Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3137352e3234382e302f32332d3233203d3e20323639303936.roa
File:                     34352e3137352e3234382e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          oHgzp4/JAQGYiCczN19eLU2B3pZXb5Upi4I58PHc4i8=
Subject key identifier:   94:2F:55:54:06:BF:B2:B7:27:8C:68:F8:CB:6C:93:20:F5:9E:A0:0A
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       5F662A6D60B8E039C19A5A0C18912BC7484140CC
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3137352e3234382e302f32332d3233203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 15:01:31 +0000
ROA not before:           Wed 05 Apr 2023 14:56:31 +0000
ROA not after:            Wed 03 Apr 2024 15:01:31 +0000
asID:                     269096
IP address blocks:        45.175.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:66:2a:6d:60:b8:e0:39:c1:9a:5a:0c:18:91:2b:c7:48:41:40:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 14:56:31 2023 GMT
            Not After : Apr  3 15:01:31 2024 GMT
        Subject: CN=942F555406BFB2B7278C68F8CB6C9320F59EA00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:4a:ff:b6:f8:f9:c0:63:60:9c:77:35:2c:
                    85:24:4f:76:0e:de:1c:77:6a:da:e6:e3:50:87:b4:
                    60:cd:67:6a:7e:32:50:90:3e:d9:ac:24:a0:77:9e:
                    27:a1:5f:e4:00:82:e2:0a:4f:c6:7d:d0:10:78:a2:
                    95:5c:49:83:7c:30:28:01:60:ac:ab:e7:87:fd:3c:
                    b5:be:b1:40:a4:08:99:7d:96:45:cf:69:cf:1b:3b:
                    3b:29:4f:cb:5e:cd:1f:61:2d:7f:b7:47:df:33:29:
                    f4:35:b4:dc:8e:37:8d:8a:e2:d9:a9:ae:45:c9:fa:
                    6f:80:63:f9:ec:42:54:75:55:6c:3a:95:29:0d:6d:
                    b3:93:23:79:64:ce:d8:58:68:5b:62:f3:40:a9:db:
                    7f:11:04:8a:41:a8:56:21:29:c0:be:86:79:18:15:
                    ed:5d:d1:91:a0:98:64:6b:5f:84:a8:f4:37:81:45:
                    de:07:c3:8e:12:1c:ae:63:58:3f:46:be:09:78:04:
                    11:8b:a0:2d:6f:cb:66:71:5c:4e:b1:55:27:ce:8c:
                    10:73:54:aa:70:68:6a:46:24:da:35:80:8f:3c:82:
                    c4:8c:5b:61:ad:47:98:66:a6:1d:6c:81:f2:65:da:
                    3e:f3:1e:6c:22:03:95:7a:b8:a6:2e:aa:09:c7:65:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2F:55:54:06:BF:B2:B7:27:8C:68:F8:CB:6C:93:20:F5:9E:A0:0A
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3137352e3234382e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:95:1d:3a:46:d7:39:b4:23:95:01:aa:27:50:9e:30:25:f8:
         2f:ad:ae:97:75:1c:7e:40:87:90:b6:59:68:ff:8a:20:f9:3b:
         81:c3:e3:fc:eb:1e:90:e9:33:02:58:38:0d:e6:2a:8e:fa:33:
         1e:44:da:9b:92:06:c4:bd:21:21:2c:2f:72:bf:28:86:01:a5:
         64:c7:dc:d8:3b:df:2d:55:9e:c0:37:eb:11:36:e9:1b:b3:d4:
         b0:6e:49:ef:4d:61:c5:51:ec:58:49:ce:8c:3f:69:9a:4c:49:
         5c:1d:b6:4e:b3:e9:42:13:66:c6:7c:99:82:3d:10:d4:51:94:
         c1:25:0d:4a:37:c1:44:49:7a:49:4e:bd:d6:83:21:54:c0:4f:
         74:8c:f8:e8:fc:7f:6b:ca:0a:85:0d:40:b1:31:c9:13:f8:53:
         2e:db:ab:84:ca:1a:f6:36:4a:98:67:55:8e:cb:e7:54:4a:7c:
         16:21:94:e2:e2:ec:89:2c:b4:2a:9c:3a:ea:48:c7:00:ca:1f:
         27:eb:2c:e7:5f:51:94:65:6a:22:32:a2:61:ac:f3:5d:26:de:
         9e:a0:d2:1c:53:54:75:8d:7e:10:62:3a:a5:82:81:17:54:97:
         93:ba:b7:8d:11:0c:2b:99:fa:77:4f:1f:90:45:9b:1f:2e:9f:
         59:e7:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org