Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/0/34352e3138342e342e302f32322d3234203d3e20323639343338.roa
File:                     34352e3138342e342e302f32322d3234203d3e20323639343338.roa (raw, json)
Hash identifier:          sAu4nDg+nSI+1EBomjzBklWBQKgOwV4qXc0EiEFiXdU=
Subject key identifier:   E8:1B:74:D3:79:A4:F8:63:29:7C:64:6A:41:78:15:6C:42:4A:CB:34
Certificate issuer:       /CN=2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7
Certificate serial:       1F80A182201C2DE2A56C8E7801D88DF34BE4243E
Authority key identifier: 29:52:A5:F0:A5:72:AE:A6:A7:D0:D6:1E:1C:F4:5D:2B:A2:8D:09:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/0/34352e3138342e342e302f32322d3234203d3e20323639343338.roa
Signing time:             Mon 30 Oct 2023 19:53:29 +0000
ROA not before:           Mon 30 Oct 2023 19:48:29 +0000
ROA not after:            Mon 28 Oct 2024 19:53:29 +0000
asID:                     269438
IP address blocks:        45.184.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:80:a1:82:20:1c:2d:e2:a5:6c:8e:78:01:d8:8d:f3:4b:e4:24:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7
        Validity
            Not Before: Oct 30 19:48:29 2023 GMT
            Not After : Oct 28 19:53:29 2024 GMT
        Subject: CN=E81B74D379A4F863297C646A4178156C424ACB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:68:8e:30:7f:64:13:75:c7:26:b4:be:93:
                    00:3a:5d:32:36:8a:92:03:f0:93:34:54:ce:1b:2a:
                    fa:a9:cb:c1:07:d0:87:f2:75:99:1c:af:a3:7d:b3:
                    1f:fc:fd:f6:e5:ad:d0:6b:67:f3:16:25:43:39:94:
                    f2:b7:bf:25:0b:41:cb:71:81:d5:80:82:e7:b8:44:
                    c0:a7:d9:19:95:64:e9:60:93:a4:8a:b9:6a:a3:70:
                    1e:3d:fb:c1:47:06:c3:60:8f:09:d4:20:3c:53:7e:
                    b6:bf:29:be:28:4e:93:69:56:b3:46:f8:42:f8:69:
                    7c:ce:82:0f:bd:87:5c:f8:f2:bf:e3:cd:a0:27:9b:
                    06:e5:cc:6f:26:69:29:50:f9:d3:6e:a4:b8:a6:6c:
                    12:b9:b5:ec:70:fa:e0:0e:6f:b9:3e:7b:60:f9:65:
                    f5:6d:60:1a:5d:5b:48:8c:6b:20:e2:1c:d8:0c:9d:
                    6d:5c:a1:3f:bc:d8:7e:5a:67:35:8e:ce:75:9c:2f:
                    c7:a6:d7:0c:a5:2e:de:ae:a0:9e:c0:61:86:55:2b:
                    c3:96:8d:3f:c8:aa:67:df:15:b8:3e:e2:8c:e0:bb:
                    eb:ad:0f:c6:b7:a6:ee:99:82:3c:be:e4:f1:12:59:
                    8b:30:55:de:3f:d2:b8:d9:e5:61:36:cd:2f:ed:80:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1B:74:D3:79:A4:F8:63:29:7C:64:6A:41:78:15:6C:42:4A:CB:34
            X509v3 Authority Key Identifier:
                keyid:29:52:A5:F0:A5:72:AE:A6:A7:D0:D6:1E:1C:F4:5D:2B:A2:8D:09:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/0/2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/0/34352e3138342e342e302f32322d3234203d3e20323639343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:92:3c:84:b5:bf:2f:0f:6c:e5:eb:92:98:c6:24:94:4c:76:
         ff:12:d6:be:ce:ef:21:d8:0c:74:89:4d:db:51:4e:1a:39:ef:
         3b:f9:48:c3:97:e6:ae:2b:cc:da:01:52:3e:f7:15:9c:61:df:
         c6:47:39:6d:30:55:8a:ff:b6:64:d9:19:fa:a0:42:fb:4c:98:
         3d:e4:47:b4:69:2e:fa:9d:8f:99:39:65:25:83:3b:31:2b:e2:
         67:b4:aa:f4:85:ec:2a:ac:53:8b:0f:21:b5:a2:00:18:2e:df:
         b9:d2:25:b7:9c:06:67:2c:72:43:b8:9c:27:5a:f2:59:68:12:
         e8:9c:e4:87:b1:86:a7:b4:99:23:16:d4:b7:ff:c5:32:00:7c:
         e0:71:76:86:c1:53:47:d5:a8:88:ea:66:2c:52:40:a5:fc:c5:
         07:a8:50:6f:ad:5b:00:68:76:70:18:9e:75:3a:6e:a3:fb:4f:
         c8:6e:5c:02:f2:e2:59:60:ed:5b:19:9d:67:93:2a:f3:f3:c7:
         66:6b:50:39:dc:c7:9d:1f:5e:d6:b1:34:44:2a:85:28:dc:6f:
         98:d3:45:8e:a4:4c:51:3b:0b:41:c6:75:86:a5:c8:84:a6:3c:
         98:a1:bd:ed:39:db:fe:45:9b:fd:11:c5:74:35:fe:f3:9e:ff:
         d0:7d:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org