Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e352e302f32342d3234203d3e20323638343234.roa
File:                     34352e3136312e352e302f32342d3234203d3e20323638343234.roa (raw, json)
Hash identifier:          Z3E/eUPO9GeeHTLlMPin8UqBD2skAN3w6tePfVblyJc=
Subject key identifier:   BC:4D:59:CC:9B:03:CC:E6:1C:18:22:78:87:17:57:E3:7E:33:C8:7F
Certificate issuer:       /CN=E429F35E74597C6DE39F18CE6F1303823FC75955
Certificate serial:       38FF0452032A90FB65953E692C1636ADB82C67F6
Authority key identifier: E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e352e302f32342d3234203d3e20323638343234.roa
Signing time:             Mon 04 Mar 2024 19:34:22 +0000
ROA not before:           Mon 04 Mar 2024 19:29:22 +0000
ROA not after:            Mon 03 Mar 2025 19:34:22 +0000
asID:                     268424
IP address blocks:        45.161.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ff:04:52:03:2a:90:fb:65:95:3e:69:2c:16:36:ad:b8:2c:67:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E429F35E74597C6DE39F18CE6F1303823FC75955
        Validity
            Not Before: Mar  4 19:29:22 2024 GMT
            Not After : Mar  3 19:34:22 2025 GMT
        Subject: CN=BC4D59CC9B03CCE61C182278871757E37E33C87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:73:9e:08:6e:d0:9c:f7:2b:d6:ae:29:fa:
                    a6:79:bb:4f:5b:65:65:eb:a5:6d:ef:94:cc:c8:9b:
                    48:50:ab:9e:04:8d:a2:e5:82:47:55:e8:be:9b:d9:
                    df:13:7d:c1:0e:10:42:44:2d:cc:7c:1e:95:d5:ed:
                    8a:b4:a1:f6:1f:fc:6d:d6:79:24:a9:11:1d:71:d1:
                    c4:e2:c8:2b:f5:9e:ed:75:82:16:24:e4:bd:58:79:
                    03:3e:2a:da:eb:9a:d9:e4:e6:6e:20:ea:7b:f6:db:
                    8d:63:1a:ba:a5:fe:e9:2c:87:ee:d9:d3:64:eb:35:
                    2e:cc:0f:bc:c3:87:3b:47:01:c0:08:31:ee:9b:03:
                    45:f3:b9:81:d5:8b:9f:3b:60:e4:51:22:20:d4:58:
                    3c:1b:13:79:f1:5b:09:92:54:b0:ad:ab:c6:7a:a5:
                    6b:8a:cf:b1:8e:72:24:33:c6:d5:76:db:33:3e:79:
                    53:b6:d4:e8:f0:2b:d0:4e:fd:76:39:df:66:d3:92:
                    45:0a:df:fe:8a:ad:d6:cd:d6:23:53:dd:02:57:6e:
                    5b:46:ea:cd:09:05:a4:9a:ed:97:bd:bd:6a:ff:da:
                    3e:56:72:29:ce:74:2b:a8:ef:31:32:6b:74:67:73:
                    1a:6f:44:a2:da:4a:c2:77:28:cf:4f:f8:be:eb:b2:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4D:59:CC:9B:03:CC:E6:1C:18:22:78:87:17:57:E3:7E:33:C8:7F
            X509v3 Authority Key Identifier:
                keyid:E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/E429F35E74597C6DE39F18CE6F1303823FC75955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e352e302f32342d3234203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:45:21:4c:1b:ed:33:0d:24:43:b1:07:96:f0:1c:ab:41:51:
         8a:55:75:ae:10:98:9b:bc:26:2c:2e:c4:17:ad:e6:17:bd:7e:
         2f:80:f7:1f:17:f2:87:0c:9b:f3:40:08:fd:a9:11:cf:47:d1:
         56:7b:f1:d3:0d:f1:a8:8d:3f:c0:3b:f6:bd:1c:1f:24:65:3f:
         1e:3f:50:82:54:75:32:67:ee:c3:54:15:de:e6:05:0b:0d:db:
         54:e7:f3:ee:ee:81:cf:99:1e:f3:08:d5:31:e2:06:fc:0e:52:
         91:65:0a:9e:ad:78:1c:98:d3:69:fc:bb:05:7b:52:b1:1c:8c:
         76:97:fa:18:76:ad:fb:1e:d3:d3:26:54:5e:e3:72:e4:1c:c7:
         b2:36:cc:3f:7b:44:1f:79:d1:ac:8b:82:de:41:9f:d2:99:ce:
         3a:a0:91:f7:11:f2:40:d4:86:0b:ca:9a:8d:05:e1:fd:a9:af:
         62:ac:2f:d6:d3:db:23:ef:d0:cc:12:d7:81:70:ae:ec:dc:fe:
         83:36:d8:ea:02:ff:75:f6:a3:70:80:d4:92:19:23:76:0e:e4:
         4a:bd:c3:3b:c3:58:7a:41:08:61:bd:79:2f:be:a1:f2:14:a8:
         66:e7:30:2a:d0:3c:f9:05:a8:5d:35:7c:6f:24:fe:2e:95:b3:
         a7:53:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org