Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3137352e3235302e302f32332d3233203d3e20323639303936.roa
File:                     34352e3137352e3235302e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          cl5YS58mAet8jB2iO8gcVUIVpkIwSksW4y2jC546ItA=
Subject key identifier:   29:55:5E:3B:D2:A3:33:34:72:A1:96:E6:D5:E0:C8:FA:06:55:FB:F0
Certificate issuer:       /CN=824C1C971930641F52CF76D6607DED5BB03BA15F
Certificate serial:       718B228EA9F04AFB9F91553266B68DAA60A0589E
Authority key identifier: 82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3137352e3235302e302f32332d3233203d3e20323639303936.roa
Signing time:             Wed 05 Apr 2023 15:01:29 +0000
ROA not before:           Wed 05 Apr 2023 14:56:29 +0000
ROA not after:            Wed 03 Apr 2024 15:01:29 +0000
asID:                     269096
IP address blocks:        45.175.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8b:22:8e:a9:f0:4a:fb:9f:91:55:32:66:b6:8d:aa:60:a0:58:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824C1C971930641F52CF76D6607DED5BB03BA15F
        Validity
            Not Before: Apr  5 14:56:29 2023 GMT
            Not After : Apr  3 15:01:29 2024 GMT
        Subject: CN=29555E3BD2A3333472A196E6D5E0C8FA0655FBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:70:8d:7e:f9:54:22:61:00:49:3f:ae:ca:22:
                    aa:45:f2:fc:8b:a5:66:06:02:0f:d7:e7:0e:bd:95:
                    e1:75:5d:88:80:90:0e:51:1f:aa:60:32:bc:38:85:
                    0e:ab:47:81:17:b3:32:3b:d0:ef:b9:2e:a1:c5:96:
                    ad:22:4d:81:87:3a:71:95:57:a8:80:0d:b6:28:12:
                    ba:21:d2:08:8c:60:50:17:f5:ce:ec:06:13:e9:83:
                    f9:85:49:80:28:9c:8e:62:89:86:ad:1f:b8:e0:76:
                    af:4b:a7:e7:48:c6:48:9a:d8:e2:ea:40:5c:e4:6c:
                    24:45:97:2d:04:da:aa:32:ad:91:29:2f:3f:48:63:
                    8a:63:5c:ed:a3:cc:74:22:b5:92:87:d0:ff:b5:c4:
                    b6:b9:52:f3:a1:79:db:9c:83:52:ee:1a:94:e4:58:
                    56:19:48:69:32:03:96:9f:ac:91:77:c7:8d:be:0d:
                    0e:bb:d7:87:d0:91:86:49:50:49:a0:d6:a2:5d:c0:
                    37:5c:03:9b:4a:27:d3:f7:94:3e:83:09:13:d4:9d:
                    a6:7a:71:0e:1f:84:d5:5c:a2:e9:e7:c5:40:77:29:
                    8e:49:d2:33:0e:eb:1e:32:bf:05:bf:46:61:21:8f:
                    90:bf:6e:16:6d:28:ec:41:b7:cf:77:76:54:5f:34:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:55:5E:3B:D2:A3:33:34:72:A1:96:E6:D5:E0:C8:FA:06:55:FB:F0
            X509v3 Authority Key Identifier:
                keyid:82:4C:1C:97:19:30:64:1F:52:CF:76:D6:60:7D:ED:5B:B0:3B:A1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/824C1C971930641F52CF76D6607DED5BB03BA15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/824C1C971930641F52CF76D6607DED5BB03BA15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/1/34352e3137352e3235302e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:d9:f6:bd:c0:49:da:5a:26:8f:7f:e5:08:9b:28:d2:62:
         e8:e4:db:ed:dc:e6:0b:c1:72:2b:c2:8f:4b:7d:f5:d2:ec:63:
         8b:d1:a5:e1:3d:98:b0:34:e5:e4:1b:f3:70:6c:04:63:ef:9d:
         8a:4e:6e:8e:68:3f:04:41:74:61:61:ef:11:d4:af:e8:ef:77:
         73:34:3c:2b:f6:08:1d:d4:81:56:27:f4:a3:d9:ff:ad:86:61:
         62:9b:02:d7:0f:02:f7:1f:fa:5e:2d:4f:68:1d:66:e3:7f:73:
         9a:31:26:f8:e1:42:11:83:cc:95:6a:22:e2:e8:26:ba:69:ea:
         12:35:9b:6c:dd:ce:7b:e7:2b:dd:3d:2c:0d:03:09:d5:64:08:
         bd:d7:4e:bd:b1:58:7a:70:ce:3a:66:45:aa:b5:2d:55:a1:4a:
         ec:78:52:c5:ae:08:d6:8b:b1:97:0a:02:0c:47:f7:0a:7b:a5:
         d8:5c:92:ae:ae:50:d1:cb:66:a1:f2:ae:3f:86:cb:43:47:67:
         f2:a1:ab:c1:f8:da:6a:4f:0e:dc:a3:21:c7:e5:2e:47:64:69:
         17:93:a1:69:4a:de:03:58:14:c2:f2:e8:0f:d7:6b:52:cd:d7:
         e8:2f:7a:43:c8:12:b5:ab:cb:8d:d1:33:a5:4f:ce:f7:5c:12:
         3d:5d:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org