Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          J20Q1C4hSZyYfEZdfU0YZ9keDBGrI0kHk1tArk5ddSo=
Subject key identifier:   54:F9:69:99:BD:59:AB:D7:EB:BF:C3:F2:CB:D5:D9:9F:FB:C6:CB:FA
Certificate issuer:       /CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
Certificate serial:       10FB14EEB1BE2C70FB5306EE0E2DD9246E34ABE9
Authority key identifier: 30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 04 Sep 2023 20:35:09 +0000
ROA not before:           Mon 04 Sep 2023 20:30:09 +0000
ROA not after:            Mon 02 Sep 2024 20:35:09 +0000
asID:                     268746
IP address blocks:        45.171.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fb:14:ee:b1:be:2c:70:fb:53:06:ee:0e:2d:d9:24:6e:34:ab:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3014053C58ECABA7850A00C558FB42CE2C0FC6CC
        Validity
            Not Before: Sep  4 20:30:09 2023 GMT
            Not After : Sep  2 20:35:09 2024 GMT
        Subject: CN=54F96999BD59ABD7EBBFC3F2CBD5D99FFBC6CBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:ac:79:f2:5c:dc:7a:c4:1f:07:00:fd:a3:
                    a1:df:29:8d:79:d1:fd:53:0e:72:28:72:f4:7b:ed:
                    9f:1a:31:6f:9a:d1:27:e6:02:ce:50:18:dd:75:72:
                    9f:83:16:b3:3c:60:e1:77:56:79:db:34:64:49:14:
                    88:05:a6:2e:ee:f2:2a:43:12:b2:01:8a:34:fa:3a:
                    75:c9:f8:1d:3e:60:dd:aa:f1:4b:d1:c5:68:c6:4b:
                    8b:f9:a8:85:f8:10:05:4e:a3:03:60:8e:b1:ac:c8:
                    f0:9a:23:ee:92:26:2d:5c:ea:48:83:64:4d:66:d3:
                    3a:55:42:4a:d8:40:1a:9a:86:33:fa:7e:e0:69:28:
                    9d:fa:73:88:1e:ec:d8:04:36:81:25:d7:30:de:ef:
                    00:d0:7b:3e:d2:50:fb:4b:9e:7c:9b:e3:43:4c:8c:
                    53:1c:0e:dd:89:23:82:a0:68:db:99:35:60:73:42:
                    60:a9:cb:4e:07:20:35:51:bb:d1:1b:a5:1a:7a:42:
                    4a:38:fb:68:f2:ec:92:31:19:13:2c:cb:d2:05:05:
                    43:0e:36:97:7c:90:51:27:51:b4:05:a1:7f:df:46:
                    0a:a7:7e:cc:4b:19:cc:1d:e8:b5:9b:21:6a:ce:13:
                    be:df:b3:37:e5:86:cf:05:9d:bd:d8:22:e2:06:6a:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F9:69:99:BD:59:AB:D7:EB:BF:C3:F2:CB:D5:D9:9F:FB:C6:CB:FA
            X509v3 Authority Key Identifier:
                keyid:30:14:05:3C:58:EC:AB:A7:85:0A:00:C5:58:FB:42:CE:2C:0F:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3014053C58ECABA7850A00C558FB42CE2C0FC6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/2/34352e3137312e3233302e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:4a:1e:30:80:e9:b6:fd:10:55:50:f6:6f:52:f1:5f:f1:ab:
         7b:31:2b:0d:70:6e:9a:19:5a:be:68:73:f9:52:df:3d:8d:43:
         6a:c2:8e:29:f3:fa:05:96:6b:d7:2c:9c:e1:03:3a:6c:87:c6:
         72:f2:64:31:ed:50:11:f1:09:3a:44:78:82:8f:f9:8c:83:9c:
         30:14:90:41:4a:57:1a:67:e6:dd:e2:48:34:06:a6:dc:1f:4c:
         9c:0f:68:84:c8:f9:47:e2:79:d4:85:e3:67:6d:7c:04:f2:7a:
         e0:ae:8b:06:59:fb:1c:a4:d6:06:0a:68:b8:ba:27:02:17:00:
         d1:70:aa:15:f6:1b:36:a5:87:ce:b1:73:23:97:72:6e:a7:c0:
         db:7d:24:37:7f:4e:1f:ef:14:e1:87:b0:32:e6:4d:9a:38:16:
         28:a5:65:70:eb:d0:80:8b:9b:4c:06:ea:0e:e9:e7:fb:57:6c:
         e8:8f:ef:c4:75:1f:f0:7f:f5:58:26:44:83:35:78:66:cc:fb:
         f0:ed:ee:d7:91:01:90:62:71:a5:d0:47:4b:4f:3a:8d:b2:1c:
         f8:0e:98:e7:73:6f:77:be:c9:6e:14:09:22:1c:5b:82:c0:aa:
         10:02:84:01:ef:d6:72:28:c1:c9:4e:ee:b8:92:64:e1:64:b0:
         ee:b5:6a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org