Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa
File:                     34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa (raw, json)
Hash identifier:          08N8QMlBO29mVqp147xgAT+EYzzOeXvHaM7CDqVkah8=
Subject key identifier:   62:51:B2:48:DF:77:42:B9:3B:DC:8F:BD:40:C7:F6:A6:1B:4A:35:96
Certificate issuer:       /CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
Certificate serial:       3FE6690B773A699742055A166F9F7A0038AC4DE6
Authority key identifier: CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa
Signing time:             Thu 04 Apr 2024 00:32:44 +0000
ROA not before:           Thu 04 Apr 2024 00:27:44 +0000
ROA not after:            Thu 03 Apr 2025 00:32:44 +0000
asID:                     268707
IP address blocks:        45.169.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e6:69:0b:77:3a:69:97:42:05:5a:16:6f:9f:7a:00:38:ac:4d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
        Validity
            Not Before: Apr  4 00:27:44 2024 GMT
            Not After : Apr  3 00:32:44 2025 GMT
        Subject: CN=6251B248DF7742B93BDC8FBD40C7F6A61B4A3596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:5f:e7:0c:4c:25:e9:54:d2:38:7c:64:fc:
                    7e:6c:8e:80:c3:81:36:fa:4a:8a:fe:b4:44:29:6a:
                    a4:c4:1d:d6:9e:0b:04:0d:dd:26:b6:d4:40:15:a7:
                    f6:be:0b:1c:5f:95:1e:c4:87:44:0a:d5:ae:3e:06:
                    82:4a:e8:47:5b:2b:f1:98:9a:91:3c:90:1e:43:54:
                    3c:bf:80:df:f4:1d:b5:7c:b7:3b:d7:0a:f8:ba:52:
                    33:61:16:45:eb:77:97:bc:37:06:9b:3d:92:b7:49:
                    06:05:da:a2:4a:09:b3:f1:6f:de:42:a4:c0:20:96:
                    b1:eb:5d:73:19:b6:23:ad:bc:65:70:ba:9a:e1:1a:
                    81:24:fa:fe:93:b8:d6:eb:2d:bf:92:e5:41:fe:72:
                    92:b5:18:bc:e1:f2:22:96:70:ac:8d:03:70:a7:a0:
                    65:c9:49:1b:ef:07:a6:4b:e3:65:58:99:39:50:ec:
                    04:73:f3:5d:2d:01:cf:0a:8d:87:85:fd:69:e0:a7:
                    62:70:fe:60:f7:50:b1:3d:89:72:60:11:7c:ee:a9:
                    09:14:fe:5c:4a:da:ef:80:72:ca:f6:02:b7:8d:5e:
                    10:6d:76:73:7d:eb:f6:d5:63:98:37:28:1a:22:03:
                    ad:42:a9:7c:40:f7:ac:87:2b:7e:b8:23:3f:d7:36:
                    9a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:51:B2:48:DF:77:42:B9:3B:DC:8F:BD:40:C7:F6:A6:1B:4A:35:96
            X509v3 Authority Key Identifier:
                keyid:CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:42:fb:4e:30:2a:ec:4c:24:9a:1f:1e:41:f6:58:b8:99:
         01:2c:50:a5:64:e0:88:13:ab:9e:66:58:93:8c:ce:0a:5c:72:
         73:76:76:cd:f3:c4:3c:1f:8e:49:ff:8c:96:f4:b2:81:ce:aa:
         8a:36:07:f0:93:c4:00:5c:9b:79:69:97:a3:3d:7b:1e:7c:77:
         b9:2c:04:ab:58:4f:20:b4:7d:10:4c:d2:2a:0e:93:80:94:2d:
         2a:c4:bd:c2:2d:22:a7:5a:3f:10:5c:26:08:c4:4a:3a:d8:91:
         33:91:68:e7:78:4c:f1:62:29:37:1c:04:9d:24:68:ca:8c:bf:
         a1:cf:ba:a0:ed:83:4c:6c:ad:3a:6a:5b:20:47:30:22:63:7b:
         72:dc:42:dd:09:03:48:f9:1a:fe:2d:75:de:5b:f0:9a:91:0f:
         ad:fe:84:c6:43:6d:d2:8c:2c:9b:5e:c0:5b:37:39:df:c2:82:
         82:c1:99:b5:71:65:e0:83:29:54:91:99:cc:73:d1:4d:e7:66:
         93:ed:42:89:ee:e7:d5:43:5b:f3:1d:6b:c1:01:d0:d2:af:af:
         84:00:02:da:a3:f2:82:0e:e9:09:ac:ae:81:c3:b4:9b:61:08:
         e7:e6:c5:88:54:1e:73:2f:44:21:64:8a:1b:29:29:f4:de:a0:
         c4:f3:d9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org