Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32322e302f32342d3234203d3e203631383434.roa
File:                     34352e3137392e32322e302f32342d3234203d3e203631383434.roa (raw, json)
Hash identifier:          dSGs5jVquALQeUslUM9XaM5VNzvwk6NGmMrraJv+YZo=
Subject key identifier:   D2:4F:31:F7:15:BE:AF:45:46:EF:F1:6A:5F:50:CF:FD:6F:44:27:87
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       16BAF59CD1F3D7CCBE84E6BAA55003AB26EAB847
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32322e302f32342d3234203d3e203631383434.roa
Signing time:             Fri 29 Sep 2023 20:22:00 +0000
ROA not before:           Fri 29 Sep 2023 20:17:00 +0000
ROA not after:            Fri 27 Sep 2024 20:22:00 +0000
asID:                     61844
IP address blocks:        45.179.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ba:f5:9c:d1:f3:d7:cc:be:84:e6:ba:a5:50:03:ab:26:ea:b8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 29 20:17:00 2023 GMT
            Not After : Sep 27 20:22:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:cd:94:78:81:7d:c8:43:6a:c7:f0:6b:16:
                    13:bc:66:43:ca:79:a1:e9:a1:e1:8a:99:75:1b:af:
                    4c:12:98:94:d8:89:43:95:7d:08:d7:d4:1f:f9:2b:
                    d3:05:a3:f2:2f:4b:db:7b:ce:24:f4:32:3d:9d:5c:
                    2a:2d:ae:95:a1:be:ca:f6:0e:e4:f8:ed:68:49:fc:
                    9b:8c:91:44:9e:d9:24:60:a2:03:32:1b:87:c5:3a:
                    1e:22:ef:0b:0f:85:27:cd:79:04:25:d7:29:86:81:
                    a6:9a:28:d7:80:93:0b:fc:7d:1d:b3:3d:74:3f:e1:
                    ac:a1:09:bb:74:95:96:1a:7d:7d:8d:b2:84:ef:48:
                    13:7e:66:f5:c3:4d:73:5a:1f:97:e0:63:03:c8:c3:
                    b7:88:3f:32:25:fa:9a:dc:af:56:41:29:69:0d:a7:
                    2c:c7:e3:37:28:22:86:11:b3:c0:33:38:7b:f3:de:
                    a8:5d:ec:2f:93:c8:4f:1f:aa:f6:54:47:47:a8:4e:
                    27:54:26:c3:c6:2c:21:56:8a:bd:f3:bf:79:ba:ce:
                    3d:e7:40:03:de:61:f0:0d:70:61:93:6e:5c:19:28:
                    44:f2:39:a6:04:c6:4e:71:3d:68:4b:77:a1:a9:64:
                    e3:25:62:18:44:31:0b:2e:ac:9b:19:74:ed:f4:b8:
                    d5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4F:31:F7:15:BE:AF:45:46:EF:F1:6A:5F:50:CF:FD:6F:44:27:87
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32322e302f32342d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:bb:a8:9b:a0:c3:2c:44:88:36:a2:6c:8c:a5:02:76:46:9b:
         fa:e7:ed:72:c0:25:fd:c7:fb:19:04:0a:d1:2f:0b:8e:e3:5c:
         43:5b:c7:16:13:94:11:94:cf:af:e3:7e:65:ef:16:64:d8:d5:
         2f:c6:42:4f:2e:fd:cd:9f:46:5f:15:36:fd:2f:42:fb:cf:03:
         63:30:24:a9:64:0f:9f:67:27:53:4c:9d:35:b1:4f:6c:cc:62:
         af:b2:21:98:8a:e9:24:40:d7:8a:6d:2f:29:60:cd:af:0b:ea:
         e6:c2:b5:ef:81:8d:b6:17:93:27:09:15:dc:1a:16:13:89:c8:
         74:2e:96:a3:df:81:b6:bf:67:bc:30:99:d4:8d:71:89:4e:f8:
         cb:a3:ed:0d:9d:91:f4:51:79:d9:0b:d8:5e:e7:9c:a3:fd:98:
         82:3d:77:8c:94:c7:ad:5a:88:0f:7a:01:00:51:fe:01:85:45:
         b0:8b:d4:3c:79:73:f7:28:ba:9f:88:74:02:57:49:b8:a4:ac:
         87:b3:a1:8c:6b:3f:4f:96:58:2b:fd:49:e9:84:66:ba:fb:8b:
         b5:21:4a:05:b0:a4:9c:f1:9a:93:33:51:8e:53:d6:f4:73:a7:
         b2:00:ac:b5:05:3d:16:4b:3c:a3:7f:a4:3d:d7:12:e6:72:cb:
         a7:bd:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org