Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa
File:                     34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa (raw, json)
Hash identifier:          MrbszcKuK9OlrsevvlPb4Y4kgLFgUqGzYQqNblwOvnc=
Subject key identifier:   8E:AB:7D:25:A8:28:E6:92:E9:7E:67:D5:23:AB:AC:0B:40:53:C3:E3
Certificate issuer:       /CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
Certificate serial:       49AF723B06A3CCB5E86CCCFDCB990F775EDA9821
Authority key identifier: 5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa
Signing time:             Tue 26 Mar 2024 13:32:23 +0000
ROA not before:           Tue 26 Mar 2024 13:27:23 +0000
ROA not after:            Tue 25 Mar 2025 13:32:23 +0000
asID:                     268707
IP address blocks:        45.169.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:af:72:3b:06:a3:cc:b5:e8:6c:cc:fd:cb:99:0f:77:5e:da:98:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643
        Validity
            Not Before: Mar 26 13:27:23 2024 GMT
            Not After : Mar 25 13:32:23 2025 GMT
        Subject: CN=8EAB7D25A828E692E97E67D523ABAC0B4053C3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:4a:ce:f2:a5:92:1b:4f:26:c9:f9:d5:d1:
                    86:59:11:73:87:1c:6e:3f:08:01:cb:c4:d7:ef:97:
                    af:54:86:78:77:33:2b:5e:3b:39:91:ec:2a:12:ed:
                    2c:cc:b1:13:04:ad:b9:a7:42:d6:38:a9:6a:2f:99:
                    b3:59:5e:57:58:7a:66:10:02:28:0f:6f:cf:34:38:
                    05:74:48:e7:ac:c0:b7:e4:d2:d4:ae:72:b3:1f:b2:
                    09:db:ea:48:ae:66:59:a6:af:61:b2:7f:21:d7:d1:
                    32:83:6e:b8:49:a9:3c:28:44:ff:6e:67:82:2e:2f:
                    95:d0:25:46:80:38:94:e9:1d:ab:22:e5:7f:d0:a0:
                    0d:63:97:62:27:98:52:5c:fd:ce:c0:e0:6f:ad:ca:
                    dc:82:40:ca:12:03:60:45:50:f3:cb:ed:0b:ab:8a:
                    51:f5:ca:ef:ec:62:70:c1:52:d5:11:04:68:51:6e:
                    47:e1:93:e8:aa:e5:99:50:38:97:19:7a:03:b0:f7:
                    7e:11:d9:11:25:a2:5f:79:7b:0f:d7:85:9b:f3:e4:
                    18:5f:ba:f7:fb:cb:d8:f1:32:88:ee:eb:e3:5f:bd:
                    5c:c4:27:a5:fb:79:a3:0f:7f:2f:9c:0a:18:72:5b:
                    c4:0e:e6:92:ec:8f:48:ae:2f:6c:fb:6a:b5:3d:42:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AB:7D:25:A8:28:E6:92:E9:7E:67:D5:23:AB:AC:0B:40:53:C3:E3
            X509v3 Authority Key Identifier:
                keyid:5A:73:0F:C4:BC:5C:1A:A7:CB:52:A2:19:F8:7B:D1:E3:C6:ED:76:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A730FC4BC5C1AA7CB52A219F87BD1E3C6ED7643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:7b:12:5a:a3:08:90:51:48:a0:0b:67:ff:fa:7e:64:af:a0:
         24:db:d1:02:e5:7f:f8:02:ab:82:47:13:fe:dc:da:b0:57:13:
         cd:31:c5:84:07:68:56:e1:67:7b:8f:60:56:d2:ea:9e:44:6b:
         ba:ec:91:d8:53:35:ff:60:1c:cd:98:c1:9c:14:da:d1:b9:45:
         e5:fe:6c:32:56:cc:8e:e5:97:7f:74:9a:82:5e:98:82:70:42:
         49:6f:39:82:55:71:01:86:46:80:62:33:c9:21:5e:1f:2c:93:
         c2:33:82:01:1e:db:2b:a6:7b:5f:46:39:b8:53:07:e8:52:05:
         0e:db:54:31:9c:b0:1f:91:3a:a7:e2:7f:a1:68:56:e3:9c:c8:
         e5:a9:d1:74:b8:d4:c0:b9:9f:95:af:fd:ae:e0:d0:cd:62:03:
         ca:78:20:bf:95:df:60:f4:10:90:3c:e8:9b:6d:96:fc:c6:a1:
         de:a2:08:9b:04:62:72:dd:0b:be:c3:cc:9a:e7:a6:ea:1b:81:
         10:1d:80:61:5c:4b:e3:31:4c:e9:8a:69:24:ed:d5:72:6d:8a:
         8f:5d:8e:46:d8:bb:e2:37:97:ea:39:7e:4d:5d:02:be:ba:5a:
         23:9d:71:a1:50:64:0d:27:8b:17:24:63:8e:52:f2:d5:1c:0f:
         d9:e0:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org