Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32312e302f32342d3234203d3e20323638343337.roa
File:                     34352e3136302e32312e302f32342d3234203d3e20323638343337.roa (raw, json)
Hash identifier:          T96LeI48VpZ2LGEKvw1rwVVCj8h4oPLo3QDIYfveg7E=
Subject key identifier:   D5:67:B6:41:9E:10:CD:5A:27:EC:61:4B:6F:4B:13:19:61:AB:E2:D7
Certificate issuer:       /CN=92014ED18F77F0D942921A5E834CE76EC5930713
Certificate serial:       4DA839CA5BE221054EE6A31810A1FF3AEBDEF18C
Authority key identifier: 92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32312e302f32342d3234203d3e20323638343337.roa
Signing time:             Tue 21 Mar 2023 13:00:00 +0000
ROA not before:           Tue 21 Mar 2023 12:55:00 +0000
ROA not after:            Tue 19 Mar 2024 13:00:00 +0000
asID:                     268437
IP address blocks:        45.160.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a8:39:ca:5b:e2:21:05:4e:e6:a3:18:10:a1:ff:3a:eb:de:f1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92014ED18F77F0D942921A5E834CE76EC5930713
        Validity
            Not Before: Mar 21 12:55:00 2023 GMT
            Not After : Mar 19 13:00:00 2024 GMT
        Subject: CN=D567B6419E10CD5A27EC614B6F4B131961ABE2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:ad:1c:06:67:76:e7:eb:ad:76:94:56:60:
                    35:bd:3a:f4:1b:5b:ed:64:dd:8a:a8:c2:3f:ba:69:
                    57:61:16:35:2a:9e:d0:72:28:83:43:54:91:e2:7e:
                    3b:0c:6a:ac:ec:44:c6:f5:df:4a:04:09:59:4f:e2:
                    11:28:cb:01:af:fb:11:ba:45:b1:d5:6b:80:81:ad:
                    7a:ab:c7:47:bb:f5:74:a2:46:5f:c0:ea:3c:dc:7d:
                    32:ca:4d:e7:60:5c:3f:67:75:ef:56:05:e3:fa:62:
                    fd:c0:fc:b1:97:a9:2b:d9:7a:6a:fa:79:88:8f:9d:
                    ae:b8:2d:95:d8:c3:b1:5a:81:cf:c7:0a:42:ac:c8:
                    f2:44:7e:07:76:90:ac:df:c7:40:94:7c:1a:f9:1d:
                    85:5d:3e:3b:81:76:7c:0a:06:81:b2:8b:e5:c1:1a:
                    69:f7:6c:88:1d:b9:fb:ae:4c:c1:86:f3:32:db:72:
                    1c:ff:fa:44:72:ab:fa:88:6f:65:46:4a:b9:09:cb:
                    8d:8e:8b:3d:e7:ce:8f:d5:9d:57:f5:5f:ff:d4:2f:
                    2d:5c:2c:c2:93:5b:35:0b:c6:05:eb:6a:2c:c2:36:
                    6d:a8:89:70:6a:c4:e4:d2:f5:24:d3:65:8e:36:3d:
                    72:73:df:ad:15:98:64:33:7b:4c:05:33:53:ad:83:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:67:B6:41:9E:10:CD:5A:27:EC:61:4B:6F:4B:13:19:61:AB:E2:D7
            X509v3 Authority Key Identifier:
                keyid:92:01:4E:D1:8F:77:F0:D9:42:92:1A:5E:83:4C:E7:6E:C5:93:07:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/92014ED18F77F0D942921A5E834CE76EC5930713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92014ED18F77F0D942921A5E834CE76EC5930713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/0/34352e3136302e32312e302f32342d3234203d3e20323638343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:36:9c:c5:1a:81:87:a4:81:64:00:ea:16:17:b1:02:7f:
         1e:a3:d1:6e:9e:f3:8a:f7:47:af:d2:3a:1b:b2:5c:9a:be:83:
         12:93:2d:7c:84:4d:33:d9:be:22:6d:7b:39:c6:d8:5d:71:7f:
         69:42:c2:b1:a0:7a:06:4d:2e:e4:74:83:cd:dd:55:42:24:4f:
         6f:cd:9a:64:05:06:80:e1:ac:0a:2e:dc:58:19:fc:21:25:27:
         30:de:b5:4c:f9:b9:34:d4:a4:0e:f1:9b:86:f0:a2:4f:ba:28:
         67:56:20:9c:58:c9:58:bf:8a:eb:2f:c1:38:ea:bd:24:91:f8:
         29:19:b6:7a:32:34:0e:0b:f7:1c:ca:b8:9f:37:d0:e7:10:6e:
         ca:05:b1:1b:64:f3:29:0e:c5:b8:ac:55:83:c7:1a:1f:87:02:
         72:1f:fe:ac:06:3b:64:4f:d8:ae:d0:30:e4:b6:be:9d:54:9e:
         42:a6:ea:08:6b:d8:3d:02:be:32:90:c9:f4:81:b5:9b:41:40:
         91:33:e5:ec:7f:30:7f:a7:45:cb:9a:5e:97:44:0d:7c:0d:94:
         ac:07:ff:74:01:58:8a:43:12:47:33:f4:d1:91:29:53:71:76:
         94:78:d2:36:59:cb:35:f3:ad:29:d3:ab:0c:a8:9d:bc:47:29:
         d2:b6:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org