Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa
File:                     34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa (raw, json)
Hash identifier:          mW+oi6JhNFtLfSWoBo/dq3ondxl7Qsw9fQmGHQiX6XU=
Subject key identifier:   02:1D:DA:06:AF:F8:47:90:49:00:1F:D8:E1:B6:1C:55:D7:FB:AC:DA
Certificate issuer:       /CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
Certificate serial:       33AACC2B668F211B7281DE203EFBDDF44B4974F1
Authority key identifier: CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa
Signing time:             Thu 04 Apr 2024 00:32:44 +0000
ROA not before:           Thu 04 Apr 2024 00:27:44 +0000
ROA not after:            Thu 03 Apr 2025 00:32:44 +0000
asID:                     268707
IP address blocks:        45.169.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:aa:cc:2b:66:8f:21:1b:72:81:de:20:3e:fb:dd:f4:4b:49:74:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
        Validity
            Not Before: Apr  4 00:27:44 2024 GMT
            Not After : Apr  3 00:32:44 2025 GMT
        Subject: CN=021DDA06AFF8479049001FD8E1B61C55D7FBACDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:55:e5:f3:ff:c2:eb:b0:11:26:c9:73:65:
                    20:1d:ff:bc:84:0c:11:7a:f2:b6:13:f8:e3:40:05:
                    42:e2:bf:d1:73:96:06:24:73:1e:26:6a:e8:59:f7:
                    92:11:5f:b8:0c:d9:fd:27:0e:d3:60:ae:0f:5d:fd:
                    1a:2a:37:54:d6:b3:59:cd:57:1c:14:79:97:3d:e9:
                    0e:07:8b:f2:08:af:6f:2f:04:3f:76:62:15:40:a9:
                    62:83:94:ff:11:92:ee:b4:0c:fb:21:09:2c:b1:05:
                    8d:a7:44:95:bb:78:50:24:d2:c8:98:6e:fd:6c:17:
                    01:3d:7c:88:64:dd:46:43:4d:79:61:5e:fa:f3:06:
                    b6:5b:84:93:ee:2f:3d:f6:60:3c:75:70:7a:97:d2:
                    ab:5a:ed:18:e3:b9:c1:69:5c:25:57:67:06:b1:f1:
                    20:88:d5:72:7f:eb:ac:b2:64:cb:d7:36:bb:cb:f1:
                    13:0d:2e:ce:94:55:09:15:b8:b7:9c:62:a9:8f:eb:
                    92:97:7d:cc:1a:58:aa:78:de:66:5b:de:05:a1:20:
                    80:ce:b8:53:c5:e3:a2:c0:32:12:d6:87:77:f1:54:
                    c4:8a:56:7f:5d:2b:c1:3f:6e:20:fa:7f:27:00:2d:
                    a0:a6:fc:61:a7:2d:b3:56:f5:bc:e2:ab:69:86:04:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:DA:06:AF:F8:47:90:49:00:1F:D8:E1:B6:1C:55:D7:FB:AC:DA
            X509v3 Authority Key Identifier:
                keyid:CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:73:00:bc:43:c3:e0:5e:37:2f:1b:8b:a4:a0:29:a5:77:cf:
         d4:ac:95:4b:cb:4d:7e:63:3e:a7:ac:2e:ae:07:d7:3e:dd:de:
         9c:98:b5:c5:a5:0d:05:28:77:04:23:ad:44:72:c0:d1:01:c3:
         a2:44:ae:da:0b:71:e7:4a:4e:80:be:3b:f4:68:23:62:4f:85:
         1d:43:a3:1f:4d:35:a3:8c:47:bc:fb:df:73:eb:5c:9e:08:6b:
         e0:3c:fd:f8:70:ed:8b:ee:7f:50:93:46:86:f4:d6:4a:1c:e4:
         9f:9e:b8:53:38:59:8f:09:1a:79:bf:aa:79:b4:a0:8e:41:7e:
         19:39:27:50:36:91:1e:a3:7e:fb:38:92:9b:a3:98:33:14:11:
         4e:ac:2d:28:df:95:05:87:1f:93:6f:59:1b:a3:1d:2e:9a:80:
         90:94:40:2a:05:ed:ae:a2:20:24:22:68:79:63:a2:bc:d8:c4:
         ba:f7:31:ed:2b:98:0b:cc:d4:4e:8a:e6:db:41:ab:68:6b:be:
         72:11:63:30:15:7d:be:69:a1:8c:4d:4b:a6:01:1d:5d:9a:c9:
         0e:be:f6:6f:a4:e4:9f:85:b2:21:19:87:da:7f:24:66:e6:f5:
         13:f8:30:57:36:39:e2:07:ee:f0:fe:09:af:36:97:58:3b:e9:
         7f:bc:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org