Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3137312e302f32342d3234203d3e20323639303431.roa
File:                     34352e3137382e3137312e302f32342d3234203d3e20323639303431.roa (raw, json)
Hash identifier:          AUR0+LWcW6vsJTtQXazON1LkYLVQGAi4r9RpBovrQW4=
Subject key identifier:   11:C9:D9:E2:2A:47:A9:1E:EF:9F:9E:5E:01:2D:CB:45:6B:4E:9B:8E
Certificate issuer:       /CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
Certificate serial:       5CE23DCB58495B237DA34A9840B8F93397BCA39A
Authority key identifier: 14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3137312e302f32342d3234203d3e20323639303431.roa
Signing time:             Mon 12 Feb 2024 12:26:46 +0000
ROA not before:           Mon 12 Feb 2024 12:21:46 +0000
ROA not after:            Mon 10 Feb 2025 12:26:46 +0000
asID:                     269041
IP address blocks:        45.178.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e2:3d:cb:58:49:5b:23:7d:a3:4a:98:40:b8:f9:33:97:bc:a3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
        Validity
            Not Before: Feb 12 12:21:46 2024 GMT
            Not After : Feb 10 12:26:46 2025 GMT
        Subject: CN=11C9D9E22A47A91EEF9F9E5E012DCB456B4E9B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:00:65:b5:7c:32:c6:68:00:f6:43:b2:6f:
                    a2:5e:76:e2:6c:b2:ff:64:cd:df:10:e2:27:6f:0a:
                    b3:a3:42:21:41:47:20:65:35:88:54:da:c7:75:e3:
                    4b:69:e9:54:b9:7f:e4:17:7e:f4:fe:3c:61:e2:a9:
                    de:b7:e0:27:69:0f:20:41:09:31:b1:ef:fc:85:d7:
                    b1:97:c5:74:3a:4d:e1:ef:74:b3:0d:67:d1:c6:1e:
                    b6:a7:86:9c:7e:ff:4c:a0:b8:12:79:c5:03:c5:9e:
                    50:54:0c:57:3f:38:f1:b4:58:7a:17:cf:4f:e8:4a:
                    13:60:56:8d:2d:ae:91:d4:8b:8a:2b:4d:91:0a:c5:
                    33:6a:5e:f9:49:91:f2:45:d7:2a:fe:1b:88:26:c7:
                    07:1e:75:0a:b3:48:d4:6a:d0:4a:38:82:a3:94:51:
                    ec:38:aa:f5:6a:78:d5:48:d0:15:10:3c:49:b3:6b:
                    44:c5:ee:d1:c5:24:51:01:13:0b:46:95:0e:b8:7a:
                    07:2e:8c:8e:ee:2e:35:a0:de:49:dd:0a:2d:22:36:
                    e9:65:fc:ba:a8:ae:e3:94:8a:ea:5d:72:fb:5e:63:
                    73:a6:77:7c:e1:14:f7:fd:50:89:af:c1:a9:aa:2f:
                    10:35:9a:cb:26:a1:f7:58:11:08:16:a9:95:bb:74:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:D9:E2:2A:47:A9:1E:EF:9F:9E:5E:01:2D:CB:45:6B:4E:9B:8E
            X509v3 Authority Key Identifier:
                keyid:14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3137312e302f32342d3234203d3e20323639303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:05:f1:92:1d:46:b4:bd:9c:69:dc:92:75:9b:fc:5a:88:0d:
         84:57:d3:c3:d8:f9:ff:a5:e0:e2:b8:f6:3b:a5:e9:78:72:05:
         bb:2c:a7:19:bf:4c:22:4a:b8:63:ab:e9:3b:0a:f0:9b:7d:89:
         d5:a0:9d:be:e0:9f:3c:ca:07:1b:b0:76:ea:bb:5b:d3:62:bf:
         fe:39:ab:87:42:e6:c7:4d:7c:27:34:b1:49:1f:f8:4e:03:69:
         59:83:19:91:02:94:49:d9:29:a8:6b:82:57:de:ee:6f:bc:f7:
         c6:d2:42:81:2d:b6:65:6f:88:5e:71:74:88:dc:a5:4d:32:f5:
         b7:4c:81:bc:07:81:4d:22:25:36:1f:68:b4:52:01:fa:16:a5:
         87:86:bf:82:dc:08:6e:69:4d:11:87:33:ab:f2:38:9b:35:4b:
         1c:3a:71:0e:be:61:d2:47:77:1c:3f:ba:3c:9d:a6:8b:be:41:
         97:3c:7c:ec:ef:ca:3b:13:3f:c0:07:1b:7e:77:05:83:20:d4:
         f7:be:22:8b:7f:2d:13:d2:ec:16:e5:39:b6:88:37:d6:97:4a:
         55:08:28:4d:97:56:d0:b0:b7:2d:4d:15:ef:b0:2e:05:44:a9:
         33:d5:3d:db:b6:2a:1c:fb:0c:f9:09:d5:8f:44:14:4f:1e:15:
         ee:49:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org