Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132312e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132312e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          qzGHOJ63yIXKYwuuNxDI0ySyq7TpwVQtQaXSzGEoin4=
Subject key identifier:   FA:A1:AE:00:FC:59:18:10:61:31:D2:AF:B9:13:F0:75:04:4A:94:A5
Certificate issuer:       /CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
Certificate serial:       313C05E9CA9434BFF00905EA94D2D28E188DD5C5
Authority key identifier: D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132312e302f32342d3234203d3e20323639343233.roa
Signing time:             Wed 03 Apr 2024 22:27:40 +0000
ROA not before:           Wed 03 Apr 2024 22:22:40 +0000
ROA not after:            Wed 02 Apr 2025 22:27:40 +0000
asID:                     269423
IP address blocks:        45.186.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3c:05:e9:ca:94:34:bf:f0:09:05:ea:94:d2:d2:8e:18:8d:d5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
        Validity
            Not Before: Apr  3 22:22:40 2024 GMT
            Not After : Apr  2 22:27:40 2025 GMT
        Subject: CN=FAA1AE00FC5918106131D2AFB913F075044A94A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:99:47:14:b4:a6:5e:e2:4f:68:4e:b8:4b:
                    86:ec:89:f3:6c:de:df:54:25:07:3e:c3:cf:71:f4:
                    c8:ed:54:d1:29:07:34:59:43:3b:a2:5e:bb:b4:6d:
                    b4:91:32:38:29:cb:71:d7:9d:4b:3a:5e:e2:e4:7c:
                    29:f2:d9:a1:94:0c:fe:9c:0a:f7:64:a0:55:4f:45:
                    73:55:7e:fb:6c:2f:87:fe:a6:06:fe:54:81:8d:62:
                    69:2e:5a:c3:e4:6e:3e:7a:e2:37:d5:4c:c4:6f:e2:
                    f1:0c:32:63:28:fa:75:6c:44:ea:d6:84:0b:75:65:
                    11:8f:40:7a:33:f4:1e:44:e8:15:11:f4:37:ab:4b:
                    3a:a2:31:dd:d1:7e:92:a7:b6:57:5a:e9:f6:d5:42:
                    7b:1a:63:32:f4:d3:07:3f:af:d3:35:0f:92:12:d1:
                    5f:fc:99:e4:bf:f6:14:b7:a3:87:df:71:86:22:92:
                    c3:ba:ad:4a:02:c1:cd:1c:4f:cb:9e:2a:3e:de:9e:
                    46:e7:53:e0:53:17:8b:0d:50:39:e8:c3:0b:da:ea:
                    c4:dc:17:a3:c8:46:41:6e:1c:58:4d:34:65:0a:c1:
                    ba:b9:f8:a8:ea:75:3d:b0:86:86:30:98:f2:0e:7f:
                    5c:75:f1:b3:05:b1:d3:b6:12:f0:fc:8c:d7:08:0d:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A1:AE:00:FC:59:18:10:61:31:D2:AF:B9:13:F0:75:04:4A:94:A5
            X509v3 Authority Key Identifier:
                keyid:D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/D037231865C4494DAE0A707D2C8705DFEDDA26FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132312e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:65:b3:be:8e:b7:19:91:fd:6e:7c:ab:64:ff:a9:7e:79:
         e0:2d:b3:16:a9:eb:0d:d9:e1:be:79:6f:8e:d1:9a:28:2a:68:
         de:b2:44:f3:3e:c7:2a:8c:49:3e:39:4c:3d:eb:e3:9e:2e:16:
         c1:5e:ff:1e:6b:bf:81:86:d0:ff:17:3f:1f:8b:66:bc:d9:fc:
         ea:db:5c:21:3f:53:13:20:08:5c:e9:fd:f7:97:14:66:9d:5e:
         37:11:cd:6a:04:27:7b:ac:29:b8:80:9b:60:a1:27:ee:cb:2d:
         21:6d:55:1c:f3:b2:df:7f:a6:23:a7:d3:97:d6:53:cd:9f:30:
         cd:29:f9:90:7a:67:f8:e1:b3:e3:81:f1:ed:f5:06:89:19:5e:
         76:76:72:43:78:2f:62:67:c4:72:41:32:cc:d8:25:6d:b4:6a:
         f2:45:11:ed:52:7f:fa:b1:87:4d:bd:d1:6e:5d:d3:f8:6f:65:
         0a:b7:9a:ab:d9:25:94:2a:5c:5e:00:a3:cc:7f:df:5f:3e:fe:
         12:c0:f3:51:3f:0e:1e:e0:82:7e:31:15:d3:6a:fa:1f:16:11:
         7a:d1:d6:c5:dd:d2:99:8f:bf:76:22:6b:eb:c8:91:39:68:17:
         74:7a:b4:5d:3e:d9:22:bf:e9:e7:fe:96:9d:cc:45:6f:7f:3b:
         69:3c:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org