Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32322e302f32342d3234203d3e20323639303632.roa
File:                     34352e3137392e32322e302f32342d3234203d3e20323639303632.roa (raw, json)
Hash identifier:          za5NboQSoAFsZNECvGlVPc8v4iqkXBXuNPvoLJz6YYw=
Subject key identifier:   F9:80:30:81:9C:8D:B0:80:2B:A2:74:3D:DD:37:F9:B2:B4:AC:72:80
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       21FC65FC22743B900ECCD8C2DEF543ED7B1BD148
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32322e302f32342d3234203d3e20323639303632.roa
Signing time:             Tue 22 Aug 2023 19:13:11 +0000
ROA not before:           Tue 22 Aug 2023 19:08:11 +0000
ROA not after:            Tue 20 Aug 2024 19:13:11 +0000
asID:                     269062
IP address blocks:        45.179.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fc:65:fc:22:74:3b:90:0e:cc:d8:c2:de:f5:43:ed:7b:1b:d1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 19:08:11 2023 GMT
            Not After : Aug 20 19:13:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:61:8c:f6:76:b6:aa:c3:c8:af:b6:0e:c2:1e:
                    40:a5:e7:f3:3e:41:ff:d5:ad:8e:d5:13:9f:d1:1b:
                    89:75:78:1f:a8:97:9e:73:de:e8:c1:09:78:20:e9:
                    a1:0f:0f:8e:47:a5:3e:27:19:5f:ac:58:63:0d:ff:
                    cc:75:9d:14:82:56:d1:a6:5f:97:e4:84:a9:b4:4d:
                    35:77:08:2b:70:1f:e1:33:9a:69:d1:c3:1e:0d:ad:
                    ba:f8:c0:f8:db:fb:2d:b4:99:90:4e:4e:9c:0b:ae:
                    b8:f5:a7:6f:db:2a:3d:ae:0f:1a:51:ad:c7:73:a8:
                    c7:a7:a8:b8:02:b9:21:8c:a1:57:d2:2c:a3:af:85:
                    5e:a1:e2:79:0d:73:e8:9f:0c:26:84:86:88:46:dd:
                    c9:60:91:bf:80:87:2f:a5:00:53:c0:61:3a:35:e7:
                    dc:48:ba:d7:4b:31:01:9b:c5:56:7f:ce:38:45:25:
                    12:48:c1:e0:1b:bf:9b:18:63:2b:d1:80:07:10:3a:
                    a8:87:c4:7e:4a:78:5a:c4:ee:cc:5a:0f:c4:8f:9d:
                    59:83:d5:a4:3e:c1:f4:e3:d6:2a:27:9a:9b:b7:b8:
                    8b:87:a8:fc:ed:5d:7c:16:74:fa:ab:58:c6:7f:19:
                    3e:af:8f:de:9a:76:7e:f4:b4:77:20:cf:5b:e2:c8:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:80:30:81:9C:8D:B0:80:2B:A2:74:3D:DD:37:F9:B2:B4:AC:72:80
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32322e302f32342d3234203d3e20323639303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:46:4e:27:20:8d:14:4b:16:57:05:ac:bf:0b:1f:3a:42:58:
         22:77:c2:9d:59:b8:c8:49:6d:cd:55:1e:77:7b:a6:81:d7:91:
         80:6b:bc:53:6a:e9:05:14:b3:7c:be:f8:b4:65:97:2c:70:5c:
         af:a3:ad:b6:50:ae:14:4f:6d:33:6c:24:6a:d6:a6:0a:e0:e1:
         c9:27:80:1a:4f:50:32:35:e4:c7:31:c9:3a:bc:c3:0a:44:a8:
         6c:eb:82:5b:a7:38:06:50:57:41:0d:c3:da:86:79:28:54:cc:
         38:ab:a8:94:f9:a9:c8:3d:7a:b1:7b:eb:b3:07:ab:fc:50:16:
         4f:5f:f0:56:c5:a5:42:5d:ce:c2:e4:77:4d:f6:76:50:78:3c:
         d9:68:c0:95:99:94:24:fc:72:25:cf:59:1b:ea:bf:02:3f:48:
         53:84:ac:73:f3:57:c5:31:c9:f0:b1:d1:6a:d5:25:7e:12:71:
         36:9a:3a:6f:cf:bc:e6:fd:a9:fb:0c:67:68:2e:32:66:47:8f:
         79:ef:51:ed:55:c1:0f:b8:e7:f4:f2:fb:3c:0b:94:2f:4a:17:
         82:3b:7d:3f:10:e4:12:cb:51:e5:b1:ce:8b:18:83:06:59:91:
         e9:2a:6f:f4:32:2a:b6:4a:03:36:fe:44:bd:3d:b7:a5:3e:87:
         18:23:22:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org