Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/34352e3137342e31312e302f32342d3234203d3e20323638393338.roa
File:                     34352e3137342e31312e302f32342d3234203d3e20323638393338.roa (raw, json)
Hash identifier:          Ax5mOOdB3+bwHuVf6TyikkRy64U/v+l20/kN/VCMvJo=
Subject key identifier:   4A:94:9C:5F:15:6D:98:6C:23:11:87:F6:C0:BC:AD:50:3F:E0:CB:69
Certificate issuer:       /CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
Certificate serial:       1420BEDC8C2A878558351BFFF0ED817B32DA3E0C
Authority key identifier: 12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/34352e3137342e31312e302f32342d3234203d3e20323638393338.roa
Signing time:             Thu 01 Feb 2024 20:29:50 +0000
ROA not before:           Thu 01 Feb 2024 20:24:50 +0000
ROA not after:            Thu 30 Jan 2025 20:29:50 +0000
asID:                     268938
IP address blocks:        45.174.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:20:be:dc:8c:2a:87:85:58:35:1b:ff:f0:ed:81:7b:32:da:3e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
        Validity
            Not Before: Feb  1 20:24:50 2024 GMT
            Not After : Jan 30 20:29:50 2025 GMT
        Subject: CN=4A949C5F156D986C231187F6C0BCAD503FE0CB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:60:ac:17:f4:24:ad:ff:35:f2:e8:a2:96:
                    b6:e7:cc:75:5f:d9:62:c3:c4:d4:fd:99:bf:88:9c:
                    08:88:42:be:af:79:46:15:b6:f5:a7:9e:34:48:bc:
                    fa:8c:e5:ed:35:76:03:ac:f3:89:0e:de:97:3c:f4:
                    ca:b8:35:2e:c2:53:f6:96:e3:74:1a:db:c6:68:bb:
                    51:a5:b9:83:80:02:e3:dd:9f:97:f1:87:63:aa:87:
                    0b:f9:66:e7:82:a1:98:ee:88:ef:4b:53:6b:8b:e6:
                    20:14:31:af:9a:2f:d9:91:1f:eb:a0:b0:20:56:24:
                    0e:58:1b:cb:ac:31:70:0c:9f:cc:be:7f:c0:e6:2c:
                    a1:eb:c3:49:2e:7a:8c:67:af:38:14:d6:e0:fe:c6:
                    fe:44:8a:56:d6:e7:82:7c:f2:83:3a:c9:a2:36:ba:
                    b8:cf:74:b6:d1:19:8e:a5:f0:ea:15:56:14:aa:48:
                    77:6f:7d:2d:95:02:81:70:b6:7e:07:9c:fc:37:0e:
                    e8:25:a2:88:7f:69:a3:d4:85:44:33:65:b4:98:13:
                    04:1b:96:17:fe:74:7a:09:2f:4f:2a:a8:55:79:b2:
                    5f:32:81:98:63:38:98:b3:82:b9:30:55:18:44:bd:
                    58:e1:2e:84:c1:a5:22:43:18:41:50:c2:c9:4d:c0:
                    6e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:94:9C:5F:15:6D:98:6C:23:11:87:F6:C0:BC:AD:50:3F:E0:CB:69
            X509v3 Authority Key Identifier:
                keyid:12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/34352e3137342e31312e302f32342d3234203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:4f:c8:00:94:4f:14:7c:83:f0:db:75:5d:1d:0b:6a:24:
         2d:1d:86:83:49:a7:66:dc:30:9d:78:a8:78:b3:41:9b:38:99:
         ec:a2:61:ce:0a:62:e9:fb:fc:a5:b6:d5:62:17:02:49:3d:53:
         a0:ef:2d:b7:5e:ff:4b:d4:10:b2:fc:60:7f:69:40:df:7a:c3:
         18:75:3f:88:70:5e:2e:20:7d:09:b5:db:c3:db:54:bf:80:25:
         7a:50:6a:5b:84:07:45:1b:42:87:4c:f1:42:a6:bd:4d:bd:7b:
         d4:5a:94:66:d9:c7:21:40:13:52:c5:7f:02:cd:df:15:33:7b:
         2c:e0:d5:48:6f:a2:3c:40:a2:06:50:28:72:32:f8:d4:4f:12:
         e7:14:b4:66:78:28:e5:45:65:1d:63:f9:24:fd:72:b4:17:00:
         f9:13:8c:48:42:af:af:ad:31:51:ba:cc:72:f2:8d:33:12:92:
         c6:07:c6:e8:e7:5d:c9:8a:be:12:27:85:d3:63:84:a3:c2:75:
         fa:0e:7b:92:a2:7b:cb:32:04:b7:be:bc:50:9e:86:5f:6c:ae:
         92:fc:b5:ad:45:36:cc:4c:3d:61:c0:7f:25:5e:68:0a:0a:c1:
         a3:9c:87:d1:1d:3d:c8:32:76:4c:36:b4:9b:0e:89:e7:e7:e4:
         60:c8:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org