Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37342e302f32332d3233203d3e20323638343439.roa
File:                     34352e3136312e37342e302f32332d3233203d3e20323638343439.roa (raw, json)
Hash identifier:          sh6mow4WQOP3kOmcHp0RHUYVvzn817MCf1RmN42CPfg=
Subject key identifier:   F8:63:C3:BB:A8:7D:A5:43:4E:A0:19:42:05:8E:D7:08:0D:F2:00:31
Certificate issuer:       /CN=E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9
Certificate serial:       583309E9489DA93B50F5C40ED193C54E35A01BB7
Authority key identifier: E0:50:B2:C6:5D:6F:6B:58:4E:9A:D4:75:1F:31:DB:19:AB:E8:DB:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37342e302f32332d3233203d3e20323638343439.roa
Signing time:             Thu 11 Jan 2024 13:44:24 +0000
ROA not before:           Thu 11 Jan 2024 13:39:24 +0000
ROA not after:            Thu 09 Jan 2025 13:44:24 +0000
asID:                     268449
IP address blocks:        45.161.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:33:09:e9:48:9d:a9:3b:50:f5:c4:0e:d1:93:c5:4e:35:a0:1b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9
        Validity
            Not Before: Jan 11 13:39:24 2024 GMT
            Not After : Jan  9 13:44:24 2025 GMT
        Subject: CN=F863C3BBA87DA5434EA01942058ED7080DF20031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:78:82:41:c7:d9:e6:64:be:8d:40:f3:b2:
                    1f:32:6c:a2:a7:b4:ef:3b:15:95:6d:5b:7b:10:35:
                    45:f3:19:5f:9d:1b:8c:3a:9a:69:a5:62:f2:aa:a3:
                    2c:90:c8:64:c0:d3:b9:9b:4c:54:83:12:1a:31:26:
                    df:43:34:25:67:3e:16:69:c8:80:b9:4d:32:f3:7c:
                    cf:e8:99:8b:e9:bc:8a:e1:c0:7d:53:1e:f2:76:6a:
                    ad:92:51:f2:60:62:50:8e:1b:bf:a8:9e:25:5f:77:
                    ad:95:cf:83:4b:63:14:50:e8:81:68:f2:e4:e4:0a:
                    5e:08:38:79:58:1e:15:3a:bb:fe:a5:17:68:55:c8:
                    c6:db:f1:63:1b:38:ff:d8:38:cf:59:05:b7:06:71:
                    66:c9:a5:8a:f1:34:1c:88:53:48:3f:cf:0b:1f:9f:
                    15:bf:19:78:ec:a5:c5:be:14:55:b6:96:18:12:82:
                    33:f7:14:75:4a:45:00:3c:b2:28:73:da:a1:11:bd:
                    21:91:d2:68:56:8d:88:99:af:2c:e3:37:46:b6:d0:
                    3f:be:31:d1:ac:7a:43:40:51:86:96:9e:0d:37:ea:
                    69:8e:f4:9e:bc:fa:e1:00:0b:55:f3:43:69:b3:82:
                    8a:33:c6:31:36:3b:0b:41:a7:1b:d7:6a:97:44:f9:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:C3:BB:A8:7D:A5:43:4E:A0:19:42:05:8E:D7:08:0D:F2:00:31
            X509v3 Authority Key Identifier:
                keyid:E0:50:B2:C6:5D:6F:6B:58:4E:9A:D4:75:1F:31:DB:19:AB:E8:DB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E050B2C65D6F6B584E9AD4751F31DB19ABE8DBE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/34352e3136312e37342e302f32332d3233203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:63:53:e5:1a:42:0a:b2:ae:93:2f:8a:d2:71:38:d9:5e:64:
         de:01:72:be:cc:0e:47:2b:14:09:ec:e0:7b:2a:12:7f:50:e8:
         66:60:6f:f0:db:d5:52:aa:df:e7:07:b4:ea:5c:8d:c0:69:f3:
         86:ce:5e:4a:4b:1c:1f:18:05:41:93:58:4f:07:17:95:a5:6f:
         2a:70:8e:8d:d9:67:14:07:53:c0:43:60:1a:56:1d:e3:79:a2:
         59:a1:56:bf:b5:c4:66:47:a7:be:f3:8f:e1:69:67:07:01:19:
         a9:ee:20:d8:4e:2f:97:88:dc:83:ee:9d:fc:a5:59:22:f2:2a:
         1f:4c:68:d3:a3:86:34:f5:fd:98:cd:78:78:17:b6:57:72:49:
         49:d4:a5:c3:80:51:c8:01:65:e4:4e:de:fd:9c:eb:60:d0:3c:
         fd:48:f9:50:23:76:0b:a0:2a:45:39:ab:c5:a4:40:95:36:67:
         37:32:38:1e:59:4e:ad:73:66:6f:89:7e:71:80:03:9f:ac:e8:
         b7:23:9b:4b:ab:b9:bb:79:7e:89:30:43:30:f3:6f:02:75:ad:
         73:90:18:17:c2:07:4d:05:c9:c9:19:6d:2c:4e:cb:b0:19:3f:
         02:4a:29:3f:07:56:15:66:cc:be:b9:79:1a:67:3e:64:15:0c:
         96:de:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org