Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3234203d3e20323636303430.roa
File:                     34352e342e35322e302f32322d3234203d3e20323636303430.roa (raw, json)
Hash identifier:          9QkC0qkr9sNZ6E+clG6HWfxxjyWHrAW8aEEtDn0vLQE=
Subject key identifier:   15:9C:4A:8C:62:6A:10:FF:CA:4D:29:9A:2F:FE:DA:4D:C5:11:8B:3C
Certificate issuer:       /CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
Certificate serial:       6A97963FBA7AE3D808E63A894DB504494BD78E62
Authority key identifier: 18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3234203d3e20323636303430.roa
Signing time:             Tue 05 Mar 2024 15:25:32 +0000
ROA not before:           Tue 05 Mar 2024 15:20:32 +0000
ROA not after:            Tue 04 Mar 2025 15:25:32 +0000
asID:                     266040
IP address blocks:        45.4.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:97:96:3f:ba:7a:e3:d8:08:e6:3a:89:4d:b5:04:49:4b:d7:8e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186100CD22AE8C45D9A5ECA2F927E59970780DB1
        Validity
            Not Before: Mar  5 15:20:32 2024 GMT
            Not After : Mar  4 15:25:32 2025 GMT
        Subject: CN=159C4A8C626A10FFCA4D299A2FFEDA4DC5118B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:f2:99:3d:dd:31:34:ce:fe:78:db:01:f3:
                    3d:c7:7c:16:24:a2:3f:28:b7:08:bf:04:48:60:43:
                    ac:c2:7d:ca:b4:f5:d4:78:2e:ea:ea:b4:40:67:0e:
                    f0:cc:c4:44:5b:49:11:c8:4a:fe:da:61:36:d9:4f:
                    fd:6f:83:44:88:54:62:41:ec:74:42:bb:81:58:67:
                    ee:d7:af:9d:13:40:73:d3:91:a9:2a:65:46:a5:9a:
                    1b:50:33:b6:7e:24:9e:e4:79:6c:d4:11:45:1a:63:
                    b6:32:0a:64:33:70:d0:3a:71:5a:58:94:2c:2f:e7:
                    c6:74:12:b0:b2:23:3a:a1:94:94:c6:fd:77:fb:48:
                    e7:92:12:89:6a:05:9e:7c:bc:ef:11:6e:b9:31:5c:
                    33:2c:f8:b3:54:dc:63:61:f4:a6:15:3d:0f:6e:e2:
                    84:dd:3b:b4:26:c7:eb:fa:61:44:7b:ae:bf:47:a8:
                    07:3f:96:47:b0:8d:cb:47:cf:f3:bd:03:75:24:30:
                    93:87:be:1c:21:60:43:da:44:27:49:7a:fd:9b:e3:
                    0a:e5:58:01:1f:5c:40:5c:ce:6c:d9:b6:34:80:94:
                    94:a4:c5:76:20:f0:22:47:cc:1c:e7:a5:f4:45:f3:
                    94:b9:7d:cc:7a:a7:15:ca:27:d0:53:a7:1a:2f:4d:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9C:4A:8C:62:6A:10:FF:CA:4D:29:9A:2F:FE:DA:4D:C5:11:8B:3C
            X509v3 Authority Key Identifier:
                keyid:18:61:00:CD:22:AE:8C:45:D9:A5:EC:A2:F9:27:E5:99:70:78:0D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/186100CD22AE8C45D9A5ECA2F927E59970780DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4xF3cSxu6c7mocvCZyJcjC9eZGby3MzRwH172ouRwRQ/0/34352e342e35322e302f32322d3234203d3e20323636303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:5c:d3:4e:84:c2:4e:fc:53:1e:b4:3a:2b:1e:29:3e:48:
         b7:61:18:b1:61:61:c9:de:29:82:65:d8:a4:0d:8a:87:c6:2d:
         7f:6a:82:86:9c:06:e4:dd:15:f8:3e:d1:a4:cf:2f:c6:7c:51:
         6c:4e:27:a6:b5:e1:40:13:cb:d9:63:bf:bc:1c:bf:ad:7b:8d:
         06:6a:16:8d:ab:29:b0:64:3c:f3:38:11:7b:c7:1c:52:19:a7:
         89:be:07:02:4e:99:e0:bf:3e:23:5c:2c:dc:bf:bf:17:91:e3:
         a4:17:6e:cb:8c:e4:cb:e5:49:f6:17:61:26:ce:60:f8:40:31:
         16:47:57:08:65:d0:cc:49:30:ff:93:6f:76:34:f4:e8:d1:97:
         ca:2d:b1:47:6f:de:b8:d0:b0:4c:a1:d8:f7:14:e6:bb:7d:65:
         18:cf:ca:11:9d:c7:c2:c3:d9:b9:4e:94:64:59:8f:5b:2f:b7:
         8e:3d:f7:8e:44:b9:f1:a1:f0:ba:71:c1:a8:aa:cf:8e:ee:a1:
         c8:d0:5e:f9:91:9e:7f:96:a0:25:fd:42:fe:1f:2e:ba:19:1c:
         54:ae:4e:6b:2e:11:70:ed:96:a9:68:7f:97:0e:ae:67:bc:f0:
         bc:63:76:70:25:a9:4a:16:e2:64:3f:72:40:d6:42:bc:a3:17:
         a5:fa:b2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org