Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
File:                     34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa (raw, json)
Hash identifier:          siz8nXzTWIVEQd8//q8M2Asxmnd2bhtseMiFbvoTUsE=
Subject key identifier:   46:F2:D1:C9:93:95:1D:9E:00:A3:38:3C:00:E6:1B:57:52:23:40:74
Certificate issuer:       /CN=3031188AB6BEC48612DEFA14DBF67C31676B0E40
Certificate serial:       70AB626EBEBAA2577FFCB056A2D4C63D81202E33
Authority key identifier: 30:31:18:8A:B6:BE:C4:86:12:DE:FA:14:DB:F6:7C:31:67:6B:0E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa
Signing time:             Sat 17 Feb 2024 06:23:53 +0000
ROA not before:           Sat 17 Feb 2024 06:18:53 +0000
ROA not after:            Sat 15 Feb 2025 06:23:53 +0000
asID:                     268464
IP address blocks:        45.161.120.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ab:62:6e:be:ba:a2:57:7f:fc:b0:56:a2:d4:c6:3d:81:20:2e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3031188AB6BEC48612DEFA14DBF67C31676B0E40
        Validity
            Not Before: Feb 17 06:18:53 2024 GMT
            Not After : Feb 15 06:23:53 2025 GMT
        Subject: CN=46F2D1C993951D9E00A3383C00E61B5752234074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:73:2b:51:b6:42:e6:53:85:c0:61:bf:db:17:
                    d4:bc:3d:d9:b2:e8:8c:1d:64:43:8f:eb:49:5f:59:
                    fd:8b:2f:30:13:dd:15:24:34:0f:c1:28:98:50:cf:
                    36:43:f4:64:57:cc:57:5a:87:05:72:77:34:34:00:
                    40:73:91:02:79:d3:7a:5f:5f:bd:45:7a:87:fc:2c:
                    8d:b7:02:a7:40:e0:2b:7a:db:a6:b5:96:db:f1:e1:
                    24:7b:82:04:4b:00:b6:a5:47:18:90:d3:42:96:57:
                    a7:da:1f:b7:f4:7a:8d:58:a8:fd:4f:11:62:bf:55:
                    a8:9a:62:18:ad:af:5f:81:e8:d7:b9:8b:e7:7a:a0:
                    e4:0c:f4:35:90:92:4e:67:18:a8:62:b8:0a:75:43:
                    fb:fd:93:96:fb:69:73:1d:18:56:8e:de:36:5e:b6:
                    97:f7:dd:25:bb:15:c1:a5:57:b6:47:84:c4:82:0b:
                    8e:2c:fa:b2:27:f8:bb:89:29:e8:04:8b:39:26:00:
                    c9:2a:12:a8:c5:4a:de:71:6c:e2:75:cb:56:ac:c7:
                    50:04:59:98:b8:51:8c:cc:11:be:bf:88:ac:22:55:
                    75:82:06:c9:62:65:6b:00:18:de:ac:78:e2:1f:c9:
                    b7:dd:85:0f:68:0f:e2:5d:49:f3:92:f1:d1:0b:ed:
                    c6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F2:D1:C9:93:95:1D:9E:00:A3:38:3C:00:E6:1B:57:52:23:40:74
            X509v3 Authority Key Identifier:
                keyid:30:31:18:8A:B6:BE:C4:86:12:DE:FA:14:DB:F6:7C:31:67:6B:0E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/34352e3136312e3132302e302f32322d3332203d3e20323638343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:e6:fe:85:58:63:7f:e8:21:db:6e:ee:de:96:66:0e:8f:
         50:86:04:a3:6e:2f:fd:85:f2:da:f5:48:d3:60:bd:7b:b6:20:
         f6:88:5a:ec:c7:2c:45:e9:a4:c9:0a:30:fb:2a:c6:2d:ce:6e:
         89:a7:1b:e9:a7:71:95:b2:8a:a2:67:72:a7:39:81:e3:10:e3:
         52:91:07:02:ff:9d:71:55:ac:72:05:7d:a7:97:21:ed:ab:db:
         8e:32:6e:20:8f:57:61:13:04:c1:17:d9:37:81:ff:30:9d:14:
         c2:9c:4c:fe:05:cd:23:8c:d3:38:ea:c1:f6:fd:d4:dd:09:9d:
         c9:2d:a8:d3:fe:7b:69:e7:e4:79:09:17:d1:2c:b1:e7:8c:9e:
         61:80:d1:8b:3e:75:27:5b:2c:88:cb:f9:64:a5:59:e0:2d:35:
         e8:b6:25:5a:8d:56:e2:85:4c:4a:c6:19:5c:35:0d:da:1f:7d:
         95:5c:f1:4e:6b:50:b1:7b:cd:bf:b0:d2:e4:aa:c4:c5:95:e7:
         1b:d5:94:a8:13:a1:e1:8d:ad:9b:48:31:4c:14:d2:0c:d9:31:
         b0:29:e1:f4:38:5f:42:a6:24:0b:9b:eb:85:b5:dc:05:f7:0c:
         68:f5:1c:6a:b8:52:b1:08:c8:5c:6f:a2:3a:48:db:45:86:3d:
         e0:73:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org