Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa
File:                     34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa (raw, json)
Hash identifier:          8iTk/dBuv5IjypomF92sZeMFBaDgMc+mSAES8WRYR8s=
Subject key identifier:   C4:6D:B9:AC:32:EF:01:9B:D2:CE:10:00:4B:F2:0F:EE:70:B3:35:00
Certificate issuer:       /CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
Certificate serial:       5F9A388F23C954DDF839F0FE255608722290E202
Authority key identifier: 97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa
Signing time:             Fri 09 Feb 2024 19:00:01 +0000
ROA not before:           Fri 09 Feb 2024 18:55:01 +0000
ROA not after:            Fri 07 Feb 2025 19:00:01 +0000
asID:                     269195
IP address blocks:        45.179.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9a:38:8f:23:c9:54:dd:f8:39:f0:fe:25:56:08:72:22:90:e2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799B170CE0588DDA475C42D0FB5765AB69AB649
        Validity
            Not Before: Feb  9 18:55:01 2024 GMT
            Not After : Feb  7 19:00:01 2025 GMT
        Subject: CN=C46DB9AC32EF019BD2CE10004BF20FEE70B33500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:97:f3:18:18:e9:10:5c:b6:62:e7:ae:4c:
                    48:3a:b3:66:6b:68:76:48:0f:2b:63:07:bf:b4:20:
                    0f:b8:16:bf:15:56:3e:8c:5f:85:88:5b:43:3c:15:
                    23:82:05:e6:39:0f:66:2c:fc:06:cc:02:ea:ab:ee:
                    8c:60:08:9a:c6:af:17:6d:07:16:02:f9:aa:5c:fb:
                    b7:02:f3:00:6d:1b:8e:73:1f:15:76:3b:a4:49:a6:
                    af:4b:d9:23:74:96:99:2d:87:8d:13:2a:2f:e4:8e:
                    c0:d9:f6:1d:bb:94:b6:ee:a5:03:e1:d7:58:fe:f7:
                    bf:6e:c1:2d:ee:cb:b3:6b:73:11:76:fe:67:f0:66:
                    63:5c:a0:85:95:47:08:97:15:ab:08:33:41:46:07:
                    bc:9a:3c:18:68:1a:c2:c9:5d:06:25:56:d2:90:bf:
                    33:aa:11:89:f9:a7:53:3e:ea:e5:b7:62:ac:2e:6c:
                    e8:bd:06:43:78:7b:5f:3c:6d:0a:60:ba:30:78:ec:
                    58:db:cc:3d:ff:d8:c7:4a:86:df:a2:9f:ad:85:f9:
                    d6:29:cb:88:56:5b:db:04:38:f1:ce:4c:57:89:ee:
                    a7:1b:bf:2b:48:95:48:14:eb:b2:84:9d:6a:ba:5c:
                    ce:d8:76:ee:86:9f:52:5a:ee:00:20:56:28:f1:48:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:B9:AC:32:EF:01:9B:D2:CE:10:00:4B:F2:0F:EE:70:B3:35:00
            X509v3 Authority Key Identifier:
                keyid:97:99:B1:70:CE:05:88:DD:A4:75:C4:2D:0F:B5:76:5A:B6:9A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9799B170CE0588DDA475C42D0FB5765AB69AB649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/0/34352e3137392e3138392e302f32342d3234203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:1e:9a:81:ac:43:50:2f:a3:7e:cb:7b:d4:b7:67:b5:f2:cb:
         06:7f:7a:cd:c3:2a:87:7c:fb:84:45:9d:18:ba:8b:13:da:b4:
         15:aa:72:c4:d7:6c:af:14:13:71:62:80:1f:be:f2:d0:72:68:
         2e:0a:99:28:5b:0f:78:11:5c:ee:8d:e9:36:56:2a:2a:98:bd:
         77:6f:f5:42:e6:74:57:f4:ee:ca:d0:9e:62:10:67:1a:54:0d:
         ef:d0:16:cb:a6:cb:32:e8:f9:81:ae:8f:d7:59:b0:d1:09:93:
         40:35:10:de:0d:d0:e4:78:ba:38:3f:6f:3d:9a:75:b9:8f:f2:
         8e:a3:aa:1a:33:f0:5d:1b:52:e6:9a:56:94:d6:75:2f:31:87:
         86:a8:de:15:98:f4:fc:c4:74:fd:16:b3:7c:18:93:e3:bc:10:
         cd:ee:9c:fc:a3:40:aa:9e:8b:14:a9:10:8f:e3:12:4a:bd:ec:
         70:b7:ed:d0:24:82:00:bd:35:b0:76:95:aa:ae:4a:5d:ef:ee:
         2d:03:0b:86:15:9a:f3:d1:46:4e:7c:9d:13:51:79:08:1f:72:
         78:a1:f5:b5:79:ee:d7:fd:e6:bb:22:3d:94:b2:18:99:ed:bb:
         a0:ec:3b:90:e2:2d:ec:a1:c4:e7:68:6e:6b:97:f1:22:60:2f:
         e3:fe:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org