Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e342e302f32332d3233203d3e20323638343234.roa
File:                     34352e3136312e342e302f32332d3233203d3e20323638343234.roa (raw, json)
Hash identifier:          i+hXR0HcLfN5przu3aAuXiUeYFoKq66k1XlxDePiVto=
Subject key identifier:   A4:CB:24:27:BD:1D:5F:CA:3A:55:ED:00:3E:7C:65:84:5D:20:9E:57
Certificate issuer:       /CN=E429F35E74597C6DE39F18CE6F1303823FC75955
Certificate serial:       24C3BA49CAD9A7FA1759B8408E575A2F96161A62
Authority key identifier: E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e342e302f32332d3233203d3e20323638343234.roa
Signing time:             Mon 04 Mar 2024 19:34:22 +0000
ROA not before:           Mon 04 Mar 2024 19:29:22 +0000
ROA not after:            Mon 03 Mar 2025 19:34:22 +0000
asID:                     268424
IP address blocks:        45.161.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c3:ba:49:ca:d9:a7:fa:17:59:b8:40:8e:57:5a:2f:96:16:1a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E429F35E74597C6DE39F18CE6F1303823FC75955
        Validity
            Not Before: Mar  4 19:29:22 2024 GMT
            Not After : Mar  3 19:34:22 2025 GMT
        Subject: CN=A4CB2427BD1D5FCA3A55ED003E7C65845D209E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:7b:5b:e9:fa:7a:ab:93:71:b2:13:e8:47:
                    bb:28:28:35:65:5c:06:05:09:54:bb:6e:92:40:a3:
                    66:a2:40:ae:42:c7:90:45:58:f4:42:5d:65:2c:5f:
                    ec:f9:2f:a9:97:7f:61:78:09:e6:c3:38:32:36:d6:
                    90:dd:3b:9f:b1:cb:8e:6f:ee:58:20:c8:1e:b6:8a:
                    2d:fc:13:5f:71:b3:f8:18:0a:12:49:bd:a7:33:39:
                    bb:4d:35:5b:0f:c2:17:41:3d:a7:f9:5b:a9:aa:a0:
                    13:3f:b8:e9:32:0a:14:51:6f:0f:02:d7:35:aa:45:
                    f7:c4:7b:8b:87:35:e8:7a:1b:d2:f6:46:0c:71:35:
                    da:0d:ce:5d:d3:de:da:fe:2e:35:b2:85:a7:13:4c:
                    8d:a2:b7:f8:33:65:40:f0:28:dc:15:b3:3d:9f:15:
                    cf:fc:f3:43:10:61:0e:63:23:71:06:88:98:14:d7:
                    b6:40:6d:a4:95:17:eb:ef:d2:97:de:56:d2:db:e4:
                    5f:7a:47:0c:a5:e1:c8:03:a6:76:28:30:f7:ea:77:
                    e7:97:28:eb:60:76:8e:df:01:36:c5:63:c7:af:ac:
                    b2:d0:9f:5f:ed:f9:e0:f4:85:26:43:16:a6:be:45:
                    84:b4:ba:bb:9d:3b:67:68:0e:9f:8c:45:2d:1a:49:
                    25:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CB:24:27:BD:1D:5F:CA:3A:55:ED:00:3E:7C:65:84:5D:20:9E:57
            X509v3 Authority Key Identifier:
                keyid:E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/E429F35E74597C6DE39F18CE6F1303823FC75955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e342e302f32332d3233203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:aa:0b:e1:12:f4:f6:d2:78:ad:bf:de:fd:31:5c:be:f2:
         52:bc:4f:80:0c:c4:c6:f9:fc:07:33:5f:95:d3:b5:7c:16:80:
         9e:3b:ea:22:b6:a4:9a:c2:58:49:a4:7e:21:1e:db:46:c5:b8:
         2d:a7:7f:49:de:27:c7:c3:ea:5a:92:9d:78:2b:e5:9a:49:84:
         04:2c:ed:ce:0e:82:db:93:08:11:2c:66:34:29:0b:d3:86:0a:
         76:40:f3:00:35:d5:e4:5b:75:1d:9e:d0:fb:8f:33:9b:15:29:
         ae:c8:6d:f7:e4:f4:ee:b7:9d:75:d9:db:6c:59:7a:71:a3:6a:
         64:1e:fc:15:58:6e:5c:41:fe:69:25:51:cf:6b:8d:da:38:f9:
         05:3b:49:ae:9f:c5:a1:81:c6:92:70:78:12:42:99:c3:85:a8:
         8f:8f:71:63:c2:f0:b0:d4:e5:28:4b:f8:d1:8f:3d:61:94:46:
         76:35:fb:f6:1e:ff:53:d3:5a:cb:f5:1b:fc:70:c9:7a:f4:39:
         8b:b0:21:96:e4:da:ca:2d:0e:0b:7d:a5:1b:c3:e3:97:9f:dc:
         12:d8:7d:9e:81:a1:ff:09:66:9c:12:81:ca:de:58:a7:a4:f7:
         9e:cb:5f:d3:19:f9:3c:84:74:c3:b1:83:ad:e6:00:d6:f6:7c:
         7c:bb:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org