Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32302e302f32342d3234203d3e20323638343337.roa
File:                     34352e3136302e32302e302f32342d3234203d3e20323638343337.roa (raw, json)
Hash identifier:          B0SXTXvzoCZzIhRR2t1e7nNUGLz2H4JuqeuGLn3ttKs=
Subject key identifier:   CF:8F:DA:0D:8D:4B:B8:47:CF:0E:AC:6A:06:3E:BD:82:04:A4:21:42
Certificate issuer:       /CN=92014ED18F77F0D942921A5E834CE76EC5930713
Certificate serial:       3B14D28A72B0EAFF5AD69212A4CC864209374E1C
Authority key identifier: 92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32302e302f32342d3234203d3e20323638343337.roa
Signing time:             Tue 20 Feb 2024 13:00:00 +0000
ROA not before:           Tue 20 Feb 2024 12:55:00 +0000
ROA not after:            Tue 18 Feb 2025 13:00:00 +0000
asID:                     268437
IP address blocks:        45.160.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:14:d2:8a:72:b0:ea:ff:5a:d6:92:12:a4:cc:86:42:09:37:4e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92014ED18F77F0D942921A5E834CE76EC5930713
        Validity
            Not Before: Feb 20 12:55:00 2024 GMT
            Not After : Feb 18 13:00:00 2025 GMT
        Subject: CN=CF8FDA0D8D4BB847CF0EAC6A063EBD8204A42142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:04:50:b2:2f:86:c7:48:08:a5:c1:44:3c:
                    27:53:2e:0e:ca:56:57:3b:ca:43:b9:eb:d0:25:d8:
                    3a:09:fa:ae:93:51:6b:0c:18:17:9c:05:08:e7:dd:
                    5c:d4:91:8b:eb:8a:19:b3:bb:32:68:0b:57:d9:fc:
                    60:93:2d:80:ad:84:ec:9c:0a:32:ca:f6:87:cb:b8:
                    9e:41:25:21:21:6e:73:7a:d1:fb:21:79:79:b6:2b:
                    f3:9a:1b:3e:89:0a:7b:83:e6:6d:f5:2c:b1:28:3a:
                    4d:c3:8d:3d:27:17:4f:cb:1d:78:20:20:92:fe:f9:
                    51:11:de:ba:49:1a:57:f6:b6:18:7c:00:78:11:4d:
                    1b:6a:02:38:5f:55:41:10:2e:ab:3c:56:5e:28:7a:
                    7e:22:5b:d3:f0:14:9b:09:9b:6d:51:d2:db:de:20:
                    1c:3e:1a:fa:26:a4:91:06:be:7f:55:bc:47:32:f3:
                    3a:9b:cd:eb:9b:6a:e2:d4:49:b4:ea:a6:ee:8b:01:
                    3f:6d:05:1a:5d:d2:a9:fc:b3:43:85:1a:d3:fe:c2:
                    b7:72:ee:4f:67:c3:b2:d2:9f:ba:d5:7c:3a:e8:f5:
                    84:c2:e6:b4:4e:9f:a9:83:58:33:d2:b2:40:6f:aa:
                    fe:8a:05:69:26:e7:9e:46:71:08:03:4d:68:14:55:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8F:DA:0D:8D:4B:B8:47:CF:0E:AC:6A:06:3E:BD:82:04:A4:21:42
            X509v3 Authority Key Identifier:
                keyid:92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/92014ED18F77F0D942921A5E834CE76EC5930713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32302e302f32342d3234203d3e20323638343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:39:62:b2:12:ea:94:09:fa:5e:a1:30:b4:19:36:59:27:5d:
         1f:a7:cd:7b:d9:2a:e0:83:d0:72:07:e5:dd:d8:6e:d8:f5:10:
         f1:04:7d:f9:ed:c2:c6:f8:13:ba:c1:59:33:f2:6f:34:7d:2f:
         b8:6d:ca:dd:93:ac:71:a5:dd:65:df:84:39:79:e6:bc:b2:fa:
         4e:87:de:5c:63:d4:87:e9:99:fe:cd:2f:b5:f1:64:eb:d7:7f:
         19:aa:47:2b:bc:87:d7:5d:d9:8f:2d:7b:26:7a:33:d6:34:e6:
         1f:f3:91:1d:f0:74:de:26:85:ba:0e:1b:5e:6c:af:4e:d2:d3:
         85:90:cb:bf:13:52:97:c1:6e:13:fa:97:f3:2c:e5:7a:60:92:
         ab:6a:24:d6:d0:b3:3f:bf:c9:16:f3:c6:ab:fc:46:18:a5:e5:
         b1:1d:e4:56:9b:2a:94:c5:55:3c:c8:8d:28:2d:d7:58:1a:f5:
         f4:ef:6a:0d:23:e4:c2:32:28:ce:21:1d:57:cc:ea:36:90:da:
         08:d2:65:39:4f:14:7d:f1:cb:59:11:5d:5f:b7:3b:de:f7:58:
         a2:3d:ff:b6:cc:e3:a8:17:ea:85:10:0f:fd:86:f9:9e:36:fd:
         01:f1:a3:d1:a6:ad:31:51:41:32:65:32:b3:c6:09:60:93:7c:
         c1:89:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org