Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/34352e3136302e32302e302f32342d3234203d3e20323638343337.roa
File:                     34352e3136302e32302e302f32342d3234203d3e20323638343337.roa (raw, json)
Hash identifier:          haAO71YyJfiK0BJbdHBTh3fm6ywiNODfr1wtPPq3S2k=
Subject key identifier:   8B:CA:8D:24:8E:F5:64:6C:3B:19:F2:65:32:12:4B:86:EF:06:CA:7F
Certificate issuer:       /CN=CC0E245A65A53FD4D3F92E761E1A49BF1200285C
Certificate serial:       130DA6F519259BDB16E277F1AF37023D4BC00723
Authority key identifier: CC:0E:24:5A:65:A5:3F:D4:D3:F9:2E:76:1E:1A:49:BF:12:00:28:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/34352e3136302e32302e302f32342d3234203d3e20323638343337.roa
Signing time:             Wed 03 Apr 2024 18:32:34 +0000
ROA not before:           Wed 03 Apr 2024 18:27:34 +0000
ROA not after:            Wed 02 Apr 2025 18:32:34 +0000
asID:                     268437
IP address blocks:        45.160.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0d:a6:f5:19:25:9b:db:16:e2:77:f1:af:37:02:3d:4b:c0:07:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC0E245A65A53FD4D3F92E761E1A49BF1200285C
        Validity
            Not Before: Apr  3 18:27:34 2024 GMT
            Not After : Apr  2 18:32:34 2025 GMT
        Subject: CN=8BCA8D248EF5646C3B19F26532124B86EF06CA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:71:aa:29:f0:10:3c:a6:ed:65:08:25:ec:ab:
                    df:a2:f8:06:30:76:ec:14:d8:78:22:99:2f:31:20:
                    a7:15:8a:41:81:1e:ae:47:8f:02:4c:a9:43:0a:16:
                    bf:69:44:58:6f:07:a7:30:62:f3:5f:40:b2:fe:a4:
                    c1:ce:5e:b4:21:8a:b8:8e:78:5c:5e:5c:13:d6:15:
                    1c:d0:d1:e9:99:e4:cf:8a:9f:08:e7:5f:7f:0e:07:
                    30:9a:72:70:38:cb:e2:99:d4:e8:2b:87:d5:d2:2a:
                    21:b0:00:ac:c3:da:bd:db:44:d9:55:5c:ea:83:25:
                    67:22:1d:33:3e:e7:61:0b:64:ef:b1:6a:3c:01:db:
                    cc:cd:92:5a:4d:bd:4c:56:c3:a4:bc:76:40:59:70:
                    5b:27:fe:5b:73:75:1b:48:be:54:ac:d8:ce:2c:17:
                    2f:8f:54:d8:a2:6c:f7:46:46:10:c2:7a:72:75:e3:
                    6d:31:cb:2b:e3:0b:53:bf:4f:61:f8:6c:d5:7c:51:
                    eb:75:c2:7d:dc:8f:2f:e0:29:c8:c6:4f:7d:10:59:
                    9a:fa:03:2a:22:db:97:d2:cc:fc:ac:12:46:e9:37:
                    0d:4c:fd:f7:7c:ef:9a:96:7e:e3:ce:4a:e9:d9:3f:
                    53:e2:35:c3:ec:15:4b:b4:7a:c6:f9:62:80:7a:aa:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CA:8D:24:8E:F5:64:6C:3B:19:F2:65:32:12:4B:86:EF:06:CA:7F
            X509v3 Authority Key Identifier:
                keyid:CC:0E:24:5A:65:A5:3F:D4:D3:F9:2E:76:1E:1A:49:BF:12:00:28:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC0E245A65A53FD4D3F92E761E1A49BF1200285C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97dbTNWMyFNzAUN69quS1M7uH1KBae1NjHERiuHy3uX1/1/34352e3136302e32302e302f32342d3234203d3e20323638343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:a4:d3:9e:84:b0:c9:cc:78:79:45:0b:d7:42:a9:ed:f2:5f:
         a8:22:a9:4c:c9:6b:0a:d7:f9:e3:cd:df:45:76:97:52:07:47:
         f0:33:13:36:93:48:de:70:92:8d:36:70:d6:56:1d:98:37:3d:
         7b:5f:b0:97:46:c2:ed:a1:c9:90:d8:24:ef:02:19:4f:10:5d:
         ea:31:3f:ef:f4:8b:7f:47:2e:4d:8b:23:a7:ca:c5:29:0e:da:
         70:1e:8d:f9:48:2b:90:4b:78:4c:44:d3:31:ff:aa:38:43:d8:
         06:8e:30:ac:83:e8:73:f0:db:c3:90:54:92:3e:e9:8f:5c:d0:
         86:0a:15:40:46:f2:37:06:d7:cd:68:44:fe:de:33:90:87:d4:
         da:19:4c:17:a0:f4:0d:bc:e6:27:14:4c:7e:56:5f:76:78:76:
         c5:a6:79:78:a9:e7:80:31:b7:82:a7:f4:21:f7:de:0d:e6:c2:
         4d:00:bf:de:87:77:8c:b2:7d:37:62:ef:87:f7:1d:df:d8:71:
         b7:2b:95:f2:aa:ba:72:5d:67:c7:ab:c2:6e:8b:4a:c8:f0:32:
         7a:91:99:52:c3:17:02:f0:c2:0d:e9:fc:71:a0:b8:d4:5e:4a:
         db:e6:3a:5e:9f:c3:aa:d5:20:79:bd:f4:8b:14:21:72:d6:ef:
         3d:7d:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:30 2024 by rpki-client on console-fra.rpki-client.org