Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e352e302f32342d3234203d3e20323638393235.roa
File:                     34352e3137362e352e302f32342d3234203d3e20323638393235.roa (raw, json)
Hash identifier:          D3B8MDo5vw71QpVx1Mzju2U/uZ7GH9yXFyd81IbAL4s=
Subject key identifier:   83:E6:0A:BF:42:57:60:68:3C:6A:62:1A:7C:1E:95:AA:61:60:4C:55
Certificate issuer:       /CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
Certificate serial:       097DA385289F6A3EC03E89543032B6A3B5B2C118
Authority key identifier: E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e352e302f32342d3234203d3e20323638393235.roa
Signing time:             Thu 01 Feb 2024 14:27:02 +0000
ROA not before:           Thu 01 Feb 2024 14:22:02 +0000
ROA not after:            Thu 30 Jan 2025 14:27:02 +0000
asID:                     268925
IP address blocks:        45.176.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7d:a3:85:28:9f:6a:3e:c0:3e:89:54:30:32:b6:a3:b5:b2:c1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FF49A626C8B330586377D2B4398CBC24FA586E
        Validity
            Not Before: Feb  1 14:22:02 2024 GMT
            Not After : Jan 30 14:27:02 2025 GMT
        Subject: CN=83E60ABF425760683C6A621A7C1E95AA61604C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:22:0a:36:9a:2f:f8:86:28:7f:36:fa:2c:
                    c8:04:d3:82:1f:46:03:39:c1:e2:aa:e6:36:a0:2e:
                    d4:6b:26:74:80:f2:5f:73:00:11:07:2d:87:a4:c8:
                    4a:1f:6c:a4:cb:d9:01:10:08:af:dc:23:33:92:60:
                    b1:39:87:2d:3e:61:7b:d4:91:3a:12:0f:1f:45:cf:
                    48:4f:b3:99:4c:d1:20:20:3b:30:b4:30:8b:74:91:
                    d7:40:f2:c8:1a:b3:8d:b8:6c:5c:5d:65:18:c5:de:
                    70:21:e0:0f:93:90:e8:76:09:65:92:aa:8e:69:95:
                    3d:89:b7:99:e5:fa:6c:c3:87:fe:bf:c0:5c:b7:8e:
                    62:64:aa:da:5d:5a:b3:4c:fc:4c:e7:17:b7:48:dd:
                    42:3c:cf:e2:6d:cc:3c:ff:bc:f6:43:27:61:b8:ff:
                    cb:8f:3a:8b:56:fc:e6:8c:32:36:c2:0a:79:b6:90:
                    b7:51:87:d9:44:2c:bd:f0:1d:69:4d:4b:e8:47:59:
                    81:be:b8:d9:3f:d3:8a:1f:af:38:60:ea:32:b8:a5:
                    d4:40:09:9f:a7:e4:d4:60:e5:58:ad:bd:33:85:e3:
                    07:4f:43:8c:d8:9c:3e:8b:49:e9:48:3d:0c:23:53:
                    86:d9:7f:b0:5c:ab:1f:7d:df:ab:66:a5:fc:3e:63:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E6:0A:BF:42:57:60:68:3C:6A:62:1A:7C:1E:95:AA:61:60:4C:55
            X509v3 Authority Key Identifier:
                keyid:E2:FF:49:A6:26:C8:B3:30:58:63:77:D2:B4:39:8C:BC:24:FA:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2FF49A626C8B330586377D2B4398CBC24FA586E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e352e302f32342d3234203d3e20323638393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:02:cd:17:4e:4e:d5:8d:53:f3:8c:18:42:61:6b:3a:2b:0e:
         2b:75:e5:43:c1:d9:4b:21:71:09:4f:81:07:6a:cc:64:b4:2f:
         27:4c:c9:07:b1:e1:3f:67:3a:69:bd:d7:d3:5f:ee:7f:40:36:
         d8:a4:37:b4:86:47:47:ff:0f:f1:c8:45:14:7e:de:61:3e:d6:
         06:cc:32:ff:18:28:c3:be:8a:fd:9a:c9:32:12:28:49:3d:38:
         db:90:23:e2:7d:25:b5:ed:b3:5f:b7:ff:b8:ab:2b:07:87:fb:
         05:12:62:f7:0c:78:1f:db:61:a3:21:7a:df:db:9c:5d:61:3f:
         7b:1b:64:9f:56:34:ba:74:4b:22:29:7d:f0:b7:84:e0:9a:e0:
         f3:53:af:bd:cb:c1:79:02:71:10:86:86:d4:4c:10:92:3b:1f:
         1b:22:63:88:46:a4:56:fe:0e:36:e0:63:08:c7:5d:1e:78:3e:
         64:a7:f0:9c:4c:0d:db:ae:85:5d:16:70:93:9f:c6:3b:c0:9b:
         72:fc:60:a0:50:84:36:2c:02:3a:af:55:79:7e:84:d7:81:19:
         ab:34:69:72:19:bf:5d:ee:72:d8:1b:c6:03:96:52:19:d3:ed:
         23:76:73:6c:de:a4:3a:fd:75:29:ad:81:b4:25:11:03:40:aa:
         33:3b:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org