Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/34352e3137382e3234382e302f32322d3232203d3e20323639303531.roa
File:                     34352e3137382e3234382e302f32322d3232203d3e20323639303531.roa (raw, json)
Hash identifier:          RWXgYFbRHNrAQa+lJmgh1DqGt5Ijtwd4kB3Z5TCyukk=
Subject key identifier:   FD:6E:CB:35:FC:1A:89:B4:61:BA:84:5D:85:25:C8:6F:53:F1:E5:6C
Certificate issuer:       /CN=4179F18E400A87D55EB4188FF8AF6E8152E58E77
Certificate serial:       1C0B401DA36A4ECF1B1AE8BCF61E07E1F6E748FC
Authority key identifier: 41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/34352e3137382e3234382e302f32322d3232203d3e20323639303531.roa
Signing time:             Sat 02 Mar 2024 08:29:40 +0000
ROA not before:           Sat 02 Mar 2024 08:24:40 +0000
ROA not after:            Sat 01 Mar 2025 08:29:40 +0000
asID:                     269051
IP address blocks:        45.178.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0b:40:1d:a3:6a:4e:cf:1b:1a:e8:bc:f6:1e:07:e1:f6:e7:48:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4179F18E400A87D55EB4188FF8AF6E8152E58E77
        Validity
            Not Before: Mar  2 08:24:40 2024 GMT
            Not After : Mar  1 08:29:40 2025 GMT
        Subject: CN=FD6ECB35FC1A89B461BA845D8525C86F53F1E56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:de:e6:9d:63:1b:eb:3e:6e:3f:7e:2b:f4:
                    32:09:04:c0:d9:05:6f:0a:67:2a:fb:85:78:07:6e:
                    bc:e6:a5:e7:12:16:43:a9:7d:6e:1f:6a:29:74:b2:
                    f0:9c:80:1a:69:ef:5b:59:c8:b4:d3:27:ec:9a:18:
                    2d:23:6a:e3:e3:b4:ba:73:ad:6b:cd:44:e5:1c:b2:
                    b2:41:92:2c:88:67:ba:f4:6c:05:5c:f2:e4:4d:75:
                    04:dc:c3:9f:60:3d:63:a9:b5:14:6b:76:ea:a5:f0:
                    ff:49:a9:a0:1a:ae:bb:f1:0e:81:67:92:dc:ce:ae:
                    0d:71:0c:67:70:99:b9:3e:e6:bf:0c:76:52:8c:89:
                    6c:12:42:ff:d7:32:9e:70:c8:6c:e3:66:fb:ef:d8:
                    28:39:3e:ec:a5:7e:e6:11:d6:4e:83:d8:e4:f7:dd:
                    b2:04:6a:91:8b:34:b2:1c:a6:36:f2:12:81:7e:da:
                    2c:eb:0f:e6:cf:6c:a4:1e:ff:d0:14:6f:6c:c7:54:
                    ed:69:28:1e:90:1f:71:72:37:5e:aa:bc:92:4c:be:
                    50:7c:06:ac:14:b6:4e:8d:25:3d:bf:6b:ea:87:66:
                    2f:5e:f6:4b:c2:49:a8:5e:0a:be:5f:ec:2d:1d:52:
                    7b:51:8d:e2:94:fe:a1:2e:78:3e:05:6c:85:4e:76:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6E:CB:35:FC:1A:89:B4:61:BA:84:5D:85:25:C8:6F:53:F1:E5:6C
            X509v3 Authority Key Identifier:
                keyid:41:79:F1:8E:40:0A:87:D5:5E:B4:18:8F:F8:AF:6E:81:52:E5:8E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4179F18E400A87D55EB4188FF8AF6E8152E58E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/34352e3137382e3234382e302f32322d3232203d3e20323639303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:a4:d1:c0:4c:7c:03:2b:c5:ab:43:07:79:4e:0d:12:ce:a5:
         e3:ba:fb:f0:25:24:b9:80:59:d8:cb:35:49:1f:9d:8a:48:33:
         18:f0:d0:9e:e9:35:af:e5:91:47:c0:1c:4b:70:ae:96:b2:85:
         8b:b7:44:c2:4d:6c:2c:37:31:1c:83:71:de:d8:33:de:1e:67:
         c1:cc:cd:8e:1b:1b:c9:be:48:06:2c:bd:66:25:7d:2e:e3:83:
         fd:47:bb:5d:9e:7e:e8:8f:15:d6:80:26:61:37:7d:2e:d8:12:
         5d:25:59:e4:fa:80:41:0f:a8:8e:b5:89:a2:ff:9e:d1:64:07:
         b3:6c:1a:d1:11:8e:d3:3e:58:6b:24:60:1d:54:94:84:1c:13:
         74:52:ed:d5:c1:cd:80:1f:e5:58:dc:03:90:6a:a7:31:8d:a9:
         db:7a:4e:d4:3f:c2:d0:2f:0c:77:1a:55:a6:de:76:60:18:a0:
         18:40:07:f7:13:20:f9:af:d9:7e:5c:bc:39:32:9b:c7:f0:ac:
         c6:74:29:d2:bb:1c:e1:9f:70:51:1c:9e:cf:3c:82:76:33:3d:
         aa:98:ec:a6:a0:83:f8:55:1f:df:62:6e:d9:e5:fa:cc:3c:41:
         a7:ab:a5:bf:3b:2e:21:d4:8d:a2:38:fd:1e:4c:0b:8e:52:06:
         33:b9:5f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org