Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230352e302f32342d3234203d3e20323638393231.roa
File:                     34352e3137352e3230352e302f32342d3234203d3e20323638393231.roa (raw, json)
Hash identifier:          AG2UHtmZVU2UfRjlDTPYi44c16eW993B7+I7OiHGbIs=
Subject key identifier:   D6:57:53:FB:E5:02:AE:13:18:8A:DE:CF:19:1E:B4:67:88:C2:60:E6
Certificate issuer:       /CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
Certificate serial:       038335EFD60572C57B49E50EE99607C956C47ED8
Authority key identifier: BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230352e302f32342d3234203d3e20323638393231.roa
Signing time:             Wed 28 Feb 2024 19:20:20 +0000
ROA not before:           Wed 28 Feb 2024 19:15:20 +0000
ROA not after:            Wed 26 Feb 2025 19:20:20 +0000
asID:                     268921
IP address blocks:        45.175.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:83:35:ef:d6:05:72:c5:7b:49:e5:0e:e9:96:07:c9:56:c4:7e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
        Validity
            Not Before: Feb 28 19:15:20 2024 GMT
            Not After : Feb 26 19:20:20 2025 GMT
        Subject: CN=D65753FBE502AE13188ADECF191EB46788C260E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d9:71:42:16:eb:18:fb:a6:5c:f1:cc:c4:8c:
                    83:c9:0e:2a:40:b8:a2:31:5c:19:04:17:76:7b:8d:
                    ac:22:b8:98:6d:f3:c2:88:4f:6d:fb:bf:13:e5:87:
                    08:ca:1a:34:34:ae:03:74:44:9f:d7:8b:ed:cc:ab:
                    aa:87:93:b5:ea:a2:51:27:e3:8a:94:14:c5:65:22:
                    f3:54:03:a2:78:9e:e4:ec:cf:b0:1b:68:32:d6:07:
                    53:48:43:78:a8:65:36:e3:ed:da:b5:08:26:11:cb:
                    85:0b:17:3b:aa:92:f9:94:1f:36:cd:e2:cd:72:f6:
                    d0:52:ae:a5:19:dd:2b:a1:e1:0f:78:77:c6:3d:b8:
                    42:6a:02:f1:ed:9b:a7:b0:71:f4:9f:c6:b2:e5:67:
                    64:76:58:6f:ff:3c:3a:e1:54:80:48:f3:b5:42:98:
                    6a:d6:14:f1:a5:2f:2f:9e:fc:6b:54:92:b5:8a:a4:
                    9c:fe:ad:8b:71:fd:a3:07:e0:56:02:79:3f:fd:4b:
                    ac:2c:4d:34:99:0a:74:80:1e:34:81:80:89:ab:2e:
                    e8:a4:c3:08:fc:ea:72:d2:2c:bb:fc:77:08:94:25:
                    eb:58:cf:5d:e7:2c:57:82:bf:78:db:64:fd:10:e6:
                    3e:03:72:39:5b:94:48:7d:f4:fb:4b:e8:34:b2:11:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:53:FB:E5:02:AE:13:18:8A:DE:CF:19:1E:B4:67:88:C2:60:E6
            X509v3 Authority Key Identifier:
                keyid:BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230352e302f32342d3234203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:14:5b:62:6c:ec:71:e5:cd:01:f8:ac:44:63:c4:76:ef:e0:
         a3:61:98:1b:5b:ab:4a:c6:c5:a0:76:d4:9f:1d:61:85:54:cb:
         81:ef:18:28:56:e3:59:f8:1f:e0:b0:b2:a6:df:74:e7:53:41:
         36:8f:1f:9a:81:f9:c7:2c:79:7b:2b:6c:4c:0a:f6:bd:08:31:
         a1:70:ee:eb:83:55:b2:e4:4e:f6:15:51:ab:66:c1:f3:01:29:
         91:43:20:e6:2c:80:8b:fc:09:3e:ac:bb:a2:17:f0:7e:2b:1d:
         8f:4e:e2:9b:12:6e:92:d3:22:2f:a2:11:21:41:50:36:34:4c:
         b3:1b:29:02:bf:e0:be:cd:2f:37:77:10:d0:de:56:d3:16:2d:
         7b:c1:bc:81:96:1f:86:77:75:88:b5:05:63:cb:37:a1:47:35:
         1e:a3:a7:20:55:c9:97:11:0a:5a:2d:42:8b:45:e9:13:ab:e7:
         85:33:e4:f0:a1:75:99:2b:ea:43:1e:92:d7:58:2d:06:cd:06:
         f7:b8:8f:c0:48:37:d7:9e:69:8a:f5:c1:b6:64:12:97:1b:93:
         37:69:43:5e:40:2d:cb:e4:d5:72:90:54:c3:48:ba:50:a3:1b:
         44:2d:a7:02:e1:9a:df:21:5c:6e:8c:fe:d7:3c:18:33:0c:ad:
         0d:02:67:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org