Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131392e302f32342d3234203d3e20323637393536.roa
File:                     34352e3136362e3131392e302f32342d3234203d3e20323637393536.roa (raw, json)
Hash identifier:          z8UUT9HIiQBt55pf2xH1On72eyNcUuOU7hvaBH+SY24=
Subject key identifier:   4A:3A:82:CE:F2:38:CD:6F:20:93:71:02:DB:D1:33:46:AF:9E:A6:89
Certificate issuer:       /CN=0B298E028BDDBEDE2A0ED25356B61E0F9368446D
Certificate serial:       29497C97187B24A18C42FF0FF6FC19F28DC227B0
Authority key identifier: 0B:29:8E:02:8B:DD:BE:DE:2A:0E:D2:53:56:B6:1E:0F:93:68:44:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131392e302f32342d3234203d3e20323637393536.roa
Signing time:             Wed 24 Aug 2022 19:08:37 +0000
ROA not before:           Wed 24 Aug 2022 19:03:37 +0000
ROA not after:            Wed 23 Aug 2023 19:08:37 +0000
asID:                     267956
IP address blocks:        45.166.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:49:7c:97:18:7b:24:a1:8c:42:ff:0f:f6:fc:19:f2:8d:c2:27:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B298E028BDDBEDE2A0ED25356B61E0F9368446D
        Validity
            Not Before: Aug 24 19:03:37 2022 GMT
            Not After : Aug 23 19:08:37 2023 GMT
        Subject: CN=4A3A82CEF238CD6F20937102DBD13346AF9EA689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:36:77:fc:6b:eb:a8:5d:c4:03:98:a9:b7:
                    d9:b4:a7:bb:c1:49:19:c6:d4:ab:a6:f1:d0:19:75:
                    c6:70:1c:e8:f8:ec:af:cd:9b:3d:6f:e4:36:7c:c4:
                    1e:72:95:83:e7:42:9c:6a:a8:52:37:2e:09:bf:0c:
                    b2:fb:e0:34:59:cf:9b:15:3c:d8:e1:14:fa:06:3e:
                    6a:00:1f:c6:92:bf:cb:b4:f9:90:9a:fb:d3:96:91:
                    1e:71:85:17:8f:8a:73:91:f1:fc:19:a2:d6:2f:54:
                    eb:10:6d:24:d2:f0:42:8b:e7:0b:b1:f6:77:1e:4b:
                    f5:72:a7:fd:ad:c5:62:3c:d6:1f:d7:e5:aa:82:59:
                    95:47:a7:2f:32:f8:83:e6:3b:15:5e:11:1d:f4:0b:
                    c4:80:4e:dc:ed:06:21:e2:05:1a:7b:46:5d:4c:cf:
                    75:43:9e:3b:50:72:43:79:c0:f0:42:d0:cc:03:f4:
                    4b:43:5e:e8:9f:3c:65:1b:ee:91:7a:bf:65:3c:b0:
                    cb:77:ff:cf:38:d8:dc:31:da:3a:f4:47:dc:74:3f:
                    ac:d8:b4:54:c4:75:bc:34:65:d4:26:81:24:15:1d:
                    93:ec:fd:9b:09:a3:e3:9e:4e:64:e1:4d:1f:49:0e:
                    91:82:60:ad:d4:8f:61:86:ad:e4:14:08:32:1e:03:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3A:82:CE:F2:38:CD:6F:20:93:71:02:DB:D1:33:46:AF:9E:A6:89
            X509v3 Authority Key Identifier:
                keyid:0B:29:8E:02:8B:DD:BE:DE:2A:0E:D2:53:56:B6:1E:0F:93:68:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131392e302f32342d3234203d3e20323637393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:41:ac:6f:3a:53:ec:1c:22:9d:33:44:9b:52:e0:14:21:
         fc:91:62:14:4c:ea:4c:25:aa:5f:db:76:6e:80:2c:4e:ec:36:
         cf:4a:07:43:70:ab:66:78:57:61:d7:67:92:2d:f9:a4:2e:dc:
         2b:16:65:c7:fe:fd:16:92:3c:d0:cb:81:0f:71:e1:da:59:ab:
         77:ec:fc:62:aa:f2:26:22:70:e9:14:78:7f:1f:f3:ad:56:ee:
         98:23:b0:65:02:4d:fe:96:55:d0:20:09:aa:ff:3e:7b:b2:d8:
         e8:e3:ef:20:b1:b3:4a:12:f6:5d:a4:a0:44:1e:5e:47:9c:1f:
         2c:bd:9e:ca:12:54:ef:fd:02:d6:02:f4:b8:a8:80:04:1a:d0:
         e3:3c:4c:ef:c3:10:81:5c:86:9a:c1:bc:2d:85:cf:25:ea:62:
         d1:62:91:78:79:e6:1e:cc:18:4e:44:ba:8f:63:13:4f:42:ae:
         78:94:47:ba:7e:fe:09:ae:0a:e1:07:f9:e5:28:3d:36:c6:9b:
         23:64:ee:fb:63:00:3a:17:47:f4:44:8b:c3:82:c4:51:de:7e:
         83:1f:41:7c:57:fc:15:c1:74:a3:ab:9f:77:32:42:f7:95:1c:
         72:23:2e:0b:b9:e1:cc:1d:62:e0:0f:eb:1e:b6:9c:ca:51:0f:
         5f:a4:f9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org