Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33352e302f32342d3234203d3e20323639343235.roa
File:                     34352e3138362e33352e302f32342d3234203d3e20323639343235.roa (raw, json)
Hash identifier:          BE0cjm0ZNbDKGLjSbcafzzZPs6GQHPeS8/+TAbJuIYQ=
Subject key identifier:   7E:B6:42:EE:D8:90:CC:7C:01:89:85:95:23:78:91:04:76:01:AD:1B
Certificate issuer:       /CN=A52F416E7DE17981FB7334B51C91FD583746E12E
Certificate serial:       7DDB5E0F143C1F66E65366924C70F700F8A5C0D4
Authority key identifier: A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33352e302f32342d3234203d3e20323639343235.roa
Signing time:             Mon 19 Feb 2024 15:48:28 +0000
ROA not before:           Mon 19 Feb 2024 15:43:28 +0000
ROA not after:            Mon 17 Feb 2025 15:48:28 +0000
asID:                     269425
IP address blocks:        45.186.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:db:5e:0f:14:3c:1f:66:e6:53:66:92:4c:70:f7:00:f8:a5:c0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A52F416E7DE17981FB7334B51C91FD583746E12E
        Validity
            Not Before: Feb 19 15:43:28 2024 GMT
            Not After : Feb 17 15:48:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:d8:74:10:cc:ce:45:9a:38:cf:4e:b5:2f:
                    ec:fd:39:99:15:76:d5:31:ca:46:6e:74:76:dd:4b:
                    34:b1:2a:de:be:aa:bd:5f:1d:1f:1e:cd:17:89:5a:
                    bf:17:98:9f:47:ac:41:0a:ae:72:f9:48:fa:c3:aa:
                    d1:4a:8d:80:b2:a6:22:28:e2:86:55:30:97:09:4d:
                    15:3f:c9:bd:c5:e4:21:aa:5b:d8:a5:e5:01:b5:df:
                    4a:8e:45:fe:eb:0a:a3:bf:82:48:07:a4:dc:81:0d:
                    09:5a:13:c6:49:31:27:ef:ae:86:b7:83:e3:d3:d2:
                    8c:c1:eb:e0:39:f6:f3:50:9b:8f:47:4c:a1:b2:f7:
                    9e:9c:e1:a2:65:68:dc:f2:27:8d:b0:b2:82:75:17:
                    94:f7:03:83:c7:38:f6:2f:b4:32:1c:52:ee:a8:ee:
                    35:99:62:a2:b4:9f:2e:0f:03:7d:e3:28:bf:05:58:
                    c0:9c:e7:d3:14:dd:0c:e9:2b:51:b6:50:c1:84:25:
                    91:d4:11:01:3d:a7:42:9c:34:71:e8:14:ee:69:e6:
                    f4:fd:72:d6:f2:a5:23:13:3b:30:23:ae:20:b9:3d:
                    b9:87:46:9a:c0:66:1e:e1:f3:0a:3b:e1:d0:21:16:
                    9a:7c:b1:70:d3:0b:a2:f4:3c:20:35:30:df:b3:fd:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B6:42:EE:D8:90:CC:7C:01:89:85:95:23:78:91:04:76:01:AD:1B
            X509v3 Authority Key Identifier:
                keyid:A5:2F:41:6E:7D:E1:79:81:FB:73:34:B5:1C:91:FD:58:37:46:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/A52F416E7DE17981FB7334B51C91FD583746E12E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A52F416E7DE17981FB7334B51C91FD583746E12E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33352e302f32342d3234203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:d5:c7:26:b6:44:bc:50:37:e7:ae:6f:c9:0b:1a:29:3c:
         c9:22:d9:30:00:16:d5:35:cf:f5:30:04:0e:36:08:0a:26:f1:
         55:0c:a2:fd:01:7b:14:3e:54:cd:d0:76:43:bd:d8:5e:f2:ff:
         e5:61:4e:73:a4:77:53:b1:b0:1d:82:c1:79:7b:63:27:f5:93:
         82:8e:91:23:a5:e3:c4:fd:34:ca:3a:a2:21:e6:f1:08:96:52:
         de:0b:e1:31:95:4a:ba:0c:c7:77:0d:fa:e6:4e:e6:b6:16:b7:
         29:12:15:01:a7:39:38:2a:ea:1d:75:cf:55:35:ef:85:f6:6a:
         59:d7:c4:15:6c:4e:e0:f1:62:5b:27:5c:b8:50:c7:73:fe:b1:
         3e:a3:80:e3:ce:b3:d7:62:2c:bf:e7:9a:00:e0:f4:52:53:f4:
         6d:b5:9b:93:10:5c:b4:32:32:9a:91:be:0e:34:73:4c:78:f6:
         7f:25:36:f6:6c:15:9e:b0:20:f3:07:5f:e4:49:6f:48:7e:c4:
         74:a4:4e:1c:15:31:a7:45:8a:23:2d:f5:88:76:bc:45:2b:f9:
         3a:ec:43:a2:1c:15:8f:8b:e7:d9:21:18:4c:11:80:90:01:e8:
         01:80:cd:51:5e:ca:1e:3c:b3:65:5a:29:39:0d:95:18:75:b6:
         ac:7a:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org