BE:45:CD:08:99:54:55:37:33:7B:DA:94:DC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/34352e3136302e3135322e302f32322d3234203d3e20323638343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:59:05:64:9f:9b:d0:39:5b:fb:1f:2d:2a:5b:00:e0:20:98:
         1f:3c:96:55:1f:9b:ce:e9:f7:da:02:47:74:43:76:26:db:33:
         ff:ec:01:78:a0:c7:32:db:7b:04:87:0d:92:80:18:a5:7f:8d:
         d3:6c:94:57:4e:53:60:c2:ca:80:1a:bb:2e:27:a5:43:de:a3:
         d8:cb:78:1d:fa:d3:80:70:f2:31:5f:a3:ae:c4:ad:17:0c:db:
         71:82:ec:f5:c2:11:66:32:86:3f:3d:aa:74:17:ab:1a:01:93:
         52:80:9d:16:b1:73:9c:b1:ce:c6:9c:8e:f4:49:74:0a:58:02:
         e3:aa:67:b2:5f:69:51:4a:80:85:a3:e1:2c:c6:3c:58:93:2e:
         de:c0:dc:54:9b:3c:d6:56:be:97:3b:f7:b2:7c:d1:a8:30:05:
         a4:a2:c2:e9:4c:a0:aa:91:74:62:8a:82:73:9d:e0:84:bd:d7:
         72:7c:5c:81:77:a8:27:7c:cc:d9:f3:56:a2:8f:bc:3b:10:cb:
         88:c0:0c:02:36:37:22:5a:e8:0a:ad:33:d1:c2:e7:7d:21:0d:
         ab:b9:45:2c:6a:68:a2:c3:30:e5:00:89:a8:6f:b8:0b:dd:a7:
         98:f5:83:17:19:5b:f3:1b:7c:36:91:22:ca:6e:97:a8:6d:b9:
         9b:09:c5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org