Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/34352e3138342e3138352e302f32342d3234203d3e20323639333338.roa
File:                     34352e3138342e3138352e302f32342d3234203d3e20323639333338.roa (raw, json)
Hash identifier:          q1OEpnm1EBhykAIFt3gUlluYfv5ZKd1HoOuxYHtbA2Q=
Subject key identifier:   37:6F:31:20:40:FE:75:40:A6:91:B7:C9:EA:D8:2F:77:9D:2C:35:0D
Certificate issuer:       /CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
Certificate serial:       7D5E513996A7DAB2031BCF965FBEFA05EF8656D7
Authority key identifier: 28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/34352e3138342e3138352e302f32342d3234203d3e20323639333338.roa
Signing time:             Sat 13 Apr 2024 16:16:11 +0000
ROA not before:           Sat 13 Apr 2024 16:11:11 +0000
ROA not after:            Sat 12 Apr 2025 16:16:11 +0000
asID:                     269338
IP address blocks:        45.184.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5e:51:39:96:a7:da:b2:03:1b:cf:96:5f:be:fa:05:ef:86:56:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28EE46D4F099B24B9DA8C80842FED277ABB924AE
        Validity
            Not Before: Apr 13 16:11:11 2024 GMT
            Not After : Apr 12 16:16:11 2025 GMT
        Subject: CN=376F312040FE7540A691B7C9EAD82F779D2C350D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:f7:6b:06:46:ab:9f:0f:dc:dd:24:6d:67:
                    46:fe:47:52:d8:a0:64:81:c4:ab:11:4a:71:8c:1d:
                    3a:36:3b:e1:b6:cc:21:18:22:ae:65:d3:05:b8:02:
                    d2:3c:af:33:d8:5b:03:28:a8:46:d3:0c:b0:35:1a:
                    5c:96:b7:5e:2e:6c:02:ff:73:8e:d1:c4:2d:de:0f:
                    b4:b6:b2:5f:33:bf:af:05:e1:42:24:eb:61:92:c7:
                    79:2f:c1:14:6f:3e:2c:cb:c7:4a:eb:d4:9e:ab:0f:
                    e3:ce:47:92:46:c9:db:59:99:2c:7f:34:9f:b4:13:
                    70:92:7c:76:58:e5:40:81:35:6c:1a:96:10:c2:17:
                    62:58:f7:fa:11:21:b0:45:3f:e2:0b:ec:9a:e7:84:
                    38:b2:b2:9e:7d:bc:e4:ba:b9:91:e0:33:72:c9:c9:
                    56:4b:6e:2f:40:fe:f5:8e:20:6d:02:da:09:c6:ef:
                    7f:03:c2:b4:cb:40:81:28:46:ee:f9:c3:0d:5f:1b:
                    22:58:19:03:eb:9c:03:eb:13:2e:b8:ef:13:27:d5:
                    ab:39:74:7b:67:d8:a5:a9:82:9c:bc:ed:61:3d:5f:
                    b3:7c:5e:77:1c:02:4b:ae:94:ad:cf:15:98:aa:07:
                    36:1f:80:93:fd:25:21:15:07:e9:cd:72:d1:6e:45:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6F:31:20:40:FE:75:40:A6:91:B7:C9:EA:D8:2F:77:9D:2C:35:0D
            X509v3 Authority Key Identifier:
                keyid:28:EE:46:D4:F0:99:B2:4B:9D:A8:C8:08:42:FE:D2:77:AB:B9:24:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/28EE46D4F099B24B9DA8C80842FED277ABB924AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28EE46D4F099B24B9DA8C80842FED277ABB924AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJFwaheVHq6Bhyma5Jb5sHMMEQFpasLVh4WVjWp2mQB2/1/34352e3138342e3138352e302f32342d3234203d3e20323639333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:79:d8:41:34:2d:0c:57:ce:db:b0:a2:20:5a:e8:93:3c:98:
         81:c6:9b:eb:4f:ca:fb:71:0d:31:8a:60:75:26:0a:68:c7:a0:
         c0:63:d9:a0:aa:ff:72:85:b8:bb:df:14:e7:2c:58:a5:61:2e:
         fe:5a:8f:67:16:4a:a6:e0:11:65:b0:de:bc:de:10:da:56:b8:
         92:d7:be:6d:32:8a:b6:f2:d7:34:24:ea:84:59:f5:de:61:ed:
         5a:95:d0:e8:cb:aa:df:a9:43:29:aa:ec:99:db:c8:46:38:34:
         28:b4:88:a5:db:9f:5f:32:74:52:f7:55:5f:0a:85:62:45:0d:
         95:32:f2:43:bd:9d:ea:d0:81:67:7b:a6:0d:e9:42:a7:48:9c:
         87:df:0a:9d:03:5e:da:05:a0:65:fc:fa:18:e0:15:62:08:58:
         aa:63:6d:e1:74:d9:a8:21:cc:2d:d8:b6:52:dc:8c:68:86:f5:
         bc:41:b9:e9:80:d3:cb:6e:d7:ad:c2:13:06:3a:48:a7:a5:61:
         11:bb:e2:94:f6:d3:bb:8d:0a:bd:e5:8d:f9:46:a4:09:59:74:
         04:0c:90:47:54:47:33:6d:3f:b7:d4:94:dc:51:89:cd:3d:79:
         df:7d:48:f4:5d:a8:d6:a9:e5:b4:03:69:4f:42:f7:e0:1a:78:
         44:5d:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org