Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa
File:                     34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa (raw, json)
Hash identifier:          9dH2Sw2CwySWvqUoxxLAp49pNG8bEZ0xjr0WjeYSzM0=
Subject key identifier:   6C:1A:F2:CC:D0:9A:02:33:51:27:F2:3D:50:D6:85:FD:5D:07:E8:C9
Certificate issuer:       /CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
Certificate serial:       1AF9A5788B629DFD5764564BC305A6BFA37E6A2D
Authority key identifier: 44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa
Signing time:             Thu 18 Jan 2024 19:00:00 +0000
ROA not before:           Thu 18 Jan 2024 18:55:00 +0000
ROA not after:            Thu 16 Jan 2025 19:00:00 +0000
asID:                     268732
IP address blocks:        45.171.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f9:a5:78:8b:62:9d:fd:57:64:56:4b:c3:05:a6:bf:a3:7e:6a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F1E4B94FF224CCCBA4BB09DE960E59459274F5
        Validity
            Not Before: Jan 18 18:55:00 2024 GMT
            Not After : Jan 16 19:00:00 2025 GMT
        Subject: CN=6C1AF2CCD09A02335127F23D50D685FD5D07E8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:8b:39:e4:71:cd:61:5a:44:cf:cc:57:f3:
                    45:15:1a:c0:d2:61:35:e3:7f:f0:3e:81:c5:28:ca:
                    e2:26:7e:af:2c:67:31:61:58:2a:b2:19:4b:93:56:
                    72:e1:56:b4:5d:be:4b:3d:a2:64:23:80:a6:d5:40:
                    d3:de:4b:62:bb:23:d3:58:de:66:b2:c1:f6:ff:db:
                    e0:fe:2d:da:8f:e9:66:01:97:41:96:8f:68:42:67:
                    eb:cf:9f:d1:06:26:ad:16:78:2d:d9:72:d6:41:05:
                    47:6c:a8:5b:45:80:97:2a:58:2b:31:a6:55:70:97:
                    51:e1:f8:36:63:07:fb:ff:b4:16:6f:7e:07:e3:d3:
                    87:ea:d0:fd:2a:b2:a7:36:0a:be:9a:76:9c:8c:d3:
                    f4:e9:83:17:fb:ee:74:a1:04:97:e4:a9:97:04:d7:
                    d3:63:95:4f:ca:2d:05:cd:fd:4d:c0:a6:b9:07:48:
                    05:cb:f9:b3:b1:08:c0:a5:59:05:c9:d6:8f:38:a0:
                    4d:a0:31:1d:54:b4:6f:da:b8:02:7f:1f:d6:9d:f5:
                    42:eb:3b:4f:16:c4:de:66:f9:0e:d2:a2:f6:e6:93:
                    87:42:60:a0:d1:91:80:d8:9d:78:05:19:e5:c3:c1:
                    ea:3e:87:4f:40:9e:5a:c5:60:00:11:1e:d7:91:0d:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1A:F2:CC:D0:9A:02:33:51:27:F2:3D:50:D6:85:FD:5D:07:E8:C9
            X509v3 Authority Key Identifier:
                keyid:44:F1:E4:B9:4F:F2:24:CC:CB:A4:BB:09:DE:96:0E:59:45:92:74:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44F1E4B94FF224CCCBA4BB09DE960E59459274F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/0/34352e3137312e3231362e302f32342d3234203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b7:a0:e4:c5:57:33:22:ea:97:01:72:47:38:07:76:12:ad:
         0d:f2:dc:be:2e:bf:41:eb:1d:ba:86:7a:e8:14:0f:ca:34:cb:
         84:6c:5f:8f:cb:27:19:7b:02:fb:31:0c:c3:75:39:ea:92:2f:
         ff:40:92:e4:ba:65:1f:b7:7e:3f:06:94:23:bb:73:ff:00:8c:
         d6:7a:c1:ef:33:12:8b:f1:d4:e4:08:c7:f6:21:bf:6b:0f:3f:
         fc:d5:aa:46:a0:5d:fb:4d:3c:e6:e4:6e:3d:e0:6f:ec:99:f6:
         9f:84:2b:0a:4f:da:a8:42:71:88:4a:71:a7:97:9d:f7:a5:bc:
         17:1d:2f:06:d9:0d:90:fc:a3:c8:42:4a:de:00:26:1d:60:b3:
         e4:4a:ee:3c:ce:be:19:ee:bd:a5:48:03:62:8d:b7:7a:ac:40:
         32:22:2d:c8:fe:d6:2d:b6:7d:32:a5:59:bc:82:07:04:e9:e3:
         ca:23:73:4f:9b:97:57:80:18:90:79:ce:25:73:92:3e:cf:51:
         96:1b:e7:bf:e6:4a:cf:91:3f:bb:71:00:69:b1:3d:d4:f3:20:
         28:c8:32:98:ba:d6:82:45:ea:a2:d6:d1:cd:b1:fc:77:bb:8b:
         10:33:2f:dc:c8:f5:37:c2:47:99:c1:77:42:9a:dc:ee:bf:77:
         5d:b8:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org