Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134322e302f32342d3234203d3e20323638303131.roa
File:                     34352e3136372e3134322e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier:          XZOFhvL4eJV/o652XQV/ZYHIYLGOp6X2xBiA1BF01uI=
Subject key identifier:   B3:DC:77:05:F7:77:14:41:00:FC:35:0A:32:8E:20:4E:29:58:AF:D5
Certificate issuer:       /CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Certificate serial:       0C01EF23682A015B4195390A3582E6151C96D1E2
Authority key identifier: 84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134322e302f32342d3234203d3e20323638303131.roa
Signing time:             Wed 22 Nov 2023 17:53:00 +0000
ROA not before:           Wed 22 Nov 2023 17:48:00 +0000
ROA not after:            Wed 20 Nov 2024 17:53:00 +0000
asID:                     268011
IP address blocks:        45.167.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:01:ef:23:68:2a:01:5b:41:95:39:0a:35:82:e6:15:1c:96:d1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
        Validity
            Not Before: Nov 22 17:48:00 2023 GMT
            Not After : Nov 20 17:53:00 2024 GMT
        Subject: CN=B3DC7705F777144100FC350A328E204E2958AFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:09:f1:a3:73:0f:cd:75:a8:92:4b:1d:63:
                    f6:77:c8:29:ca:32:3a:65:87:ed:ea:6a:bb:a9:2d:
                    d3:4e:ab:87:27:de:0e:e1:03:b0:f3:58:93:33:bf:
                    b3:78:33:40:86:96:c8:fe:0f:92:81:95:09:96:85:
                    ca:7f:7d:11:be:b3:22:c4:fd:40:50:b6:43:46:04:
                    9d:b2:7d:94:9c:75:39:0e:7a:b5:db:5d:8c:95:f5:
                    4e:c5:7a:17:f6:d3:99:85:f2:b5:9c:dc:27:b1:30:
                    bb:0c:99:05:03:82:de:7b:3c:58:9b:6f:bf:13:f6:
                    fe:2c:f9:dc:b3:18:24:6e:d7:1c:b7:a1:16:b7:e4:
                    0c:43:cd:54:0c:66:5a:0d:2a:ef:b3:94:87:3e:20:
                    41:12:bd:e2:47:39:1a:dd:52:63:39:65:3b:4d:18:
                    12:4b:28:a5:b4:c1:97:9f:30:3a:bd:41:0d:74:b1:
                    05:d9:f1:56:49:39:50:8f:61:ab:37:0c:79:a2:45:
                    16:3b:83:ba:7f:7e:52:a7:08:54:ef:fe:f5:1e:94:
                    0b:71:81:36:1c:cd:be:c6:ce:90:ca:38:88:81:62:
                    ac:be:5c:f2:7c:c3:ad:a2:dd:b3:7c:6d:72:74:5b:
                    01:07:e6:ac:fd:07:8f:b8:aa:fe:eb:73:b5:3b:4b:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:77:05:F7:77:14:41:00:FC:35:0A:32:8E:20:4E:29:58:AF:D5
            X509v3 Authority Key Identifier:
                keyid:84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134322e302f32342d3234203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:af:5a:d9:d7:62:14:af:ff:0e:26:09:d5:10:3a:ac:66:6c:
         82:51:36:ce:06:b6:98:bd:fb:e9:20:ca:3b:33:c3:b8:6b:9b:
         5d:65:a5:4a:b2:03:53:4f:aa:7e:24:8f:f5:72:b1:04:4b:47:
         e1:a9:33:55:cd:50:bd:8f:85:08:fa:7e:01:86:a3:8d:04:7c:
         fa:76:fb:ef:0a:11:45:06:85:cd:e8:5b:99:27:d3:74:57:2e:
         90:4f:d0:a8:c2:e5:4a:9e:b4:d7:13:a3:15:12:49:6b:d7:54:
         a9:54:83:71:fd:51:ab:a9:68:42:96:8e:83:fe:ed:51:74:7e:
         a1:b9:cb:eb:6d:86:3a:a5:dc:b0:b7:96:b1:27:fb:f1:b8:ca:
         09:a4:7c:64:ae:0f:89:65:fd:89:48:02:c4:26:bf:65:cf:86:
         b1:04:93:47:5b:3e:a0:68:d2:98:5f:2d:f7:33:4b:36:4e:bf:
         5f:35:7e:a0:59:94:b5:64:2f:4d:db:e3:d2:c7:4d:01:0c:10:
         6d:af:bd:57:73:17:5d:11:95:9e:f2:24:14:56:e8:01:d2:81:
         42:0a:e8:8d:64:75:b7:2c:04:d4:e4:5b:93:f9:cf:2e:53:f6:
         61:d3:64:6a:3e:c8:e1:5f:8c:a3:2c:d5:73:e7:ce:54:41:df:
         29:00:17:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org