Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa
File:                     34352e3138362e33322e302f32322d3234203d3e20323639343235.roa (raw, json)
Hash identifier:          GjkNMji0mZGFGiE1kADfb5cjdKcjkoazmDp+FDOlkxI=
Subject key identifier:   20:3D:90:74:C7:1D:81:93:53:4E:B5:0B:59:29:1C:2A:23:AA:49:DB
Certificate issuer:       /CN=9B51B15273976450E1F7907A02174B498E4E9C95
Certificate serial:       77F063D2F37EE6691C0FEBFACA15768979EA4312
Authority key identifier: 9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B51B15273976450E1F7907A02174B498E4E9C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa
Signing time:             Fri 12 Apr 2024 21:15:09 +0000
ROA not before:           Fri 12 Apr 2024 21:10:09 +0000
ROA not after:            Fri 11 Apr 2025 21:15:09 +0000
asID:                     269425
IP address blocks:        45.186.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f0:63:d2:f3:7e:e6:69:1c:0f:eb:fa:ca:15:76:89:79:ea:43:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B51B15273976450E1F7907A02174B498E4E9C95
        Validity
            Not Before: Apr 12 21:10:09 2024 GMT
            Not After : Apr 11 21:15:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:ce:e3:a4:de:0f:a0:9c:e7:e6:79:84:ff:
                    9e:31:58:91:ff:40:c3:f1:b0:15:07:24:59:f0:dc:
                    7b:77:e0:ff:d4:2e:d2:06:76:32:78:e1:48:e0:02:
                    9e:1f:1f:09:e4:17:18:89:0c:aa:d4:ac:11:6a:0a:
                    0a:cf:51:b2:e9:10:66:49:45:12:1c:22:ac:49:97:
                    95:af:4d:5a:32:c9:7b:e6:d5:7e:93:f2:d6:07:67:
                    c0:c0:1c:13:4b:f8:ec:9f:5d:2d:20:be:aa:02:8c:
                    18:2f:04:4d:bf:3d:3e:74:e2:2a:05:80:62:1c:37:
                    c2:52:61:6d:ab:84:4e:df:d0:7f:e2:16:3e:f9:88:
                    e9:cb:7b:c3:61:4b:cc:65:d7:c2:6a:2f:b0:f7:f8:
                    78:e6:a9:1b:bc:29:64:f5:b7:b3:f2:b6:bd:e7:71:
                    5d:4e:77:cf:97:3a:bd:a9:cb:ea:5f:0c:33:df:1f:
                    63:e2:80:67:ad:ea:b8:dc:f2:10:9c:0d:ef:3f:21:
                    69:64:3d:79:54:40:e0:63:bc:48:b6:1f:06:93:6a:
                    b0:33:81:df:ae:dc:e3:0d:f7:79:60:8d:ca:44:62:
                    a2:07:90:9f:40:d6:57:0b:bc:47:0c:dd:71:43:4d:
                    2a:40:c0:f5:79:ce:ac:15:0a:c5:8c:9f:d2:90:5a:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3D:90:74:C7:1D:81:93:53:4E:B5:0B:59:29:1C:2A:23:AA:49:DB
            X509v3 Authority Key Identifier:
                keyid:9B:51:B1:52:73:97:64:50:E1:F7:90:7A:02:17:4B:49:8E:4E:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/9B51B15273976450E1F7907A02174B498E4E9C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B51B15273976450E1F7907A02174B498E4E9C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/1/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:ed:ac:fe:09:75:77:7c:70:df:7f:55:30:cf:f1:e8:f9:
         30:5d:02:a6:ba:d9:43:d6:0d:50:3d:c7:21:39:2d:a0:ac:8d:
         8e:66:15:9c:db:5a:0f:1b:f4:e6:99:eb:ce:db:b3:0c:e6:d2:
         9d:2a:21:da:37:15:06:7b:6a:45:8d:de:56:79:f6:24:37:8e:
         07:f6:ea:db:2f:a7:b0:b9:15:22:a5:0a:cf:71:ff:51:7d:f7:
         ed:23:61:a3:7c:94:f8:79:3d:e6:b8:37:be:f2:e1:3f:96:74:
         13:6a:c4:8e:19:3b:b4:5c:d2:09:1f:c1:45:41:c2:b5:3b:70:
         71:28:44:97:c8:af:86:25:bc:fd:8f:10:c4:7c:99:a3:2f:41:
         62:98:64:38:07:93:8f:48:1c:70:e8:c2:ba:ff:97:53:e6:f9:
         f2:01:f8:1a:95:71:e2:fd:aa:22:b2:e0:94:25:3c:fe:bd:10:
         1d:e9:89:2a:a7:9c:16:3f:9f:91:32:af:50:aa:eb:17:09:89:
         d0:68:34:8d:e4:4c:e3:87:e3:39:c0:89:d9:eb:b8:97:6d:b7:
         2f:3c:59:8f:b1:7d:6b:1a:13:db:e6:c2:38:45:9b:59:02:5b:
         12:1e:cd:fa:e8:7b:9f:48:fd:12:0a:32:c5:a9:1f:29:51:5e:
         60:7b:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:11 2024 by rpki-client on console-fra.rpki-client.org