Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32312e302f32342d3234203d3e20323639363634.roa
File:                     34352e3139312e32312e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier:          TEDLaV8m70Khuf31GuWU9Abynmv4iJGLHBAIVtOMsyA=
Subject key identifier:   FC:D1:F2:83:C5:73:2C:E1:C5:5E:49:9A:6A:AD:64:EA:E1:5D:CF:26
Certificate issuer:       /CN=8CF0B434A59C0598B055FF40F880494E46C052FD
Certificate serial:       521CF835BCC73E229E39B6BB26B7FD24FA78C0BF
Authority key identifier: 8C:F0:B4:34:A5:9C:05:98:B0:55:FF:40:F8:80:49:4E:46:C0:52:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CF0B434A59C0598B055FF40F880494E46C052FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32312e302f32342d3234203d3e20323639363634.roa
Signing time:             Mon 26 Sep 2022 17:38:48 +0000
ROA not before:           Mon 26 Sep 2022 17:33:48 +0000
ROA not after:            Mon 25 Sep 2023 17:38:48 +0000
asID:                     269664
IP address blocks:        45.191.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1c:f8:35:bc:c7:3e:22:9e:39:b6:bb:26:b7:fd:24:fa:78:c0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CF0B434A59C0598B055FF40F880494E46C052FD
        Validity
            Not Before: Sep 26 17:33:48 2022 GMT
            Not After : Sep 25 17:38:48 2023 GMT
        Subject: CN=FCD1F283C5732CE1C55E499A6AAD64EAE15DCF26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:8f:73:7c:5a:b4:2f:d3:8f:84:59:eb:f8:
                    98:02:b7:0a:c7:45:e6:21:9c:1e:4e:8e:1c:16:40:
                    ed:8c:57:18:e6:b7:4a:0a:e1:91:ff:b8:9a:02:3f:
                    49:84:a7:3a:6a:c7:97:b5:b3:98:fb:23:34:ad:36:
                    f2:f4:48:b2:6d:c6:d8:19:0d:fb:db:36:64:44:ba:
                    7a:58:b7:8d:0e:35:53:a6:76:3c:79:b0:7f:af:af:
                    6f:2f:7a:50:a7:d4:4f:69:0a:52:07:cd:87:76:b5:
                    41:2e:a2:f6:e4:8b:f5:7c:3a:f7:c6:3b:d3:52:2e:
                    18:06:15:2f:af:61:13:12:55:ae:13:04:29:1f:a7:
                    bb:f8:ff:06:e3:4c:39:1b:c2:65:92:b2:4c:19:20:
                    f0:4a:1d:77:05:2e:a4:0f:fc:27:2a:b5:f8:6f:fb:
                    21:aa:47:49:76:86:43:59:08:c2:e0:88:fe:34:7d:
                    81:50:70:69:90:db:93:63:7f:a8:dd:d6:6f:f3:64:
                    7b:e1:17:69:f9:b2:4e:65:5e:7a:ad:8f:10:5e:07:
                    ef:cc:c6:45:56:f3:ac:84:eb:40:0c:3b:21:bf:3f:
                    26:6c:35:29:77:fc:de:5e:ce:78:81:4b:48:63:6a:
                    92:ee:3a:8a:00:d0:f6:d5:79:76:62:47:bf:d3:a7:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D1:F2:83:C5:73:2C:E1:C5:5E:49:9A:6A:AD:64:EA:E1:5D:CF:26
            X509v3 Authority Key Identifier:
                keyid:8C:F0:B4:34:A5:9C:05:98:B0:55:FF:40:F8:80:49:4E:46:C0:52:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/8CF0B434A59C0598B055FF40F880494E46C052FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CF0B434A59C0598B055FF40F880494E46C052FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32312e302f32342d3234203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:94:a7:f7:df:06:87:5f:7d:fe:81:ea:50:aa:a2:07:78:13:
         26:ee:e3:4d:e1:ba:7f:32:03:f4:71:5a:08:9a:f4:59:c1:0b:
         7a:12:e2:8b:85:2d:9f:45:1f:6a:b0:00:eb:02:fe:7f:81:e1:
         8f:dc:2a:87:df:cb:35:10:7b:94:80:68:1b:cd:33:6a:fe:20:
         65:e0:f4:20:66:7c:3f:fb:cb:16:0b:b7:d2:28:3d:e3:ae:5e:
         83:85:4d:a5:ad:11:6f:5a:77:dd:99:ea:2f:ea:9d:b0:20:a6:
         39:2c:91:a3:1b:63:67:08:49:2a:37:5e:cc:dd:01:2e:51:1e:
         15:ff:cb:fc:9a:73:c3:78:79:e9:3f:84:25:44:e8:4e:b6:96:
         fd:c1:e9:f8:9a:ec:55:46:9d:e0:44:a6:b0:c0:90:1b:f2:99:
         43:7b:08:02:01:4e:a9:1c:42:cf:f2:f8:0b:30:2f:8f:fd:62:
         0b:0a:92:0b:36:c8:27:35:df:a9:28:a2:d6:a6:21:5c:49:25:
         2f:6b:b5:f0:10:1d:75:f8:17:0b:2c:bd:12:aa:e1:1a:bb:f5:
         5d:29:be:33:df:c6:ad:b2:17:0e:e2:f9:1b:7d:1c:5f:8a:fe:
         2d:ea:a4:3d:d7:f3:fb:22:d4:fd:51:aa:27:16:f3:6f:d2:c7:
         26:8e:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org