Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
File:                     34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (raw, json)
Hash identifier:          9mdZ8dGEaQW+VRRMjs50lnelLUiXNeC47BblIAR1uT4=
Subject key identifier:   2F:C3:50:BE:EF:D8:4D:87:A3:FA:35:6E:A5:54:45:5C:BD:DD:AB:69
Certificate issuer:       /CN=4F774C8A6C512C5300411E7B17BB34D22FE6F2D9
Certificate serial:       14C970DD45548FB7494D028E230FACD05EA3052A
Authority key identifier: 4F:77:4C:8A:6C:51:2C:53:00:41:1E:7B:17:BB:34:D2:2F:E6:F2:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
Signing time:             Mon 11 Mar 2024 11:58:37 +0000
ROA not before:           Mon 11 Mar 2024 11:53:37 +0000
ROA not after:            Mon 10 Mar 2025 11:58:37 +0000
asID:                     268874
IP address blocks:        45.175.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c9:70:dd:45:54:8f:b7:49:4d:02:8e:23:0f:ac:d0:5e:a3:05:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F774C8A6C512C5300411E7B17BB34D22FE6F2D9
        Validity
            Not Before: Mar 11 11:53:37 2024 GMT
            Not After : Mar 10 11:58:37 2025 GMT
        Subject: CN=2FC350BEEFD84D87A3FA356EA554455CBDDDAB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:36:10:97:80:51:82:b5:71:a8:3c:bc:b2:c3:
                    59:fe:39:f1:ab:a5:44:40:04:29:17:81:a1:81:2d:
                    42:12:d6:9c:6f:52:d5:35:46:6e:45:98:01:42:ed:
                    c3:96:9e:9f:6e:14:59:92:43:b6:51:25:3c:3b:05:
                    de:77:3b:71:bd:1b:2a:fa:19:e8:32:9d:be:60:00:
                    ec:2a:cd:71:f3:76:a4:9a:aa:72:ed:7d:a7:83:90:
                    1b:5b:fa:12:42:20:b1:8d:ba:a0:18:28:a6:a5:52:
                    25:f7:b3:97:b7:09:90:a9:c0:e2:25:84:07:1b:f2:
                    12:e8:1b:11:ec:31:31:08:31:07:59:cf:32:2e:17:
                    34:55:bc:1e:ea:85:a1:80:ea:da:6d:b9:b5:38:99:
                    5d:38:a1:8a:ea:32:3b:bc:f6:bb:6d:c4:8c:d7:d0:
                    0c:6b:d0:9c:51:01:4a:d2:3f:23:3f:46:c7:fc:51:
                    eb:0c:e0:f1:04:fe:74:5a:14:ea:59:c1:50:46:15:
                    f6:d5:5b:13:36:f2:64:8f:d0:fb:21:7d:56:c8:47:
                    31:86:17:ef:fd:66:cc:02:df:3b:b0:15:fb:88:ca:
                    14:5e:0f:05:ce:99:43:38:70:6a:99:e8:04:8a:bf:
                    9e:35:a3:e8:c3:bb:5d:65:b3:6c:e4:76:08:a0:4e:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C3:50:BE:EF:D8:4D:87:A3:FA:35:6E:A5:54:45:5C:BD:DD:AB:69
            X509v3 Authority Key Identifier:
                keyid:4F:77:4C:8A:6C:51:2C:53:00:41:1E:7B:17:BB:34:D2:2F:E6:F2:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:84:e5:ea:d2:83:55:8b:50:9c:9f:6b:df:92:b8:52:8e:
         7f:32:7f:f2:07:67:32:dc:2a:96:8d:db:f7:4b:7d:7e:66:16:
         ec:00:6c:7b:3b:8b:06:c4:06:29:b5:62:2d:a2:b8:45:2a:f9:
         4c:41:c7:f6:6a:2b:52:f2:ba:3d:b7:81:36:06:74:55:d3:97:
         d5:bc:83:96:0a:01:38:c4:0d:c8:e3:a2:11:74:99:43:01:49:
         5b:b9:02:9b:9e:8f:b7:a4:1d:7b:be:69:45:d4:34:5d:14:21:
         20:89:36:41:81:09:81:65:75:bd:59:bf:54:ae:b6:3f:77:b1:
         a8:db:21:ff:47:58:33:c3:c1:0d:27:f5:bf:eb:bb:35:1e:d3:
         ff:8b:61:dd:7d:6b:32:ea:a5:db:5d:3c:86:21:21:c3:2a:b8:
         f1:32:59:c1:0b:63:5c:50:74:ba:31:67:5d:41:b8:32:99:f3:
         fc:92:03:9c:d2:5c:40:5c:e1:8c:db:06:32:49:f1:1c:74:5f:
         75:6b:92:13:a9:38:aa:84:de:54:3c:79:92:70:3a:11:86:06:
         5d:a0:94:e2:6f:d8:c7:5e:a7:de:36:62:6c:49:e5:3f:75:0d:
         38:30:f1:56:9d:9f:21:00:c2:b7:e8:a0:55:b2:1e:66:2b:08:
         1e:e6:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org