Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/34352e3137392e32342e302f32322d3234203d3e20323639303633.roa
File:                     34352e3137392e32342e302f32322d3234203d3e20323639303633.roa (raw, json)
Hash identifier:          K6vC20JFk1lkiS1RWjoH1jWPgd2dQ7L3Gg5NjIFnszw=
Subject key identifier:   54:3A:28:05:3D:71:87:6C:46:BE:B6:55:3A:76:9A:3E:3A:08:7B:13
Certificate issuer:       /CN=21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB
Certificate serial:       4AE941A2B35BD8C5ACF1504B5DB7BC2BDED47AFC
Authority key identifier: 21:D6:2F:8E:04:AF:4A:1D:2B:AC:A5:BE:93:64:FD:4C:F0:2D:D2:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/34352e3137392e32342e302f32322d3234203d3e20323639303633.roa
Signing time:             Fri 17 Nov 2023 18:14:59 +0000
ROA not before:           Fri 17 Nov 2023 18:09:59 +0000
ROA not after:            Fri 15 Nov 2024 18:14:59 +0000
asID:                     269063
IP address blocks:        45.179.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:41:a2:b3:5b:d8:c5:ac:f1:50:4b:5d:b7:bc:2b:de:d4:7a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB
        Validity
            Not Before: Nov 17 18:09:59 2023 GMT
            Not After : Nov 15 18:14:59 2024 GMT
        Subject: CN=543A28053D71876C46BEB6553A769A3E3A087B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:d8:50:6f:25:ba:e2:1f:f8:b8:dd:16:bb:
                    d9:85:f0:63:87:32:92:94:8d:c4:88:11:e7:dc:16:
                    2b:31:13:82:f8:23:73:42:5e:37:75:1b:c2:12:d3:
                    d4:97:3c:33:d2:ce:53:17:4c:ee:bd:69:ce:4f:61:
                    db:2b:d4:ec:45:97:6f:c9:42:7e:ee:80:ce:76:97:
                    f4:51:6b:b1:89:76:8f:78:6e:b8:4e:b8:9f:7e:b0:
                    7a:7f:2a:6b:ec:a5:a3:44:ae:19:e2:e7:92:31:8d:
                    f5:b8:31:ce:2b:f4:1e:e2:85:aa:63:07:22:71:d4:
                    10:ea:3a:ec:ff:e8:fc:dd:5c:b1:92:b3:6f:18:eb:
                    ac:89:a6:70:89:9b:b1:25:21:bb:8e:4c:02:64:e5:
                    3a:82:06:d9:4b:fa:7f:c5:5f:a8:a8:96:9f:fb:1a:
                    38:df:9b:ad:15:3b:a4:5d:0f:fd:6b:d4:9c:e6:56:
                    e6:ee:f7:6d:a5:06:5b:e5:a2:fc:e8:f6:fc:21:6b:
                    b7:a9:ba:46:0a:10:60:e6:9a:e7:c2:12:51:ad:08:
                    91:26:9c:ba:1d:cd:37:5b:a6:ab:11:b5:e3:36:0a:
                    14:81:2c:cf:1d:2a:32:8c:6e:62:67:cd:6e:cd:86:
                    ef:6d:4f:22:55:7f:ae:ed:09:3a:19:69:00:48:dc:
                    22:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3A:28:05:3D:71:87:6C:46:BE:B6:55:3A:76:9A:3E:3A:08:7B:13
            X509v3 Authority Key Identifier:
                keyid:21:D6:2F:8E:04:AF:4A:1D:2B:AC:A5:BE:93:64:FD:4C:F0:2D:D2:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21D62F8E04AF4A1D2BACA5BE9364FD4CF02DD2DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSHUMKGNPXjh2kGh9qGKJZ541KUUsZMVoyc56NAZvNSh/0/34352e3137392e32342e302f32322d3234203d3e20323639303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:53:bb:0b:ba:c6:3b:8d:9c:7f:f2:ba:11:c8:91:bb:98:88:
         fa:94:7a:1a:4d:42:dd:f8:fe:a2:bb:0e:23:e3:23:4c:f6:52:
         50:80:fd:b4:45:bb:c9:53:48:c7:e0:b6:21:d1:33:ec:f3:07:
         04:00:b6:51:17:00:83:00:3d:5d:f2:52:a5:e3:e3:64:4f:65:
         99:02:7b:57:7d:8b:11:60:48:6e:95:a7:89:c0:64:ba:62:a3:
         7c:0e:77:26:a5:91:c2:27:c3:35:b3:62:9c:77:a3:fc:57:09:
         7f:f1:22:47:0f:3e:a3:3b:40:ca:79:d2:60:cc:4a:fe:ed:7e:
         11:b5:bc:29:2f:0c:90:50:57:a9:e5:e5:64:6c:ee:98:15:23:
         f6:37:ee:ee:0c:98:ef:ac:a1:f4:43:ea:8a:23:63:03:33:dc:
         6d:3c:75:ae:c0:49:9e:b1:3b:6f:8c:fd:14:86:e4:c7:70:61:
         e4:c2:ef:c8:05:e1:e4:60:4e:2b:56:27:8b:c4:c7:32:4c:51:
         b9:ad:f3:1d:7e:05:19:34:1b:43:32:79:63:53:96:97:3a:18:
         54:c6:60:0c:6c:c0:82:16:cf:26:fe:b3:3e:90:8e:36:e7:00:
         40:84:b3:a0:a4:25:34:a7:ca:02:55:78:2e:a0:17:64:6a:41:
         56:65:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org