Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39372e302f32342d3234203d3e20323638363734.roa
File:                     34352e3136352e39372e302f32342d3234203d3e20323638363734.roa (raw, json)
Hash identifier:          JrkYp0F4t3owEcnYhL64qwhxd74+IKd639j9e69joEw=
Subject key identifier:   18:D1:91:A9:59:A7:E3:8B:2B:C2:CF:47:1A:4A:33:B0:A0:B3:32:C4
Certificate issuer:       /CN=04004212A99696A4F283C73FE7EC609301933701
Certificate serial:       37497D8885E81CAD0C8F9E9405DC5AD233BDF184
Authority key identifier: 04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39372e302f32342d3234203d3e20323638363734.roa
Signing time:             Thu 25 Jan 2024 17:47:52 +0000
ROA not before:           Thu 25 Jan 2024 17:42:52 +0000
ROA not after:            Thu 23 Jan 2025 17:47:52 +0000
asID:                     268674
IP address blocks:        45.165.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:49:7d:88:85:e8:1c:ad:0c:8f:9e:94:05:dc:5a:d2:33:bd:f1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04004212A99696A4F283C73FE7EC609301933701
        Validity
            Not Before: Jan 25 17:42:52 2024 GMT
            Not After : Jan 23 17:47:52 2025 GMT
        Subject: CN=18D191A959A7E38B2BC2CF471A4A33B0A0B332C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:c9:e8:ff:ec:03:4e:e7:b8:4d:c2:e8:cb:
                    ee:d8:57:ff:ea:a3:99:9e:a7:6e:c2:c5:ca:86:28:
                    4a:a9:d2:54:57:b3:95:83:bf:b4:dc:40:a3:1f:9c:
                    8d:89:9c:c6:9c:96:d9:cf:3c:14:66:e9:ae:e0:64:
                    09:10:59:84:5a:90:41:b7:a8:71:60:4c:84:98:7e:
                    e5:05:63:1e:61:0c:28:a7:f1:f7:97:80:52:37:51:
                    7f:d2:bf:c6:ab:99:ba:3a:d2:94:96:d4:0d:49:b6:
                    fa:8f:71:02:b0:42:0c:02:31:e4:a0:28:64:40:8d:
                    5a:79:ac:71:57:a9:91:84:0c:84:2e:0c:63:e9:f6:
                    dd:ea:7f:2d:78:38:08:1c:e6:89:21:13:eb:17:19:
                    f6:18:ec:4d:cc:4c:2b:77:39:3a:a6:ac:39:43:43:
                    4f:85:e4:f4:4e:f8:b1:7d:ea:72:18:bd:23:8a:b4:
                    32:cd:73:43:8b:18:0d:e5:74:a8:6d:16:77:db:74:
                    27:dc:b6:2a:1f:4a:62:54:8e:b7:a4:53:51:93:f3:
                    e5:7d:c4:d3:92:22:c4:ce:b6:3b:93:98:de:66:38:
                    5e:5c:08:ed:2e:e7:53:63:98:ea:08:68:91:97:ae:
                    dc:83:61:69:a6:67:57:a3:44:74:64:20:34:cf:72:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D1:91:A9:59:A7:E3:8B:2B:C2:CF:47:1A:4A:33:B0:A0:B3:32:C4
            X509v3 Authority Key Identifier:
                keyid:04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/04004212A99696A4F283C73FE7EC609301933701.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39372e302f32342d3234203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a4:ad:b6:2d:3b:41:e6:a8:07:2e:61:db:05:9f:76:41:6a:
         5e:b8:1c:ab:60:a2:e3:65:88:97:50:83:0d:76:e6:0a:44:14:
         69:43:27:89:ef:62:89:b1:5f:70:04:5a:0e:9a:21:57:cd:52:
         9a:1a:af:ca:0d:a1:44:df:ac:28:fe:66:54:e8:8f:76:41:f5:
         0b:39:40:2c:46:40:da:10:4f:39:f9:0c:3b:ef:06:6f:c3:3c:
         b1:ae:7d:87:23:f5:e0:53:a8:3e:2a:f5:be:bc:ad:9b:b5:8b:
         58:5a:c3:51:d9:95:ee:e4:1d:61:bf:fd:9a:b6:c1:a5:53:e0:
         59:52:f4:89:59:85:83:be:df:76:d0:80:cf:7b:76:ca:c1:45:
         65:53:d3:56:60:63:ff:21:66:81:d8:93:d8:eb:aa:44:0d:3e:
         e1:8d:30:21:f7:ac:bb:1c:20:19:6f:30:be:29:2a:bc:a9:c3:
         d2:96:02:1f:0d:1a:be:a3:89:f5:00:39:6c:82:c3:3e:9e:f0:
         78:19:4b:f8:25:10:19:42:46:5d:d7:71:76:8f:c1:09:77:0c:
         8e:33:10:05:3c:c0:da:58:8d:bc:2c:f9:11:79:e8:a6:19:e4:
         f0:53:ec:0f:f8:52:f9:ad:9b:8e:9d:ac:76:f8:58:6a:83:e8:
         8c:34:28:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org