Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34352e302f32342d3234203d3e203238323436.roa
File:                     3138372e312e34352e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier:          2JDm6L9Y+zfLV/iQQoC0ZGuZTgNEMazjoj1CHRl2UU8=
Subject key identifier:   80:50:5C:D8:FC:54:D4:D2:E6:E3:61:39:BF:D4:F6:2D:DA:9C:19:10
Certificate issuer:       /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial:       356A32174BC8FC668BB28801E381709BF08E61ED
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34352e302f32342d3234203d3e203238323436.roa
Signing time:             Thu 14 Dec 2023 14:57:25 +0000
ROA not before:           Thu 14 Dec 2023 14:52:25 +0000
ROA not after:            Thu 12 Dec 2024 14:57:25 +0000
asID:                     28246
IP address blocks:        187.1.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6a:32:17:4b:c8:fc:66:8b:b2:88:01:e3:81:70:9b:f0:8e:61:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
        Validity
            Not Before: Dec 14 14:52:25 2023 GMT
            Not After : Dec 12 14:57:25 2024 GMT
        Subject: CN=80505CD8FC54D4D2E6E36139BFD4F62DDA9C1910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:79:d8:5c:dd:ca:a9:89:d3:ac:f1:ec:e1:
                    f5:21:96:d6:45:82:f0:68:2a:50:5a:5e:a3:8e:cf:
                    2e:18:6a:0b:1f:46:d6:4c:91:8e:c9:2c:d3:20:6c:
                    2e:ae:64:14:25:fe:3a:68:38:7d:7f:db:dc:70:e4:
                    94:39:fd:5b:89:28:75:a8:f7:08:91:ee:d0:d1:d3:
                    95:cf:1a:eb:a3:44:e1:9e:84:71:37:1a:af:25:f9:
                    25:ac:74:81:4d:04:77:59:3d:70:ad:20:8c:4a:a9:
                    b5:0a:1f:e2:84:7c:dc:d3:c6:fc:d3:27:91:01:17:
                    41:4f:35:7f:7b:4a:0b:4c:af:fc:8e:26:e0:c1:28:
                    7d:78:89:85:81:3b:62:b3:ac:51:a8:4f:e5:21:9e:
                    1f:a1:df:69:d2:e7:11:ff:19:11:ea:c8:45:52:f6:
                    39:15:14:f3:14:b9:f3:40:f2:31:8e:d4:41:5a:33:
                    30:cb:4e:ba:f0:b8:40:60:21:2a:1f:2d:f8:ec:39:
                    ee:39:72:8a:a5:f9:b7:70:c4:da:48:fb:6c:1e:82:
                    f1:65:b0:1e:f8:9d:d0:00:7a:02:42:bc:a8:c1:87:
                    b8:32:e0:41:c2:ec:49:c1:9c:b7:1b:d1:ef:d6:da:
                    22:74:3e:09:10:29:4f:54:a0:b8:2a:55:cf:fe:6f:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:50:5C:D8:FC:54:D4:D2:E6:E3:61:39:BF:D4:F6:2D:DA:9C:19:10
            X509v3 Authority Key Identifier:
                keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34352e302f32342d3234203d3e203238323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:7d:fb:a5:f5:c6:c9:b0:d5:13:3c:10:57:d0:b5:33:25:b8:
         57:dc:79:07:ca:88:5c:52:ce:ea:7c:79:ae:7d:53:f7:2f:85:
         d3:9a:45:00:27:ad:7f:2f:f2:f1:61:ea:eb:2f:e3:0c:63:89:
         fb:4f:1e:1d:ca:46:dd:5c:d3:59:99:11:a4:1c:39:ec:ef:b2:
         74:1d:2a:26:56:71:88:c1:4a:f0:e1:21:17:45:26:3d:82:70:
         8d:8d:db:27:fa:78:bd:be:3a:fa:eb:4c:a9:6a:af:58:ab:70:
         6a:9e:1b:bd:35:bc:7b:13:d1:9b:cf:c7:fe:a4:f8:57:cc:f1:
         c9:4a:56:54:61:13:54:53:3a:cf:ec:35:20:1f:ab:4a:ad:9e:
         b9:9d:4d:2d:eb:47:ee:3d:27:78:ec:06:ad:c0:70:4e:58:f3:
         7f:ff:61:30:10:b1:ec:a3:6d:8d:18:43:90:c0:26:36:36:97:
         d6:2e:61:3b:eb:1a:21:05:3a:13:8e:3d:fa:88:43:0f:98:82:
         19:52:08:d8:b0:4e:4e:c8:91:cc:d2:7f:84:c1:92:5f:c5:34:
         51:2b:cc:2f:2c:f3:e2:63:be:ba:c3:5f:11:cc:59:35:7c:ee:
         83:33:16:35:e1:ec:cc:ff:73:a0:2f:f0:80:c3:fd:80:e8:85:
         52:cb:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org