Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39342e302f32332d3233203d3e20323638353137.roa
File:                     34352e3136322e39342e302f32332d3233203d3e20323638353137.roa (raw, json)
Hash identifier:          id9nSWWnSc+E1QWz75t8fVhGwP128XZyIA8f026jcjw=
Subject key identifier:   1A:50:0E:5B:E3:CE:CB:A3:C6:1B:B1:DF:18:36:CC:01:D9:8F:6E:3A
Certificate issuer:       /CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Certificate serial:       33EFD7F0AB960A694BE61DD5B3E3233C0A4D106C
Authority key identifier: D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39342e302f32332d3233203d3e20323638353137.roa
Signing time:             Thu 11 Apr 2024 01:29:38 +0000
ROA not before:           Thu 11 Apr 2024 01:24:38 +0000
ROA not after:            Thu 10 Apr 2025 01:29:38 +0000
asID:                     268517
IP address blocks:        45.162.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ef:d7:f0:ab:96:0a:69:4b:e6:1d:d5:b3:e3:23:3c:0a:4d:10:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D029A3E7478998493D96D0D6B9C212CDC5530659
        Validity
            Not Before: Apr 11 01:24:38 2024 GMT
            Not After : Apr 10 01:29:38 2025 GMT
        Subject: CN=1A500E5BE3CECBA3C61BB1DF1836CC01D98F6E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:75:c2:bc:ca:00:f3:ff:f6:53:e7:6f:fd:
                    24:53:eb:72:8f:c9:31:81:1d:69:ba:58:d2:61:a7:
                    57:50:75:04:2b:38:d8:31:c9:b7:99:15:47:fb:7c:
                    04:92:71:ca:30:4f:00:3e:54:6f:57:00:fe:7c:5c:
                    a8:07:1b:d2:d7:4c:38:fa:85:61:f5:2d:8d:3c:59:
                    d5:3a:41:86:db:df:ce:a1:b8:34:3a:2a:a1:65:3b:
                    30:f8:1c:1a:c9:e0:5c:71:43:f3:6b:d2:af:62:89:
                    da:ae:44:a7:b8:83:1f:16:ee:65:34:31:88:0b:89:
                    fb:1b:c5:ca:ce:21:57:2b:43:14:63:7e:64:1f:60:
                    2f:ab:90:32:79:60:de:4f:25:c5:67:44:fc:c3:13:
                    d1:0b:97:e8:0f:31:99:d5:d4:c0:60:00:20:00:4a:
                    f4:d4:9c:eb:3b:c0:25:c3:bc:35:ae:db:9c:b1:7d:
                    40:c6:79:b4:09:9e:31:0e:cc:1a:2f:2b:25:5f:7a:
                    94:72:56:af:c9:7a:c4:f6:6f:bd:41:ef:a6:91:a7:
                    c3:b8:24:5b:73:db:e3:4a:52:37:93:30:c4:77:aa:
                    a2:cb:e0:a1:7e:b7:60:fc:67:52:4d:04:87:9c:67:
                    44:ee:ea:d7:71:87:06:71:3a:34:e0:6c:a6:6c:33:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:50:0E:5B:E3:CE:CB:A3:C6:1B:B1:DF:18:36:CC:01:D9:8F:6E:3A
            X509v3 Authority Key Identifier:
                keyid:D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/D029A3E7478998493D96D0D6B9C212CDC5530659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39342e302f32332d3233203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:1b:26:8e:29:66:d3:e3:7b:2b:36:70:61:c4:46:17:ae:45:
         89:e9:e9:fc:f2:2a:a8:2a:03:79:bb:ed:27:f8:9e:db:d1:5a:
         bf:52:5a:12:f8:1a:67:a2:dd:18:08:97:b5:94:40:d5:f7:b3:
         36:b2:ae:ae:72:9f:62:17:6a:ac:2b:47:e7:bd:1e:d1:73:97:
         b9:b0:e9:a1:8a:83:e9:d0:96:ab:95:26:5d:9b:8c:43:29:55:
         79:8c:68:eb:90:cc:c0:95:1a:df:ea:f8:fe:94:76:de:77:8d:
         a4:70:6c:06:15:a7:60:c5:95:ea:d0:29:1e:fd:1c:db:e5:8d:
         f3:81:6d:6f:5d:9e:0d:30:1f:93:e3:b2:89:39:90:b2:c8:2a:
         34:df:6b:86:a7:25:a0:c9:7d:c1:13:43:20:cb:d5:66:b1:54:
         3b:f8:37:c5:d7:e8:48:32:83:f4:32:b5:85:0f:aa:11:ee:5e:
         a1:e7:aa:cf:78:9f:50:a1:1e:69:d4:d1:5e:88:6f:ff:94:f3:
         eb:89:85:77:ba:8c:4f:45:69:44:5b:40:99:39:82:79:06:0b:
         40:0f:a3:42:33:5a:67:7f:60:c9:f5:00:86:5d:5c:be:19:f0:
         d8:71:d7:4e:e6:e0:50:f2:ea:80:ed:d0:95:52:7b:84:a4:16:
         cd:c5:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org