Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
File:                     34352e3137392e32302e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier:          6kL1vFO46ITZmUWBtpUfD1XS2Ri+fkqFqqgWCCT9KOw=
Subject key identifier:   C4:EF:E4:CF:1A:C4:CC:5F:EA:AE:56:5D:3C:B6:CC:D9:BE:DB:FD:2E
Certificate issuer:       /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial:       5C93CAE95507C7400C0E1B17A15E2B037BFCF0E1
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
Signing time:             Fri 03 May 2024 21:05:57 +0000
ROA not before:           Fri 03 May 2024 21:00:57 +0000
ROA not after:            Fri 02 May 2025 21:05:57 +0000
asID:                     61844
IP address blocks:        45.179.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:93:ca:e9:55:07:c7:40:0c:0e:1b:17:a1:5e:2b:03:7b:fc:f0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
        Validity
            Not Before: May  3 21:00:57 2024 GMT
            Not After : May  2 21:05:57 2025 GMT
        Subject: CN=C4EFE4CF1AC4CC5FEAAE565D3CB6CCD9BEDBFD2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:79:85:48:d6:66:b8:ee:9c:7a:ee:96:0a:
                    1c:eb:fe:4b:53:af:20:8c:03:36:04:79:84:04:eb:
                    09:d0:c8:61:ec:96:7a:90:ff:df:56:39:9c:73:3d:
                    6e:9f:d9:e3:66:b1:fc:7a:96:9e:6c:b3:e5:c5:4c:
                    d2:06:df:52:57:0e:29:fd:55:57:11:5f:3c:9b:63:
                    5a:64:42:45:39:55:48:ea:3b:13:4b:20:90:53:55:
                    e3:b8:ad:c1:e1:13:69:29:a8:ec:06:54:8c:05:ad:
                    25:e1:d8:5a:37:da:23:87:84:a5:be:b2:bb:3e:53:
                    af:c8:f3:9f:c4:de:4b:d1:48:33:10:0d:6e:95:66:
                    bd:44:1c:6d:4b:85:aa:7b:43:5f:6b:30:e0:bc:06:
                    0e:32:da:ef:78:26:84:69:a0:7b:1b:e0:a7:7c:b9:
                    24:5d:b4:d8:03:86:5a:65:fa:4e:df:77:ce:4c:07:
                    76:e7:c7:27:6f:59:bc:65:ed:3d:8a:00:2f:7b:d7:
                    84:7b:cd:b9:96:2c:68:f4:7b:4a:2f:ae:75:8a:25:
                    19:4b:58:8d:c4:2c:2e:a2:58:b5:70:48:16:da:6f:
                    cc:58:70:30:08:82:ad:13:7a:40:db:be:6a:9c:9e:
                    03:74:ef:56:c2:86:59:08:e3:e6:83:0a:43:5e:53:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EF:E4:CF:1A:C4:CC:5F:EA:AE:56:5D:3C:B6:CC:D9:BE:DB:FD:2E
            X509v3 Authority Key Identifier:
                keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32302e302f32322d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:7a:06:f0:71:7a:11:b4:27:05:a1:e7:4c:63:af:82:5e:
         e5:7a:85:20:b6:e6:08:2a:67:cf:cc:32:bd:08:13:ee:68:9a:
         dc:0b:af:98:30:7d:d2:11:61:30:bd:6f:d1:ef:cf:63:bf:3b:
         53:06:71:78:f7:43:7e:ed:06:bb:e6:78:53:1f:fd:fa:22:7a:
         ef:88:a8:46:b4:07:4d:67:65:91:0f:41:60:3c:44:84:8d:29:
         22:ea:36:78:42:e2:c9:39:ed:5f:88:f8:f6:0e:fd:61:5c:5b:
         3a:c8:f4:50:ae:6e:f6:aa:d9:d1:56:60:bd:09:59:c2:c4:cf:
         3b:2a:23:23:00:bd:a5:b4:89:f3:9e:e3:8c:15:81:36:d1:b4:
         45:95:b5:61:5c:ca:c6:2b:2c:01:74:eb:06:1d:96:aa:7c:3a:
         fc:5a:9f:46:73:f3:fd:ba:a6:4c:6c:43:bf:b9:64:1d:d6:96:
         7e:10:59:60:8e:f6:89:5c:a1:3a:30:60:f9:84:84:19:89:98:
         79:0f:3e:20:21:62:ef:d9:ec:c3:df:75:ce:be:b0:90:0e:c9:
         26:5d:79:9b:dd:38:86:83:37:41:72:f2:e1:8e:97:13:38:c2:
         9a:20:36:e5:3a:b7:92:15:ee:85:e2:38:da:ae:7d:63:0e:14:
         de:85:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org