Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e342e302f32342d3234203d3e20323638343234.roa
File:                     34352e3136312e342e302f32342d3234203d3e20323638343234.roa (raw, json)
Hash identifier:          YPiQxRKDLkjUe/ZU8Dp2IV+vjkdOe3B0uh+q6RizXNM=
Subject key identifier:   A0:4A:0C:D9:11:F5:06:86:5E:25:06:BE:FD:E7:94:A5:8B:13:F7:9E
Certificate issuer:       /CN=E429F35E74597C6DE39F18CE6F1303823FC75955
Certificate serial:       2938CA05DDB73563439C8A9DC3A2B13D72CA6DF2
Authority key identifier: E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e342e302f32342d3234203d3e20323638343234.roa
Signing time:             Mon 04 Mar 2024 19:34:22 +0000
ROA not before:           Mon 04 Mar 2024 19:29:22 +0000
ROA not after:            Mon 03 Mar 2025 19:34:22 +0000
asID:                     268424
IP address blocks:        45.161.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:38:ca:05:dd:b7:35:63:43:9c:8a:9d:c3:a2:b1:3d:72:ca:6d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E429F35E74597C6DE39F18CE6F1303823FC75955
        Validity
            Not Before: Mar  4 19:29:22 2024 GMT
            Not After : Mar  3 19:34:22 2025 GMT
        Subject: CN=A04A0CD911F506865E2506BEFDE794A58B13F79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:97:60:c2:be:56:7a:fb:da:50:b0:ff:6a:
                    5f:33:9b:04:b4:f8:dc:71:d1:62:2d:62:d9:1a:c0:
                    24:fc:76:57:49:4a:87:38:50:c4:d8:98:06:fb:19:
                    a9:af:de:a6:0a:3c:d8:a6:65:ae:d2:e8:28:a0:b0:
                    a6:40:ed:b9:bd:56:80:96:91:db:56:d6:97:aa:c5:
                    cb:d1:59:fb:b6:2f:b5:df:a0:99:88:d0:fe:91:0f:
                    0b:8f:c6:2f:59:66:56:3b:d3:a6:ca:8e:6a:42:00:
                    f8:33:99:3e:6e:ab:9f:7c:1d:28:67:07:d0:7e:9a:
                    7c:f1:a6:28:07:23:5b:84:c1:f1:36:52:0c:f0:b8:
                    cf:00:ba:4b:f7:0f:e9:dc:0e:3d:a0:ba:cb:94:40:
                    a0:96:a8:f5:82:68:d2:af:44:fe:12:ad:b6:7b:2b:
                    b0:1f:73:07:c9:99:a4:aa:dc:d8:71:a7:c4:e5:ec:
                    84:70:ef:cf:f3:31:17:39:cc:69:27:71:90:36:e2:
                    e3:c3:c8:6c:af:e4:7b:db:4c:92:4f:cb:61:2a:e5:
                    90:df:5e:c0:42:5e:8e:65:0f:a2:b8:99:a3:bf:04:
                    78:ed:85:fe:a9:d0:47:a2:e5:4f:69:b4:00:28:8d:
                    92:6f:0f:d3:ee:00:c1:af:3b:0e:77:3e:68:9f:0c:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4A:0C:D9:11:F5:06:86:5E:25:06:BE:FD:E7:94:A5:8B:13:F7:9E
            X509v3 Authority Key Identifier:
                keyid:E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/E429F35E74597C6DE39F18CE6F1303823FC75955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e342e302f32342d3234203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:da:0f:46:c0:93:4b:7b:8c:44:20:cc:e9:8e:2d:5f:2e:ce:
         f5:1d:34:af:62:ce:35:bf:56:73:59:e8:46:64:b1:86:da:69:
         34:3d:3d:cc:5d:b6:bf:46:2e:ed:bc:ee:19:4b:69:c2:3e:50:
         2c:fb:e2:f6:e3:a6:0b:cf:b2:34:f1:7c:a8:39:bf:b4:8e:fd:
         be:c8:dd:73:2d:fe:8c:dc:c9:4d:69:d5:05:b5:e8:f6:d3:cc:
         35:9f:74:16:31:73:26:0a:7e:64:9f:f4:1d:03:c2:18:4e:e2:
         34:10:6b:2f:8f:18:4f:f2:24:20:14:4e:58:bc:3b:0a:c9:25:
         7a:9f:f8:c4:bd:d1:cf:c4:32:88:2b:09:99:02:3e:d8:40:2f:
         f4:31:66:b0:99:e4:cd:b9:9e:be:84:af:0e:95:b6:b0:b9:97:
         a5:ab:66:6f:f1:f1:d6:f2:cf:74:bb:c9:5e:8a:f5:33:5e:a3:
         aa:29:75:91:89:d2:f6:bd:34:e9:be:63:60:85:62:a3:2a:76:
         41:5f:19:33:eb:3b:ea:96:fd:e5:20:dc:9b:e2:8c:df:7d:46:
         1a:98:4e:b8:9d:64:47:6e:1d:ea:f0:90:6f:27:70:0f:f2:38:
         36:57:ca:af:18:1b:d5:7b:88:af:5b:60:d8:fb:04:00:ef:14:
         ea:f7:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org