Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35322e302f32342d3234203d3e20323638373038.roa
File:                     34352e3137312e35322e302f32342d3234203d3e20323638373038.roa (raw, json)
Hash identifier:          6dpfmIAsLmJow7hzPdgZUUXhDG4koi/Qlxkn0ncTotE=
Subject key identifier:   E8:5B:67:30:78:7D:C0:CB:D9:30:27:70:B1:1B:6F:FD:2C:1F:15:D4
Certificate issuer:       /CN=0F2CCFC527502386B95CBF037663832D454D8363
Certificate serial:       6F54EC68FCD88812E59C941E989F164C2350F038
Authority key identifier: 0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35322e302f32342d3234203d3e20323638373038.roa
Signing time:             Mon 04 Dec 2023 18:03:02 +0000
ROA not before:           Mon 04 Dec 2023 17:58:02 +0000
ROA not after:            Mon 02 Dec 2024 18:03:02 +0000
asID:                     268708
IP address blocks:        45.171.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:54:ec:68:fc:d8:88:12:e5:9c:94:1e:98:9f:16:4c:23:50:f0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2CCFC527502386B95CBF037663832D454D8363
        Validity
            Not Before: Dec  4 17:58:02 2023 GMT
            Not After : Dec  2 18:03:02 2024 GMT
        Subject: CN=E85B6730787DC0CBD9302770B11B6FFD2C1F15D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:1f:b8:19:08:2b:6e:de:cf:c8:6d:20:c0:
                    bc:00:e5:f2:8c:72:f2:a1:ba:c4:0e:07:13:11:ac:
                    07:d3:c9:8b:4c:89:47:65:70:8f:1d:0e:ad:29:f4:
                    53:b8:22:64:8e:3c:cc:02:9d:4e:78:f5:d3:16:ba:
                    96:ed:5d:7c:60:22:a3:62:48:fd:d3:b6:d3:1a:9a:
                    39:f9:b8:7a:6b:6d:13:48:e6:10:cb:f0:ba:a1:f8:
                    60:b0:ba:6a:79:18:0b:4d:68:f9:02:f8:42:b7:91:
                    17:6d:fd:02:df:ce:f9:34:97:5d:ec:3d:2a:82:f3:
                    97:b2:42:76:14:f6:85:46:24:e7:a6:fc:09:b6:85:
                    69:5f:e1:04:3f:35:13:e2:0e:65:1a:73:15:3a:0c:
                    e1:64:e8:d7:dc:ca:5d:d2:8e:0c:07:95:aa:88:13:
                    04:9c:2e:0e:34:e1:42:5b:e5:fa:c2:07:65:60:74:
                    ee:74:94:84:e9:96:63:81:52:18:45:19:93:4e:7e:
                    18:b2:61:12:b3:c6:c4:f6:4c:47:39:5f:6f:6b:b6:
                    db:48:6f:80:24:32:28:07:61:1f:36:e1:32:5d:80:
                    c2:38:c5:5b:81:4b:05:4d:f3:50:d0:15:1d:17:a2:
                    9a:5a:d8:2d:e8:35:1d:a4:54:e6:c2:44:d3:94:df:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5B:67:30:78:7D:C0:CB:D9:30:27:70:B1:1B:6F:FD:2C:1F:15:D4
            X509v3 Authority Key Identifier:
                keyid:0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/0F2CCFC527502386B95CBF037663832D454D8363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35322e302f32342d3234203d3e20323638373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:3c:00:dd:44:5c:83:71:9c:29:74:3b:17:bc:2c:1a:7f:f7:
         f2:38:29:2e:b9:e3:2d:38:22:44:e8:7e:4a:ce:7a:db:22:32:
         60:03:1c:69:5a:36:75:cd:af:a7:f5:6e:70:fd:4a:7d:4c:a3:
         58:43:39:57:11:fb:a5:bf:2f:3c:f1:40:47:77:1b:a9:71:b6:
         af:19:b7:af:19:41:66:67:bc:6f:8a:42:c5:fb:bb:3d:83:00:
         a1:b0:98:16:5f:eb:8a:1a:5b:09:d7:e5:2c:f5:96:69:e5:94:
         79:e2:9b:63:74:61:28:92:a9:39:7a:40:ab:4b:6f:38:29:47:
         5e:25:b7:af:42:c3:9e:78:35:ae:68:ee:0d:da:8c:61:34:ca:
         b5:7b:6f:d6:d7:62:63:e3:39:0f:8a:2f:97:d8:5a:f2:14:ca:
         67:5b:c6:a7:7f:ef:c4:89:22:c1:a0:ff:5c:01:d5:59:2b:92:
         63:ed:33:f1:5f:b6:29:f7:08:49:9d:fb:8f:fe:b5:44:ca:5e:
         77:20:bb:f2:64:66:8f:e9:96:63:7d:d7:d2:63:f2:e4:0c:b2:
         a5:5e:0c:45:b3:fa:69:d9:8f:29:d2:29:5b:c9:ff:f0:26:ad:
         80:12:c4:7e:7b:9a:03:78:59:b6:be:da:76:d4:63:e0:f7:55:
         45:3e:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org