Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa
File:                     34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa (raw, json)
Hash identifier:          Zgw4yq7qYlDp57HiSzE7SiZekXFQYuLae70LKWQKrOg=
Subject key identifier:   DD:AA:D2:50:BE:22:ED:82:6E:B1:A5:F5:48:15:8D:9B:58:46:13:E9
Certificate issuer:       /CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
Certificate serial:       23944DC760DC1A4D7D1679131C8FB62ED7F00EE6
Authority key identifier: DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa
Signing time:             Wed 29 May 2024 15:49:55 +0000
ROA not before:           Wed 29 May 2024 15:44:55 +0000
ROA not after:            Wed 28 May 2025 15:49:55 +0000
asID:                     268848
IP address blocks:        45.174.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:94:4d:c7:60:dc:1a:4d:7d:16:79:13:1c:8f:b6:2e:d7:f0:0e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186
        Validity
            Not Before: May 29 15:44:55 2024 GMT
            Not After : May 28 15:49:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0b:7b:0e:66:44:8a:f6:79:15:67:b1:88:1e:
                    dc:0e:04:e6:fd:db:5d:ee:e6:35:b4:c5:39:5f:97:
                    12:f0:bb:2d:ff:a8:e0:de:b9:3d:37:70:6d:ea:95:
                    77:11:58:f3:93:86:46:44:9f:91:7f:24:df:87:73:
                    46:82:d8:b5:b4:a0:4c:00:a9:c6:7f:87:84:88:40:
                    05:38:04:9a:6d:92:04:d6:76:8e:52:35:6f:4e:a9:
                    14:81:42:3c:39:cb:db:a1:58:2b:b2:85:23:27:00:
                    df:0e:51:bc:06:e9:00:b4:e3:aa:03:09:4b:94:62:
                    7d:1c:52:7b:28:9f:32:a3:f1:0e:20:ed:a3:98:b4:
                    45:b7:b3:16:00:a6:04:ae:7e:f4:6e:1e:f2:37:b7:
                    39:a4:b3:77:f0:09:27:05:fb:4b:9b:7d:ce:3f:a0:
                    84:3c:58:39:70:2b:9f:c4:74:8c:ca:76:3b:ad:37:
                    e6:d5:b6:ee:47:29:52:61:15:d9:93:cd:b5:5c:51:
                    23:40:f2:d3:2e:4b:ff:65:ba:8d:c8:de:d0:dd:81:
                    8e:ca:b2:0a:b1:9b:4c:29:12:d0:1f:18:60:37:d8:
                    bc:4b:f8:46:77:5c:a4:bc:32:fd:39:f7:ac:ec:38:
                    f4:d3:f9:3b:16:0c:6a:66:51:11:21:fe:34:d1:87:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AA:D2:50:BE:22:ED:82:6E:B1:A5:F5:48:15:8D:9B:58:46:13:E9
            X509v3 Authority Key Identifier:
                keyid:DF:9D:4D:26:1E:0C:38:AC:A2:3C:40:A6:C8:EC:E3:9A:6F:D9:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D4D261E0C38ACA23C40A6C8ECE39A6FD9A186.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/1/34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:66:21:be:d1:33:b6:90:51:6b:80:aa:4b:b4:43:cf:bb:d5:
         11:bd:4e:b6:61:60:15:a6:f5:f5:79:94:de:46:01:e1:aa:2c:
         fa:c9:ea:05:0c:7e:39:14:1b:58:c5:a8:07:13:65:56:ea:5d:
         fb:b0:3b:14:0a:58:cb:09:08:5e:1d:8d:1f:20:58:7c:9e:da:
         9c:20:c4:85:86:3f:38:b5:39:b3:93:ef:c3:b5:7a:ef:f4:79:
         94:73:8d:4f:2d:4b:b8:99:52:dc:be:e8:29:12:cd:95:a2:4e:
         a9:35:bc:1d:2d:54:02:db:98:49:98:e9:f0:64:5e:18:d6:65:
         22:a5:fb:8f:1d:11:c1:ad:17:ed:71:68:42:1e:a8:da:2d:8e:
         da:f8:3a:a7:4a:5b:ec:b8:92:bf:c8:e3:bf:9f:22:0f:6a:f5:
         16:e5:87:a5:31:12:28:6b:13:d2:e9:a8:59:d7:fd:51:6f:1b:
         ad:16:6c:ee:e1:f7:52:06:86:74:2f:6e:f9:5f:6b:78:21:96:
         75:5f:69:c2:b6:4b:da:98:31:3c:db:f5:bd:88:aa:5f:73:ec:
         92:c9:c6:be:e0:dd:69:15:20:9d:2f:44:88:20:97:1c:b7:db:
         5f:c3:41:4f:80:67:14:0a:90:91:4e:7c:bd:ab:89:f1:e1:88:
         2f:7b:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 18:24:28 2024 by rpki-client on console-fra.rpki-client.org