Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3235312e302f32342d3234203d3e20323638373239.roa
File:                     34352e3137312e3235312e302f32342d3234203d3e20323638373239.roa (raw, json)
Hash identifier:          G4ukzOohhVfQ3c8goY9K6C0qZ3os+XHXBcyYmrtEK+g=
Subject key identifier:   22:09:F6:5F:9B:4E:6B:DA:91:75:E7:D4:42:E1:4E:BE:F9:2E:21:2D
Certificate issuer:       /CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
Certificate serial:       02FB739C3A2884E85D5A53FC14B18B0A494443CA
Authority key identifier: 8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3235312e302f32342d3234203d3e20323638373239.roa
Signing time:             Tue 26 Dec 2023 16:59:44 +0000
ROA not before:           Tue 26 Dec 2023 16:54:44 +0000
ROA not after:            Tue 24 Dec 2024 16:59:44 +0000
asID:                     268729
IP address blocks:        45.171.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fb:73:9c:3a:28:84:e8:5d:5a:53:fc:14:b1:8b:0a:49:44:43:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
        Validity
            Not Before: Dec 26 16:54:44 2023 GMT
            Not After : Dec 24 16:59:44 2024 GMT
        Subject: CN=2209F65F9B4E6BDA9175E7D442E14EBEF92E212D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:a5:24:4c:b4:a5:07:2d:37:30:53:0b:7f:
                    11:15:66:d5:52:eb:82:af:04:b6:5f:52:06:44:b6:
                    a1:5b:bb:12:93:a9:6a:bb:b1:b2:1a:f8:57:71:1e:
                    f3:66:80:0d:82:f4:47:6d:18:7e:14:21:7f:6d:70:
                    5c:47:55:b4:a0:88:93:72:5f:6e:95:9b:b8:4c:f8:
                    c6:e4:2f:b2:d1:19:56:bc:08:4f:4e:87:e3:12:4b:
                    04:88:ed:50:fb:7f:93:b7:71:24:68:d3:83:38:88:
                    09:d2:69:88:5f:a1:c4:c2:aa:a6:11:c5:7b:05:c1:
                    f6:94:cd:5c:c7:11:ad:9c:b4:80:3e:ab:e1:9c:28:
                    77:91:e9:a7:0d:42:5f:28:ec:21:1f:d0:75:b2:d9:
                    36:af:9b:3c:0b:c4:a7:e0:b3:0c:6a:df:83:0d:26:
                    07:ae:93:f3:41:84:fd:78:be:0c:b4:a8:8e:52:df:
                    b7:61:0f:c6:02:f8:28:18:e8:41:f8:b8:0c:ad:17:
                    48:4a:73:7b:94:60:13:2f:6f:64:96:1d:d3:6f:85:
                    cc:ed:f7:42:18:04:49:be:9d:7f:bb:96:5b:e8:e0:
                    cd:3e:88:20:22:40:8c:3a:0b:80:ab:88:44:ea:b1:
                    71:50:96:57:28:e3:89:dc:59:a0:49:90:b3:d2:2b:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:09:F6:5F:9B:4E:6B:DA:91:75:E7:D4:42:E1:4E:BE:F9:2E:21:2D
            X509v3 Authority Key Identifier:
                keyid:8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3235312e302f32342d3234203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ad:6c:ec:38:2b:eb:70:c7:c3:f1:c1:1f:1f:6f:3b:de:24:
         3a:73:ad:12:c3:2d:34:16:c2:7d:68:dd:cd:d2:db:b5:c4:0e:
         b0:7d:bc:05:c0:2e:91:5e:cd:96:27:00:5d:39:be:f2:5c:1e:
         82:b4:bd:07:b6:9c:38:7c:e6:7f:ea:75:0f:81:0d:ff:a3:f5:
         03:9f:c0:f4:56:e9:85:03:ba:64:0a:9a:3a:40:9a:1f:6d:1c:
         ac:88:58:0e:cd:bf:ea:db:37:f5:8a:8d:bc:1d:af:56:1c:f0:
         87:ad:7b:73:63:49:e6:b6:e3:ff:17:35:89:a5:c8:31:7f:ff:
         a3:c0:0a:dd:03:c2:6c:5d:ee:95:57:bc:7f:c2:40:da:d5:0a:
         60:c4:70:11:4e:45:db:0e:21:03:8e:e7:42:7e:93:ef:9a:6b:
         86:3a:75:ec:fc:50:43:01:46:b0:aa:f3:19:f0:c2:89:39:0e:
         8e:a0:7d:b5:52:04:52:31:43:87:2f:58:68:0d:e7:48:61:86:
         6a:58:e9:09:4a:89:b8:db:13:c5:25:fb:31:ee:84:3f:53:9a:
         21:2c:fe:ba:0d:92:2c:a4:d7:6c:75:57:33:82:49:b8:53:9f:
         63:c4:c6:95:bf:40:27:47:7e:09:eb:df:d4:0e:82:9c:53:e4:
         1c:d8:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org