Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32332e302f32342d3234203d3e203631383434.roa
File:                     34352e3137392e32332e302f32342d3234203d3e203631383434.roa (raw, json)
Hash identifier:          dZ2WH9BjeINE1kg34T9p3eqLgHVJKtGLknOWtNVqVjU=
Subject key identifier:   85:63:4F:8D:9F:05:47:3E:D4:DF:93:A4:06:F0:4C:2B:77:43:1F:67
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       304AAD5672F10E524ABAEE80F2B56718DD373512
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32332e302f32342d3234203d3e203631383434.roa
Signing time:             Thu 28 Sep 2023 00:44:00 +0000
ROA not before:           Thu 28 Sep 2023 00:39:00 +0000
ROA not after:            Thu 26 Sep 2024 00:44:00 +0000
asID:                     61844
IP address blocks:        45.179.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4a:ad:56:72:f1:0e:52:4a:ba:ee:80:f2:b5:67:18:dd:37:35:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 28 00:39:00 2023 GMT
            Not After : Sep 26 00:44:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:31:22:f4:e7:8a:dc:25:59:a0:ad:42:18:
                    a4:11:b3:90:4e:34:ba:8c:48:fb:6c:b4:07:9c:63:
                    e4:a4:43:24:03:12:76:24:a9:be:e1:7d:65:78:71:
                    eb:93:a0:0a:33:00:ce:32:f1:61:ea:7e:c3:65:ed:
                    15:92:ec:d1:91:f3:4b:17:09:7b:12:77:92:0b:b0:
                    73:dc:1e:8c:11:c4:90:1e:e9:01:ba:d5:59:f1:31:
                    4d:0b:d3:7b:75:25:35:65:1f:42:e5:c0:47:9c:c3:
                    d0:b7:f4:f9:c6:0b:b7:aa:0c:2a:e4:32:ff:70:95:
                    e7:58:57:7b:e5:17:4b:14:45:b2:93:9d:30:5a:48:
                    20:97:e5:c4:a2:6e:87:25:78:4c:e2:f6:ec:d7:ed:
                    02:08:dc:5c:95:6f:86:5a:01:bb:2b:97:71:60:f8:
                    0e:57:ba:fc:d6:8a:9c:65:0b:b1:c1:8f:10:d4:2a:
                    33:1f:61:fd:11:e2:23:05:15:e9:e2:c7:92:4c:51:
                    92:58:e4:30:07:00:cd:4a:ec:71:fd:5d:67:1a:14:
                    41:21:af:5d:19:bc:02:3e:ba:6c:bd:cb:e2:01:a1:
                    08:30:c6:ae:80:a3:c4:99:5c:c4:1c:4d:52:bf:34:
                    2a:21:dc:04:75:82:78:d9:53:71:a8:12:a5:84:9d:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:63:4F:8D:9F:05:47:3E:D4:DF:93:A4:06:F0:4C:2B:77:43:1F:67
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32332e302f32342d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:2e:1f:01:d7:80:f0:ff:b3:83:76:2f:e7:3a:dc:87:70:
         d8:f0:5c:38:2b:75:26:11:38:42:a8:2f:04:1f:5f:2c:f1:c8:
         af:37:51:cb:cf:97:12:19:34:a2:57:54:6d:17:1f:fb:64:23:
         29:ba:ad:db:10:93:e3:fa:cb:35:c6:14:79:bc:4d:70:28:bc:
         f2:9e:e0:51:9f:15:8e:bc:39:1c:0f:89:a7:c7:68:05:c6:56:
         64:af:d0:82:24:8e:2c:e3:11:b7:1b:a2:c6:0b:af:03:c3:a8:
         2e:c5:64:75:65:1c:67:0b:c3:0a:d9:73:32:22:d9:df:29:27:
         f5:5e:a1:96:21:0a:49:7f:bb:25:af:df:c7:0c:cd:b7:2b:2c:
         ec:66:77:e0:c3:80:02:8d:c7:48:09:eb:2c:83:cf:b4:0a:29:
         35:fa:dc:91:f8:3b:19:81:71:57:10:a8:fb:ad:5d:25:96:2b:
         8c:3d:eb:5c:01:6a:6d:a1:33:2d:c0:8e:81:a5:11:03:64:ba:
         b9:7a:d7:b3:d2:28:10:b4:a6:44:69:80:c4:68:1f:6b:9c:a5:
         20:f7:98:79:0f:f4:3f:c2:6f:32:cd:d7:f4:22:f8:fb:1b:d1:
         b7:1d:ab:68:a4:36:aa:62:55:c7:91:3c:cb:3c:d4:cf:87:7c:
         78:ab:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org