Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31322e302f32342d3234203d3e20323638373739.roa
File:                     34352e3137322e31322e302f32342d3234203d3e20323638373739.roa (raw, json)
Hash identifier:          20PcFOYg899l4MN8G73AXI7D8acYU1qDlJRGW/+gxzw=
Subject key identifier:   1F:ED:37:E4:E9:1D:EF:23:45:1C:42:DF:1D:C4:8B:42:74:9C:73:CF
Certificate issuer:       /CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
Certificate serial:       59A124D746D35780CB03EF202F71D226CA2F0FBC
Authority key identifier: AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31322e302f32342d3234203d3e20323638373739.roa
Signing time:             Tue 02 Jan 2024 14:13:54 +0000
ROA not before:           Tue 02 Jan 2024 14:08:54 +0000
ROA not after:            Tue 31 Dec 2024 14:13:54 +0000
asID:                     268779
IP address blocks:        45.172.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a1:24:d7:46:d3:57:80:cb:03:ef:20:2f:71:d2:26:ca:2f:0f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
        Validity
            Not Before: Jan  2 14:08:54 2024 GMT
            Not After : Dec 31 14:13:54 2024 GMT
        Subject: CN=1FED37E4E91DEF23451C42DF1DC48B42749C73CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:11:9c:a8:68:9b:36:ae:fd:7d:b1:98:76:
                    5d:63:7c:9d:8c:e2:8a:4d:98:e1:ca:e0:91:f0:3d:
                    21:24:97:30:25:d4:cc:47:cf:bc:b6:ce:11:0f:86:
                    5a:c2:7e:0f:d0:a1:29:b2:59:16:e3:57:28:3d:4a:
                    71:31:c6:b5:3e:15:d4:40:75:0f:68:42:61:08:5d:
                    c5:32:8a:ec:28:c0:df:cb:c8:a9:ac:51:c1:48:b2:
                    1a:16:04:04:36:e5:fc:5e:19:f5:18:2a:36:7b:96:
                    7a:5b:bd:33:06:df:28:65:d3:8c:5d:e0:b3:4c:da:
                    39:fe:9c:4d:f0:aa:18:89:64:46:60:74:30:4c:89:
                    7b:49:36:f6:9b:d2:f8:f9:ad:16:76:aa:77:98:38:
                    05:22:6d:3f:e3:b5:b6:c4:f9:f0:f5:33:a4:0f:d5:
                    54:0b:d1:9c:e9:cd:03:fb:08:10:3d:76:05:ec:58:
                    3f:d5:a7:e5:29:75:f3:40:04:66:6b:25:55:33:e4:
                    31:8a:3c:57:23:c4:ce:c9:0f:c7:ea:3a:40:24:15:
                    9e:8c:8b:17:d6:66:4e:2f:e3:11:2f:63:16:cf:ec:
                    32:92:70:85:77:78:0b:94:49:81:74:2c:62:be:61:
                    ca:af:e4:79:fe:d7:e1:68:56:e7:42:f6:5a:99:2e:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:ED:37:E4:E9:1D:EF:23:45:1C:42:DF:1D:C4:8B:42:74:9C:73:CF
            X509v3 Authority Key Identifier:
                keyid:AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31322e302f32342d3234203d3e20323638373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:e5:98:38:6c:36:c5:41:f6:b1:fa:9b:0c:07:cf:2b:d5:
         d3:75:86:2a:19:3e:c0:ad:a4:95:9c:67:32:be:b1:4f:a5:ba:
         4a:4d:eb:e6:db:52:15:0a:b4:c7:63:41:1a:eb:a2:da:a4:85:
         ee:5e:fb:6b:63:31:c4:7a:54:67:10:50:7d:01:91:7c:70:18:
         b0:95:59:52:da:70:03:ad:9f:9e:0a:59:09:bc:3e:73:b0:18:
         09:68:94:e4:8e:bc:e9:f0:56:1d:3c:28:5b:61:5a:e8:05:b0:
         92:fa:3d:ae:b7:69:72:0f:db:74:7b:c5:7f:cc:a9:d3:49:77:
         2e:dd:96:d7:b0:f1:90:73:fb:1d:35:23:0d:7d:15:7c:64:ad:
         05:b0:ec:f9:cc:43:ce:50:60:cc:85:0c:9b:b4:09:a9:c6:bb:
         d8:51:4e:ee:ee:d6:cb:ec:37:95:ca:81:9b:ac:68:a5:60:69:
         e3:f6:3a:bd:d8:36:22:fa:79:1a:f4:1e:e7:12:e3:d8:10:1e:
         73:ec:e4:3b:cf:7d:ff:58:02:ca:19:bd:15:fc:94:9b:ad:09:
         4b:26:36:56:67:10:00:a3:d3:dc:d1:39:80:4e:c5:8d:8e:40:
         42:31:ae:49:9a:69:9a:c7:45:d2:2b:c5:f4:3c:ac:02:32:0b:
         75:ff:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org