Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230362e302f32342d3234203d3e20323638393231.roa
File:                     34352e3137352e3230362e302f32342d3234203d3e20323638393231.roa (raw, json)
Hash identifier:          teQXysiuBRQNENZMjQWcZzNM64uQhkooiwSFdIDYaIU=
Subject key identifier:   76:87:5B:F1:BA:0B:EA:C0:7C:08:D9:6F:F4:EC:6D:B3:50:4C:B0:60
Certificate issuer:       /CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
Certificate serial:       029B97089994B1A5292F6A13658AEF2827A9F5C9
Authority key identifier: BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230362e302f32342d3234203d3e20323638393231.roa
Signing time:             Wed 28 Feb 2024 19:20:20 +0000
ROA not before:           Wed 28 Feb 2024 19:15:20 +0000
ROA not after:            Wed 26 Feb 2025 19:20:20 +0000
asID:                     268921
IP address blocks:        45.175.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9b:97:08:99:94:b1:a5:29:2f:6a:13:65:8a:ef:28:27:a9:f5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4115F10F57B5ED0D0885E19BE03B776A14AF61
        Validity
            Not Before: Feb 28 19:15:20 2024 GMT
            Not After : Feb 26 19:20:20 2025 GMT
        Subject: CN=76875BF1BA0BEAC07C08D96FF4EC6DB3504CB060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:ed:b6:9a:36:5a:1f:bf:76:ab:a9:fe:c7:
                    76:9a:4e:bc:ce:8b:a8:32:26:c0:23:f1:d7:36:c2:
                    fb:a2:33:93:74:fd:f5:b1:40:12:9c:9d:61:cd:8e:
                    0b:1d:b1:1b:19:ed:2f:5f:c4:c3:f4:d5:0a:d9:46:
                    e8:71:b2:a7:7a:88:f7:d9:3d:c7:b6:aa:21:51:26:
                    4c:b2:e4:3e:39:ec:52:64:b4:0f:80:16:70:1d:44:
                    d6:75:78:3a:de:f4:ae:ae:17:36:3c:0b:d3:21:49:
                    e5:f7:2b:24:21:18:b8:83:3b:44:17:e4:2f:c9:82:
                    14:22:25:4e:bd:6a:b1:42:3f:0e:82:3b:28:53:cb:
                    7f:d2:d3:ce:47:a2:e9:fa:76:ac:2f:73:bd:b4:50:
                    32:d1:f6:29:c9:f9:09:8e:02:c7:e7:55:f3:26:db:
                    a2:f4:2d:3f:59:09:0e:08:96:13:3e:1b:7e:09:95:
                    70:bf:e4:8a:c8:53:b7:4c:22:12:9e:ac:b4:45:c2:
                    63:d8:c8:83:8d:f1:47:2d:0a:f9:54:ca:a0:7d:a2:
                    3a:d1:4c:8e:8e:9e:5d:b2:db:0c:d4:e3:86:51:43:
                    98:0f:a3:c2:d2:cd:5b:52:bf:45:d7:bf:73:ae:f0:
                    8b:a7:88:d6:fe:ba:32:6f:02:ea:a3:08:f3:1e:2b:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:87:5B:F1:BA:0B:EA:C0:7C:08:D9:6F:F4:EC:6D:B3:50:4C:B0:60
            X509v3 Authority Key Identifier:
                keyid:BA:41:15:F1:0F:57:B5:ED:0D:08:85:E1:9B:E0:3B:77:6A:14:AF:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA4115F10F57B5ED0D0885E19BE03B776A14AF61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiWJLKQk4sg3bCc2y4XQc6WUaGi3kfAhnW47XdJBXEft/0/34352e3137352e3230362e302f32342d3234203d3e20323638393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a7:e5:b9:83:93:7a:a1:d9:3d:f4:3a:6d:2b:cb:e9:db:be:
         1a:7b:03:56:bc:bd:d8:e5:c8:b0:56:1a:33:0f:52:dc:79:96:
         eb:ce:d7:64:a8:38:2f:86:8a:fe:ac:07:8b:fb:95:13:63:d5:
         cc:78:19:56:f9:2c:d8:dc:02:79:ec:01:68:97:07:43:f6:5b:
         c5:32:e9:af:d9:d2:43:b2:13:00:0b:c7:10:b1:67:8b:a8:01:
         de:16:3d:4b:75:eb:1a:3f:ac:02:1b:88:0d:f9:f0:bd:32:c8:
         6e:dc:cc:5e:a2:52:d3:1f:f9:cb:85:dc:0f:e9:8b:a4:e7:f9:
         ea:1a:8b:27:26:98:5b:99:6e:4a:36:1d:c8:bf:dd:45:8a:e1:
         6d:20:be:e5:4f:3c:d4:24:e2:6e:33:44:da:f4:20:d4:e4:cc:
         00:7a:a0:0e:8a:68:4b:2b:21:c7:15:d4:c6:ae:84:e7:2e:68:
         6e:5c:13:b9:0d:fb:72:4f:6d:f0:30:04:be:e8:5e:df:ba:f5:
         3b:28:a7:73:3e:fd:8f:c1:b1:86:ee:22:c2:26:27:84:5b:78:
         ba:04:a5:0a:dd:0b:d2:73:bc:70:43:20:55:dd:90:12:2e:87:
         5f:bd:fa:8c:13:3a:25:b9:d8:e6:01:17:ad:1d:51:9c:df:1f:
         7b:c9:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org