Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa
File:                     34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa (raw, json)
Hash identifier:          XS0AudnVMr5LQMy+k3YUmdKwCUkaMXWwIdlTrTaEjyM=
Subject key identifier:   BC:88:D9:5D:DC:28:16:59:FB:05:FB:80:32:6D:6B:B6:39:4B:7D:90
Certificate issuer:       /CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Certificate serial:       4C1E2BD9AC5447D3D84C807AE48769B475D74490
Authority key identifier: A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa
Signing time:             Mon 29 Jan 2024 20:00:00 +0000
ROA not before:           Mon 29 Jan 2024 19:55:00 +0000
ROA not after:            Mon 27 Jan 2025 20:00:00 +0000
asID:                     269192
IP address blocks:        45.181.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1e:2b:d9:ac:54:47:d3:d8:4c:80:7a:e4:87:69:b4:75:d7:44:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
        Validity
            Not Before: Jan 29 19:55:00 2024 GMT
            Not After : Jan 27 20:00:00 2025 GMT
        Subject: CN=BC88D95DDC281659FB05FB80326D6BB6394B7D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:a9:47:ff:83:e4:85:64:ee:e1:a7:5d:c1:
                    35:e3:04:d1:cc:6f:8e:a9:37:af:1a:80:a9:36:b2:
                    23:83:e7:50:d5:07:53:53:fe:2b:dc:7a:0d:ed:fe:
                    c8:0e:ef:b5:7d:ff:7a:54:0e:c1:e9:14:87:03:9f:
                    b1:ba:3c:7b:b8:6c:01:91:a0:f3:59:23:fd:fc:13:
                    2a:e3:06:ff:6e:15:4e:06:8b:b6:59:85:f2:10:5b:
                    da:8f:30:fe:ca:40:a2:a8:09:f7:4b:a5:56:79:74:
                    d4:b4:78:4e:9c:f6:dc:8a:15:44:6b:14:54:44:20:
                    39:7f:c3:cc:ea:4a:06:6c:52:b0:b6:54:c2:da:d5:
                    1b:a7:c5:40:75:3d:74:c4:0a:82:a1:77:04:dd:a4:
                    ce:ef:7f:92:40:ff:99:86:50:7e:5a:6c:39:6d:9c:
                    2b:14:08:fd:f8:6e:91:80:ee:6b:88:48:54:ed:8c:
                    aa:91:23:f6:54:09:f0:33:2b:27:c9:e5:14:32:2f:
                    df:e7:8e:7a:75:66:6f:a5:c4:92:5e:b2:0a:7f:c9:
                    43:c0:19:8a:3f:7b:2a:f7:26:9a:ff:95:3d:f3:82:
                    34:0c:da:5a:51:8e:46:c5:7b:ae:69:68:e8:2e:f2:
                    aa:b5:30:b7:53:59:2a:17:bc:f1:34:c2:b0:2b:0f:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:D9:5D:DC:28:16:59:FB:05:FB:80:32:6D:6B:B6:39:4B:7D:90
            X509v3 Authority Key Identifier:
                keyid:A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:bf:82:9c:ed:56:50:3d:9f:93:e5:bc:a0:c0:df:60:3e:
         da:8a:5b:20:c8:bd:16:6d:b3:14:05:0b:66:7a:49:74:00:87:
         ae:51:38:98:94:bc:eb:f7:ca:fb:cb:79:39:68:cf:66:16:3b:
         2b:40:05:bd:0e:4a:ee:7a:52:2f:db:26:8b:ec:c4:f5:21:b3:
         b7:2b:e0:49:e9:87:56:10:47:f6:1b:2d:87:e1:d5:a6:0c:08:
         10:8b:00:3a:7c:60:be:47:41:78:6a:9f:48:da:9a:e9:7e:2a:
         70:79:d9:18:59:bf:85:ae:a9:c8:aa:13:b3:cb:e5:38:0f:ec:
         21:92:3d:66:f9:8f:ff:32:eb:01:a5:8c:43:f3:ed:06:a4:ac:
         af:d2:d7:42:b5:2f:da:eb:f8:cc:a0:f8:41:28:a4:c5:e7:c2:
         e4:2e:e3:ef:e9:62:0b:a5:33:f1:6b:0b:f4:51:cb:db:7b:8a:
         0f:cc:ce:90:2b:fc:64:e2:eb:6d:15:e7:0f:39:9b:e1:dc:6a:
         fe:7f:9b:5e:b0:02:80:c5:b0:8e:86:81:be:3b:0d:c3:6f:eb:
         9e:f0:c7:51:d2:3c:95:05:5f:8b:87:4f:25:8e:12:03:87:4c:
         91:fd:38:91:c6:33:06:9b:34:d0:d3:a9:e0:d8:09:4a:bb:25:
         07:36:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org