Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa
File:                     34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa (raw, json)
Hash identifier:          dwLK5BdhpFsMzKs7cK2Enue/tzgCBB4XkUkIA2t1V4s=
Subject key identifier:   54:BB:DA:5E:46:DE:A5:F6:29:15:96:A0:33:AF:CD:70:A4:8F:24:19
Certificate issuer:       /CN=8960917263524044D6C2C72B89F0753C576C268A
Certificate serial:       5ADFADD57E38FF95DF0BE9CE034C443FA2C72343
Authority key identifier: 89:60:91:72:63:52:40:44:D6:C2:C7:2B:89:F0:75:3C:57:6C:26:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8960917263524044D6C2C72B89F0753C576C268A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa
Signing time:             Thu 04 Apr 2024 12:56:15 +0000
ROA not before:           Thu 04 Apr 2024 12:51:15 +0000
ROA not after:            Thu 03 Apr 2025 12:56:15 +0000
asID:                     268057
IP address blocks:        45.168.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:df:ad:d5:7e:38:ff:95:df:0b:e9:ce:03:4c:44:3f:a2:c7:23:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8960917263524044D6C2C72B89F0753C576C268A
        Validity
            Not Before: Apr  4 12:51:15 2024 GMT
            Not After : Apr  3 12:56:15 2025 GMT
        Subject: CN=54BBDA5E46DEA5F6291596A033AFCD70A48F2419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:08:b4:1a:70:a3:86:0b:ef:37:4f:23:e2:
                    54:04:d4:a3:76:53:9a:43:f7:56:3c:7f:f6:16:44:
                    2d:43:51:53:5d:d8:e0:ca:cf:f7:4f:29:95:c5:36:
                    dc:2b:de:f0:18:77:f7:6e:5c:ec:37:46:23:b6:48:
                    41:9e:50:78:ed:6d:12:a4:fa:79:48:1e:d8:41:d0:
                    9a:4d:ac:56:37:25:81:9e:19:79:f5:77:d7:c2:84:
                    92:b3:14:05:8b:2e:dc:69:40:e2:dd:7a:13:46:47:
                    18:df:8a:d7:b8:c8:74:67:4a:cc:57:6c:02:b8:0b:
                    52:ea:eb:1a:f1:93:fb:a7:2c:94:16:20:3a:7e:de:
                    29:5f:84:6c:07:ef:5b:44:18:82:ef:79:93:76:8c:
                    0c:9b:56:d7:7a:42:e5:4e:07:b4:1c:09:9f:8e:2c:
                    48:18:16:cd:8f:98:3c:48:13:fa:e6:84:f3:28:8d:
                    e7:a1:8f:b4:97:06:8a:e5:18:e6:77:ea:fe:03:17:
                    39:81:c6:63:92:c4:e0:89:90:c6:8a:a6:5b:15:43:
                    37:a4:2b:d3:fc:43:7b:b9:2c:25:f9:f8:62:4a:fe:
                    80:53:3d:5c:10:cd:e3:18:ec:e8:ec:16:99:fb:46:
                    84:71:dd:c9:44:4e:1a:4d:58:99:80:2b:c6:29:f5:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BB:DA:5E:46:DE:A5:F6:29:15:96:A0:33:AF:CD:70:A4:8F:24:19
            X509v3 Authority Key Identifier:
                keyid:89:60:91:72:63:52:40:44:D6:C2:C7:2B:89:F0:75:3C:57:6C:26:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/8960917263524044D6C2C72B89F0753C576C268A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8960917263524044D6C2C72B89F0753C576C268A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/1/34352e3136382e3130382e302f32342d3234203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:89:1c:dc:9f:1a:db:ea:fc:7b:bd:e1:28:0e:6d:fd:b6:c4:
         6f:29:3a:a4:ab:2c:34:30:31:f7:d9:32:7f:4b:e1:af:45:6d:
         e9:9c:9a:93:be:62:6b:4a:59:45:2a:da:1a:18:32:b0:84:1f:
         91:0e:01:55:90:a1:1b:be:de:c7:7c:c1:cc:6d:85:ca:95:9c:
         8e:5d:ab:fb:2b:5b:9f:d3:e8:7c:9e:15:b7:61:11:31:e6:e6:
         ed:6b:5e:3f:5f:ca:ca:16:0a:dc:4a:da:04:00:77:80:ec:22:
         f1:9c:58:a9:44:9d:96:0b:3c:74:3f:94:8b:91:37:91:c7:89:
         cf:fb:2d:fb:4a:89:39:6d:d0:c6:e7:38:66:31:8d:47:75:dc:
         2d:42:68:51:cf:46:29:4a:fb:35:e8:24:f0:f6:2d:d2:a7:5e:
         da:44:4d:3a:43:ae:ff:a2:0a:e6:7b:01:c4:9f:9b:3f:4b:bc:
         cd:11:aa:67:48:a8:13:75:98:0b:cd:a0:b1:2d:1b:4c:cb:bf:
         f4:48:b1:f8:8a:0a:69:23:90:b3:8a:da:ee:ab:48:c0:b4:8c:
         0a:1d:cb:c7:93:66:d5:4e:62:50:99:85:b2:ab:86:0d:31:ea:
         80:b4:c4:09:1b:82:57:4c:0d:8c:41:1c:a3:e1:b8:86:50:a5:
         6a:e5:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org