Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/34352e3136382e3138322e302f32342d3234203d3e20323638303638.roa
File:                     34352e3136382e3138322e302f32342d3234203d3e20323638303638.roa (raw, json)
Hash identifier:          SNi9Mpzys72QNVrXUu04VcJ80anTOFq0IpNEGKEyvdw=
Subject key identifier:   21:AF:54:5D:70:39:BA:21:8C:87:E1:57:FA:4D:E6:87:51:5F:39:7D
Certificate issuer:       /CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
Certificate serial:       01C27DFAD7ACD6B8B7619A5EBD61721DD1BC3BFF
Authority key identifier: BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/34352e3136382e3138322e302f32342d3234203d3e20323638303638.roa
Signing time:             Mon 29 Jan 2024 11:44:29 +0000
ROA not before:           Mon 29 Jan 2024 11:39:29 +0000
ROA not after:            Mon 27 Jan 2025 11:44:29 +0000
asID:                     268068
IP address blocks:        45.168.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c2:7d:fa:d7:ac:d6:b8:b7:61:9a:5e:bd:61:72:1d:d1:bc:3b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAEE190B65B2228090D515B7CF62B6AEAC2F5270
        Validity
            Not Before: Jan 29 11:39:29 2024 GMT
            Not After : Jan 27 11:44:29 2025 GMT
        Subject: CN=21AF545D7039BA218C87E157FA4DE687515F397D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:90:d8:66:bb:13:fa:8b:db:65:87:9c:d6:82:
                    38:6a:ac:6c:e6:d7:46:a4:14:0b:c9:6b:ce:aa:7d:
                    2b:8b:08:e1:66:cf:fa:b5:f7:2b:45:32:8e:f9:58:
                    30:f9:ff:40:c7:a2:65:e0:a9:e6:ea:91:96:50:b6:
                    85:5d:7b:a9:bc:fe:13:f2:69:15:18:c7:77:8c:4e:
                    1a:ab:42:eb:a7:c1:0b:80:44:08:bf:1f:74:1d:04:
                    10:22:98:00:45:1c:75:a6:bd:f7:8b:40:b5:bf:e6:
                    77:fc:04:6a:da:bd:41:2e:ba:1f:83:9d:c9:51:72:
                    b7:de:a2:e4:f7:53:ec:a9:e3:f8:c6:98:01:65:b6:
                    5b:80:d8:04:fb:11:07:e6:cd:da:32:c7:97:ac:69:
                    16:49:c9:7e:72:04:56:5a:27:f5:3d:28:58:c0:91:
                    11:c6:c1:ad:8a:04:1e:e1:95:70:f4:a8:18:6d:48:
                    45:61:bf:38:b0:8b:b2:c1:ed:c0:a5:d7:96:64:d3:
                    35:5e:26:61:87:2d:36:bb:f6:b8:d1:5a:40:39:8e:
                    70:df:6f:70:5c:30:16:2f:72:0e:a6:9b:39:55:a9:
                    63:db:3a:07:45:db:aa:b8:25:91:03:01:9e:69:38:
                    39:6a:64:5f:a5:1d:b4:81:3c:21:55:d6:4b:af:93:
                    d2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AF:54:5D:70:39:BA:21:8C:87:E1:57:FA:4D:E6:87:51:5F:39:7D
            X509v3 Authority Key Identifier:
                keyid:BA:EE:19:0B:65:B2:22:80:90:D5:15:B7:CF:62:B6:AE:AC:2F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BAEE190B65B2228090D515B7CF62B6AEAC2F5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/0/34352e3136382e3138322e302f32342d3234203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:9a:49:91:90:9b:34:b6:0c:a1:6f:ca:ef:74:00:5f:eb:78:
         93:c0:0f:ca:66:a6:e5:16:21:36:6c:c1:d1:80:e4:63:c8:d2:
         9e:27:e4:52:5c:bf:cb:bc:6b:aa:bf:8b:8a:92:6f:d3:90:55:
         a3:d5:68:34:c1:74:ff:21:70:10:19:f1:3a:03:dc:b0:93:67:
         aa:03:7f:2e:b6:0b:fa:d3:4e:77:70:8b:1a:d1:b4:78:27:9d:
         a0:f4:02:91:31:fa:b0:4a:d9:17:1b:3a:da:fc:8e:09:69:75:
         17:11:40:ab:ad:6d:22:49:6a:eb:92:37:16:3a:d8:00:39:22:
         bb:b9:5d:9e:e4:05:e9:9a:fa:8f:a8:4e:6e:0a:5d:4f:41:6c:
         27:e0:1a:fb:5b:e9:6f:49:1e:85:27:be:84:54:6f:5b:1e:44:
         56:39:3f:7b:4f:b5:40:ba:e2:1c:a8:66:dd:a8:c0:d5:33:41:
         85:70:54:26:78:61:8e:49:cb:ee:db:83:64:d1:fc:88:6f:fa:
         a8:d9:07:9b:09:a0:80:8e:bc:3d:b7:02:84:71:a5:ea:38:92:
         ce:78:3d:2b:d5:ad:22:32:9d:fa:75:83:a1:0b:9c:e1:f3:b3:
         84:ff:85:3b:54:d4:56:9a:70:59:08:73:f8:41:c5:f8:33:49:
         1a:e5:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org