Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32302e302f32322d3232203d3e20323638343337.roa
File:                     34352e3136302e32302e302f32322d3232203d3e20323638343337.roa (raw, json)
Hash identifier:          jJYPnqimyauhBSa8paV9JJ0NLpiWw1j3NpiiQboE+Zk=
Subject key identifier:   C4:BE:95:E4:68:22:10:5A:80:0A:35:79:8A:AC:52:42:02:75:71:A8
Certificate issuer:       /CN=92014ED18F77F0D942921A5E834CE76EC5930713
Certificate serial:       1F5B81AB52AE1C09BDF5F36C0FC214FA8451D204
Authority key identifier: 92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32302e302f32322d3232203d3e20323638343337.roa
Signing time:             Tue 20 Feb 2024 13:00:00 +0000
ROA not before:           Tue 20 Feb 2024 12:55:00 +0000
ROA not after:            Tue 18 Feb 2025 13:00:00 +0000
asID:                     268437
IP address blocks:        45.160.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5b:81:ab:52:ae:1c:09:bd:f5:f3:6c:0f:c2:14:fa:84:51:d2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92014ED18F77F0D942921A5E834CE76EC5930713
        Validity
            Not Before: Feb 20 12:55:00 2024 GMT
            Not After : Feb 18 13:00:00 2025 GMT
        Subject: CN=C4BE95E46822105A800A35798AAC5242027571A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:7f:54:4c:7a:42:f3:be:eb:e2:a1:e2:42:
                    04:29:b3:e4:b7:cc:9d:50:fe:60:14:c4:51:b0:92:
                    4b:ca:90:e1:e0:73:4e:7a:62:93:4e:89:2a:6d:ce:
                    a0:83:19:3e:8d:6c:27:65:49:99:35:80:e0:2d:ca:
                    56:03:df:d7:db:f9:9c:0f:6b:02:1b:0b:d9:da:7a:
                    25:61:81:56:cc:95:e9:69:44:2e:8d:d8:fb:99:a5:
                    69:b2:06:e0:54:e0:a2:00:f8:4c:c3:76:e5:04:64:
                    ff:e3:60:f8:ea:d9:ac:a4:56:9e:47:9b:0d:44:db:
                    df:91:21:d3:e7:7e:b0:3f:dd:f4:85:56:21:42:48:
                    55:ce:28:b7:0b:0c:5f:99:f6:2a:57:c6:7e:bb:61:
                    91:6d:43:2a:4e:7b:c1:02:2b:62:d2:7b:52:59:10:
                    81:2d:df:e3:59:e7:a7:a4:9d:06:cd:1f:58:b7:d3:
                    9b:12:9a:16:02:d8:9a:40:6d:14:7d:27:b1:4f:ed:
                    d1:0a:ea:e4:e9:61:d4:ff:a1:97:7f:7e:4b:64:82:
                    2e:07:d7:86:fd:90:7c:04:81:65:86:3c:3f:e5:73:
                    e4:08:29:b0:a6:70:4d:61:31:cd:51:4e:7d:76:cd:
                    3b:d7:53:15:7a:68:48:00:be:a5:34:3d:d6:b6:d2:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BE:95:E4:68:22:10:5A:80:0A:35:79:8A:AC:52:42:02:75:71:A8
            X509v3 Authority Key Identifier:
                keyid:92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/92014ED18F77F0D942921A5E834CE76EC5930713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32302e302f32322d3232203d3e20323638343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:eb:39:ba:60:c8:ec:19:e7:51:74:52:11:b1:6d:88:38:
         50:b0:0e:9d:71:7a:ec:7f:25:70:2d:cc:8a:bd:80:bc:ab:ee:
         9f:2e:4e:6a:7d:a6:1c:d5:c2:30:f2:eb:3d:35:29:80:a5:16:
         27:4e:63:fa:88:74:1a:40:ad:93:74:2e:e5:b5:f1:7f:93:2e:
         42:e2:13:b1:f5:8d:e2:38:cc:1f:df:37:67:b4:09:1a:30:08:
         ce:16:3d:34:f0:1f:d9:0e:73:a9:46:59:fa:c3:ba:a8:ce:81:
         81:e2:3c:f9:26:ca:db:eb:f3:64:be:83:24:e2:76:f9:75:c5:
         76:bb:13:e8:48:44:41:bf:bf:c1:c6:43:37:96:65:ed:60:57:
         eb:36:a5:0b:53:a1:d3:62:e1:a6:81:7a:a1:d1:94:70:19:cc:
         ed:cf:75:7e:f9:3d:2f:2b:ea:13:0f:58:b6:d1:1d:93:61:1c:
         44:1c:f3:09:23:22:6c:9a:f4:99:73:63:cc:e2:62:b6:ef:c1:
         be:30:b2:14:ce:95:70:9f:5b:8a:e0:6a:ba:9b:2b:39:10:e0:
         c8:c6:d7:6c:14:d3:2c:e6:19:d4:05:63:7b:61:9f:0a:2d:cc:
         fe:59:1c:7a:fb:5a:b6:3a:07:37:6c:ac:28:32:b1:65:25:26:
         e9:fd:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org