Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32342d3234203d3e20323639313932.roa
File:                     34352e3138312e3134382e302f32342d3234203d3e20323639313932.roa (raw, json)
Hash identifier:          p0u8LBv+FnGb5X07Bb9Xf8PBRAOPbR6MNFu505JdzV8=
Subject key identifier:   FC:88:21:56:75:FF:A0:64:70:FA:4C:CE:AA:39:23:E5:A9:74:E3:1F
Certificate issuer:       /CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Certificate serial:       025A74BE05482BAFA0B95C9C0F1E3133BEE6460F
Authority key identifier: A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32342d3234203d3e20323639313932.roa
Signing time:             Mon 29 Jan 2024 20:00:00 +0000
ROA not before:           Mon 29 Jan 2024 19:55:00 +0000
ROA not after:            Mon 27 Jan 2025 20:00:00 +0000
asID:                     269192
IP address blocks:        45.181.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5a:74:be:05:48:2b:af:a0:b9:5c:9c:0f:1e:31:33:be:e6:46:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
        Validity
            Not Before: Jan 29 19:55:00 2024 GMT
            Not After : Jan 27 20:00:00 2025 GMT
        Subject: CN=FC88215675FFA06470FA4CCEAA3923E5A974E31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:f2:45:d2:e6:99:e9:65:57:40:ee:b9:30:
                    eb:5d:78:a4:ea:1e:73:32:51:ec:14:ff:74:2b:2c:
                    eb:da:f0:99:9a:ad:fe:db:bc:58:98:04:e0:6c:67:
                    1c:c8:88:6a:6a:a3:a0:6e:95:3a:91:2e:bc:2c:7a:
                    ea:c7:4b:c2:32:4c:a9:9f:d9:68:28:71:13:67:38:
                    6a:5d:fa:fc:4c:c5:2f:a0:ed:80:8a:2a:f1:f3:49:
                    b2:b1:e0:d7:bc:a4:ab:06:1d:67:a5:ee:90:41:95:
                    a4:6a:45:3b:fd:48:f9:d9:7e:f6:48:f2:95:8c:ba:
                    81:6a:79:50:11:a4:8d:24:2b:15:1d:d8:2f:ec:b2:
                    08:cf:b3:6e:cc:bb:67:95:d6:00:12:5c:c8:66:c8:
                    55:c8:b1:d1:c4:e2:e7:c7:d2:30:c4:24:6c:4a:bf:
                    30:ec:e6:7a:d9:94:bc:b2:d0:40:9a:f3:22:ae:50:
                    fc:8c:db:8d:0f:6b:6f:92:09:26:af:97:23:f5:5e:
                    f6:d3:5f:02:7c:de:55:8c:12:36:bd:80:2c:06:af:
                    73:96:51:6b:73:b3:06:c9:0b:59:00:9c:99:c8:4d:
                    b8:34:ae:a2:ec:4b:71:4d:75:8c:63:9e:5b:b4:f2:
                    f9:42:a4:47:f4:0c:83:cb:96:4a:aa:95:cf:ff:b6:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:88:21:56:75:FF:A0:64:70:FA:4C:CE:AA:39:23:E5:A9:74:E3:1F
            X509v3 Authority Key Identifier:
                keyid:A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134382e302f32342d3234203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:ed:ad:53:ed:21:bd:f2:33:30:46:af:1a:9d:95:45:e7:
         2c:ab:b6:bc:5f:aa:5a:23:ba:6e:f8:13:66:f9:7a:a6:57:f2:
         4b:63:58:eb:39:f2:94:6b:55:81:c5:c9:7a:66:c2:69:8c:94:
         6e:57:cb:c0:c5:a2:32:a5:90:b8:20:60:28:b0:c8:ab:60:f2:
         6d:2e:0c:de:96:d6:87:c8:d1:fc:ce:b7:eb:4c:64:c3:f0:3d:
         d9:fe:67:58:34:4c:5d:8b:85:6b:f4:34:0f:75:ac:94:00:a6:
         86:06:68:9b:78:31:6f:23:51:b8:47:a3:3f:c6:44:ea:85:b5:
         4d:f0:db:0a:bc:c6:e8:d3:1d:b4:f0:18:45:51:f3:27:5a:2c:
         a0:a2:13:51:22:63:bf:d1:9c:be:df:50:44:c7:79:18:62:cb:
         a6:79:3c:34:42:ad:ad:31:12:f3:fb:45:42:7a:cb:80:75:b3:
         24:84:d2:a6:37:01:54:2d:df:6a:61:a5:57:fe:32:43:d8:17:
         1a:39:b6:a2:a9:1e:12:58:4e:f4:e6:50:bd:50:86:9f:bc:02:
         c7:9e:09:ef:f3:6d:b8:c9:aa:27:32:12:7d:ac:83:06:95:aa:
         cd:66:1b:19:34:bf:b2:c7:67:05:38:9b:33:ba:0c:aa:bf:68:
         c6:fa:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org