Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa
File:                     34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (raw, json)
Hash identifier:          Wa3My13iaoiBXvCTq2eFDTBDOf01/8WLCdR4bIY3wes=
Subject key identifier:   66:6B:60:D1:08:C3:D4:C4:E2:D9:46:FF:26:CC:11:3D:01:10:D2:B3
Certificate issuer:       /CN=4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3
Certificate serial:       668F14206451DBD51CA7C5373FEE03FCD7065F2A
Authority key identifier: 4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa
Signing time:             Fri 09 Feb 2024 17:00:00 +0000
ROA not before:           Fri 09 Feb 2024 16:55:00 +0000
ROA not after:            Fri 07 Feb 2025 17:00:00 +0000
asID:                     269471
IP address blocks:        45.187.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8f:14:20:64:51:db:d5:1c:a7:c5:37:3f:ee:03:fc:d7:06:5f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3
        Validity
            Not Before: Feb  9 16:55:00 2024 GMT
            Not After : Feb  7 17:00:00 2025 GMT
        Subject: CN=666B60D108C3D4C4E2D946FF26CC113D0110D2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:d1:ac:e7:82:a8:3d:f8:65:59:e4:ad:86:
                    ca:40:01:4f:0f:4f:34:77:e4:01:74:62:bd:26:28:
                    6c:27:99:ac:f8:d8:eb:73:41:6d:89:86:4d:2e:19:
                    3d:a2:9c:24:4b:2b:13:4e:c4:95:47:95:42:55:fc:
                    b7:57:1d:21:dd:2e:80:2f:0f:09:74:fc:d2:a2:f5:
                    b1:9e:75:f8:00:da:48:f6:d3:c5:52:c5:36:f8:e2:
                    27:b7:f0:b4:92:51:d4:de:22:19:27:bc:50:72:1e:
                    0e:da:8a:83:3f:6b:69:84:86:0c:36:e6:a7:10:68:
                    e0:e9:40:d4:25:9d:e4:ff:ac:dc:a0:cb:38:31:e7:
                    e7:33:91:b1:c7:29:72:c3:05:07:92:34:47:f2:8e:
                    92:5b:a6:cd:f0:d6:7b:c6:80:d4:b0:03:1a:45:d1:
                    ab:2f:1f:45:95:7a:ed:d4:08:07:fd:f8:71:5c:51:
                    b5:67:02:b8:3b:13:5a:55:35:48:cd:b4:33:07:7a:
                    16:91:9b:ff:86:60:23:a7:d3:24:5c:ea:07:a5:64:
                    41:56:56:65:5b:95:e5:55:5f:04:25:11:15:96:60:
                    fe:c5:93:6d:c3:bd:c6:36:c6:10:68:55:44:cd:53:
                    48:1b:76:6a:d4:27:c9:1b:2d:22:e2:d0:e2:8e:81:
                    40:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6B:60:D1:08:C3:D4:C4:E2:D9:46:FF:26:CC:11:3D:01:10:D2:B3
            X509v3 Authority Key Identifier:
                keyid:4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:6f:ee:9a:81:d6:54:71:bc:8c:70:71:d3:63:7c:88:92:21:
         ce:62:62:47:64:83:16:62:de:87:5d:54:fa:95:c5:77:ff:c1:
         52:e5:41:cf:e3:f2:02:3b:e0:15:c2:f9:6c:c2:f9:02:83:9d:
         44:c2:44:29:8d:65:4f:1d:f8:c5:19:08:11:af:92:3d:13:db:
         f5:f1:c6:27:59:f0:4c:57:05:95:7c:8d:4e:5c:0a:3d:de:55:
         61:a8:1a:55:ab:3f:8f:30:70:13:80:df:b9:62:4e:c1:25:39:
         45:6d:66:9b:bf:84:08:08:92:c7:85:67:71:48:d0:7b:68:1e:
         82:4e:7b:0d:f7:0a:a6:6f:92:37:92:83:b3:35:3c:1f:10:b1:
         61:b8:1f:31:e1:9c:7e:f5:bb:31:cd:3a:df:fd:79:76:a6:04:
         7e:9e:83:b6:6d:ee:0c:9d:2e:bb:95:e5:2e:2c:a9:27:77:76:
         28:68:0f:59:32:5b:8c:90:a6:b0:47:14:cc:b6:8f:f1:35:e9:
         8e:f0:b9:86:9b:f0:fc:8e:56:2c:2e:35:a4:5c:7b:68:82:b7:
         b4:f3:06:f4:8f:21:e3:cc:58:48:a6:80:3c:0a:b2:f3:2e:c5:
         81:0b:76:e1:54:5e:e6:1d:41:fa:19:42:16:03:a1:b1:7d:b1:
         8b:67:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org