Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          rvZYKeePLZ/Cs6tfcUOYD7LysungMg10de336BcoMFI=
Subject key identifier:   0F:52:10:00:36:48:10:F0:38:8E:12:37:A1:14:16:57:A0:57:D1:52
Certificate issuer:       /CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
Certificate serial:       74D10BC9D2548A24FCDC5D1D591D5C20D7E2F8FA
Authority key identifier: 16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa
Signing time:             Wed 14 Feb 2024 20:09:49 +0000
ROA not before:           Wed 14 Feb 2024 20:04:49 +0000
ROA not after:            Wed 12 Feb 2025 20:09:49 +0000
asID:                     268678
IP address blocks:        45.165.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d1:0b:c9:d2:54:8a:24:fc:dc:5d:1d:59:1d:5c:20:d7:e2:f8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Validity
            Not Before: Feb 14 20:04:49 2024 GMT
            Not After : Feb 12 20:09:49 2025 GMT
        Subject: CN=0F521000364810F0388E1237A1141657A057D152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:d2:65:2c:81:cd:45:e4:a5:cc:1c:d9:84:
                    34:75:76:43:44:cd:66:4c:20:4f:55:a9:31:ea:78:
                    4c:94:ec:c1:60:6d:71:d9:d5:f8:93:07:10:9f:8f:
                    14:fd:6c:e8:37:7a:e2:10:a1:85:8a:f5:93:68:b3:
                    19:0d:88:08:7f:e0:aa:6b:58:f3:9e:c4:1e:bb:a1:
                    77:99:7c:4b:18:e3:62:a4:8e:cb:22:6e:b5:b3:6a:
                    24:c5:35:38:89:b7:af:79:d4:f8:59:d1:19:65:d2:
                    aa:c6:12:9a:30:b8:61:de:c5:2c:78:b0:63:a0:99:
                    1d:21:c6:c2:72:91:56:e5:52:3c:00:69:6b:aa:7f:
                    05:95:07:3f:09:aa:a2:8d:38:0b:aa:1c:d7:de:03:
                    dc:82:2b:06:0a:08:24:05:ec:ed:1a:62:ea:86:5e:
                    71:02:91:cc:b7:ed:f8:f3:87:39:6f:10:58:af:9c:
                    bb:e7:93:a0:7b:cd:06:0c:a7:7a:f3:34:0d:13:3d:
                    d9:fb:cc:0d:c6:08:ec:df:5c:3d:94:8b:9a:1d:cf:
                    39:6f:5f:25:61:da:64:1c:55:6b:2e:3e:0d:dd:52:
                    d7:67:93:b2:77:2f:20:dd:9c:0b:75:23:d2:f8:0b:
                    1e:46:2a:83:d9:ad:9c:ae:af:11:2b:db:9d:4f:b3:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:52:10:00:36:48:10:F0:38:8E:12:37:A1:14:16:57:A0:57:D1:52
            X509v3 Authority Key Identifier:
                keyid:16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d4:7e:55:4d:c7:0d:b3:66:f0:70:57:88:57:a3:58:5c:e2:
         d8:3b:3d:f0:86:68:1a:2d:7d:a3:fb:e3:c8:78:5e:37:b7:be:
         52:20:f6:29:3c:d2:04:40:49:6b:0f:ed:b4:ee:44:e6:8e:10:
         e4:91:03:80:aa:8a:a5:e6:c3:7f:4e:9a:ea:22:0a:42:38:13:
         f1:99:3d:fd:1d:2c:ac:19:51:18:aa:79:62:b0:13:f0:11:66:
         a0:a2:bb:b1:84:56:ed:80:0d:97:23:c3:38:02:9a:9a:84:92:
         90:4e:94:23:be:b7:84:c5:31:65:86:b8:4a:8f:58:2b:b3:c7:
         34:30:87:bd:e6:be:6f:3a:55:fb:4a:c4:fc:9c:70:44:a3:0a:
         7c:2f:d8:43:1d:5e:4c:d2:40:5e:23:27:63:4a:e6:dc:13:d9:
         26:a7:84:3f:61:10:5e:37:7a:d4:38:42:48:f9:6b:29:b9:10:
         fa:93:67:18:16:d8:01:49:44:33:6f:fa:14:e0:70:cd:64:cd:
         49:35:aa:c5:21:af:55:66:14:0f:20:bb:8c:ed:cd:0d:f9:cf:
         e3:01:ba:ba:1d:ba:52:5e:cc:2b:05:75:0d:1d:5e:83:30:3a:
         30:45:e0:30:03:d0:31:82:e2:d8:e3:05:50:47:c7:43:57:90:
         67:ac:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org