Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134362e302f32342d3234203d3e20323639343935.roa
File:                     34352e3138372e3134362e302f32342d3234203d3e20323639343935.roa (raw, json)
Hash identifier:          zxA59ml7b2OoSQPc4wGlXgByyvxALu/L6UWwZIRpgSk=
Subject key identifier:   41:1B:62:32:17:BF:75:5E:E9:E7:F4:3E:C9:8F:0F:28:BC:89:35:EF
Certificate issuer:       /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial:       7C88CF3A794131B88F9BAA00B4EEE3EB5ABC2852
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134362e302f32342d3234203d3e20323639343935.roa
Signing time:             Mon 30 Oct 2023 23:06:46 +0000
ROA not before:           Mon 30 Oct 2023 23:01:46 +0000
ROA not after:            Mon 28 Oct 2024 23:06:46 +0000
asID:                     269495
IP address blocks:        45.187.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:88:cf:3a:79:41:31:b8:8f:9b:aa:00:b4:ee:e3:eb:5a:bc:28:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
        Validity
            Not Before: Oct 30 23:01:46 2023 GMT
            Not After : Oct 28 23:06:46 2024 GMT
        Subject: CN=411B623217BF755EE9E7F43EC98F0F28BC8935EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:c2:03:36:9e:19:d7:77:b7:ad:20:0c:63:
                    c6:2e:ca:9e:1b:a5:ee:e8:cf:0d:b9:ce:71:97:23:
                    62:c6:02:6f:2d:36:1b:08:b3:47:f2:ff:79:75:96:
                    0e:16:9e:ee:13:49:9d:11:a7:cc:b2:b5:ea:6b:78:
                    1c:e4:a9:b6:2e:99:70:36:6d:8a:40:17:fb:2d:37:
                    97:0f:73:38:68:8e:db:c3:03:3c:56:4e:8b:36:a1:
                    3f:30:10:5e:ac:86:aa:23:09:dc:ea:61:e8:9f:d1:
                    cc:dc:12:84:ce:90:85:0a:99:4f:fd:e2:02:ab:2b:
                    f5:19:ef:bf:a3:a4:09:1f:a8:12:89:7a:21:48:a6:
                    fb:6d:b7:ca:71:f6:92:98:a2:cc:20:8d:bf:d3:7e:
                    e7:df:a3:cb:06:60:86:d8:0d:a8:81:0e:b8:73:09:
                    22:74:54:7c:8d:5d:ac:5d:6f:fe:2b:ac:63:d3:2b:
                    91:fe:2b:ae:79:25:fc:89:3d:93:d1:13:0f:de:80:
                    5d:cb:8a:02:35:3f:d9:a5:6e:5b:f9:fb:28:0b:c6:
                    96:3e:b3:69:f7:5b:b1:2c:59:ce:29:bd:1b:d6:5f:
                    99:fb:e2:6d:36:4a:6f:93:57:d1:62:bc:72:36:d8:
                    2b:fd:e5:24:10:3c:b1:0a:12:c2:16:74:c2:e3:57:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:62:32:17:BF:75:5E:E9:E7:F4:3E:C9:8F:0F:28:BC:89:35:EF
            X509v3 Authority Key Identifier:
                keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134362e302f32342d3234203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:43:c6:24:d1:74:70:81:94:fb:e4:3f:66:b0:cb:57:52:e7:
         f0:36:57:55:bc:64:cf:fe:2d:01:bc:3e:97:f1:bc:04:a3:38:
         08:a3:e4:83:da:f8:ec:58:91:10:9c:34:14:42:9b:05:76:71:
         30:71:a5:6b:cb:0c:63:52:c6:40:bd:97:36:7c:80:de:29:75:
         9d:ef:71:35:c4:aa:0d:ae:49:ac:fa:c9:e8:69:a1:6d:f6:06:
         0b:0d:32:e4:40:3f:ba:12:2f:79:06:47:66:65:36:b8:28:5f:
         ba:11:10:ea:59:a0:f8:06:5a:d3:92:0e:39:dd:54:74:27:20:
         ad:02:40:98:cc:98:28:f8:24:df:30:c9:3a:fe:ca:51:3e:82:
         ed:55:f0:cf:5f:5c:03:00:65:29:ae:c8:2b:a3:0a:e1:3e:4a:
         8b:12:ff:33:9d:c9:7c:83:f3:e8:f3:dd:9c:7e:c1:34:38:84:
         7f:a3:97:88:44:61:c0:f1:cd:af:d5:a3:85:1a:fc:7e:03:ea:
         90:d2:1c:5b:3c:52:18:9e:04:35:56:aa:26:00:d8:7e:1f:61:
         f2:d1:45:d1:d1:e5:4b:87:45:19:8a:57:8f:df:17:1a:39:e0:
         d2:fd:68:4b:a3:8b:7d:3c:b7:26:7f:2e:e6:92:57:2c:76:c6:
         ec:61:d0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org