Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235322e302f32332d3233203d3e203631383434.roa
File:                     34352e3137372e3235322e302f32332d3233203d3e203631383434.roa (raw, json)
Hash identifier:          KN7dF9CxfbkPXQwuamtRXPGAc4ibCpv7tVwPoi9PYic=
Subject key identifier:   9E:AC:8D:9D:16:64:B5:14:C7:F3:FA:3C:AC:1D:A0:08:50:AB:8F:29
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       0198D5F34E77BC6A4063C89E665CF31E750D6B16
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235322e302f32332d3233203d3e203631383434.roa
Signing time:             Thu 28 Sep 2023 00:42:00 +0000
ROA not before:           Thu 28 Sep 2023 00:37:00 +0000
ROA not after:            Thu 26 Sep 2024 00:42:00 +0000
asID:                     61844
IP address blocks:        45.177.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f3:4e:77:bc:6a:40:63:c8:9e:66:5c:f3:1e:75:0d:6b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 28 00:37:00 2023 GMT
            Not After : Sep 26 00:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:3f:63:65:2e:88:1d:81:37:30:45:7e:4d:
                    ee:cf:66:5f:b1:96:eb:19:89:c0:77:56:73:29:69:
                    6c:14:b3:4e:6d:6e:d8:80:61:89:49:e9:ff:52:04:
                    82:5b:e3:37:92:b5:d5:69:c0:b0:57:91:65:70:20:
                    9e:0a:3a:26:45:a2:c0:2c:18:1a:2d:81:82:b2:33:
                    1f:47:49:fe:45:88:ce:43:4c:43:4f:3e:6b:e1:78:
                    4d:de:f8:4a:e6:1c:43:4f:9b:3d:6a:75:36:1e:bb:
                    a2:b6:56:cc:ce:a5:ee:8c:a5:df:28:15:05:46:e1:
                    4d:c2:5d:5f:20:ba:38:c7:15:ee:bb:bb:41:a8:ef:
                    b5:f4:7a:71:b0:79:34:b2:01:b2:f7:ef:6a:a6:9f:
                    6b:b2:be:2f:a6:51:b3:2c:fe:96:4c:4b:cd:c9:bc:
                    97:dd:25:33:92:69:af:99:00:49:0d:dc:02:5e:97:
                    45:4f:b3:e8:b9:5f:89:75:ab:d9:c4:51:cd:27:e6:
                    a6:de:21:9e:ee:27:6d:60:ea:1c:97:af:43:19:62:
                    b6:6c:b1:ba:dd:9c:73:de:aa:11:d7:b3:49:fa:e3:
                    d0:e8:da:44:44:ad:b9:aa:fd:bd:09:97:3a:55:d8:
                    41:51:12:3e:9b:8a:78:03:05:c4:c4:49:47:86:b2:
                    9d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:8D:9D:16:64:B5:14:C7:F3:FA:3C:AC:1D:A0:08:50:AB:8F:29
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235322e302f32332d3233203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:fc:e6:4d:00:cb:0d:95:5d:fd:c4:19:41:30:3f:3f:1f:53:
         f5:bf:12:bf:16:f4:75:14:eb:9a:f7:b4:da:e1:57:67:81:57:
         b1:67:42:b6:da:ca:70:52:de:9f:2a:46:e2:41:6d:6f:f6:bf:
         06:cf:de:6b:bc:a0:84:e3:44:ca:52:e7:8e:57:cd:ac:41:81:
         f4:f5:db:ef:bd:2f:b4:83:dd:c0:cc:c8:91:5d:f8:95:85:55:
         e6:b7:21:44:b7:c0:2c:11:61:3c:35:c2:63:00:ab:e0:a6:f1:
         83:64:1d:db:ef:99:a4:5c:d4:b7:62:80:57:65:41:ee:3b:52:
         70:5b:2f:7a:d8:92:ef:af:f5:38:50:61:0f:90:90:98:5f:52:
         12:de:76:0a:7e:cd:52:aa:cd:f8:81:b2:34:8f:12:3d:cf:c8:
         18:4b:e2:15:4c:0a:07:e0:cd:f3:77:63:b4:e2:52:63:e0:1b:
         31:9d:7d:ae:95:a3:ff:90:13:ff:72:bd:7b:a3:de:f7:d9:31:
         0c:31:e5:40:ce:1a:25:95:1b:47:a4:93:9b:80:c4:0b:13:47:
         f9:a1:a8:7c:d3:83:d7:35:43:84:bd:44:7d:8f:32:41:86:4d:
         47:a2:0e:99:3b:ba:d8:99:dd:fa:f0:f7:e6:5f:45:57:e1:53:
         4a:a3:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org