Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37362e302f32342d3234203d3e20323639323334.roa
File:                     34352e3138322e37362e302f32342d3234203d3e20323639323334.roa (raw, json)
Hash identifier:          7Sh9dyEQ6OiX9sDDMJosxzBAMpxFIC1WwqH4bm6gCuY=
Subject key identifier:   85:BB:79:1D:06:DD:FE:0D:B4:AC:BE:9C:98:EB:1D:AC:83:8C:8D:53
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       69505C0B32C93B029886500FD4DCC5B46CC5FBF4
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37362e302f32342d3234203d3e20323639323334.roa
Signing time:             Fri 09 Jul 2021 16:06:01 +0000
ROA not before:           Fri 09 Jul 2021 16:01:01 +0000
ROA not after:            Fri 08 Jul 2022 16:06:01 +0000
asID:                     269234
IP address blocks:        45.182.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:50:5c:0b:32:c9:3b:02:98:86:50:0f:d4:dc:c5:b4:6c:c5:fb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jul  9 16:01:01 2021 GMT
            Not After : Jul  8 16:06:01 2022 GMT
        Subject: CN=3082010A0282010100AF1E119098266F8B0C189AD0256A8CA0F67E86BD8C969FED1991AF5419A0B15866FEB7449670086BF3D2095DDE5A3C17F1448F075A10AE71B15ED02CC49EC2945CE38F5D4A92E446ADE1954059F077AA23E70186F65C263EF459283A535BE029876423AD143054CFB9628373FBC67977DB451EB9708A6D3B594227A7EECE4C6E1317C35BEAA77E442E5B294DD1EBCDA35DB6556AA63ABD7330311DD3BFA98DD422B61A52D29F308CA7DF85F0C847CE46745F700D652E0997353ECDA8EBEE8B68332EE16653231978827D02BD13346493E097C053D447601E35F3A1504C35FC43EAF07CFD8B55D18D62C066CFC2E837C78ADA57849B0B93E8444ADE60E705BFAF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:11:90:98:26:6f:8b:0c:18:9a:d0:25:6a:
                    8c:a0:f6:7e:86:bd:8c:96:9f:ed:19:91:af:54:19:
                    a0:b1:58:66:fe:b7:44:96:70:08:6b:f3:d2:09:5d:
                    de:5a:3c:17:f1:44:8f:07:5a:10:ae:71:b1:5e:d0:
                    2c:c4:9e:c2:94:5c:e3:8f:5d:4a:92:e4:46:ad:e1:
                    95:40:59:f0:77:aa:23:e7:01:86:f6:5c:26:3e:f4:
                    59:28:3a:53:5b:e0:29:87:64:23:ad:14:30:54:cf:
                    b9:62:83:73:fb:c6:79:77:db:45:1e:b9:70:8a:6d:
                    3b:59:42:27:a7:ee:ce:4c:6e:13:17:c3:5b:ea:a7:
                    7e:44:2e:5b:29:4d:d1:eb:cd:a3:5d:b6:55:6a:a6:
                    3a:bd:73:30:31:1d:d3:bf:a9:8d:d4:22:b6:1a:52:
                    d2:9f:30:8c:a7:df:85:f0:c8:47:ce:46:74:5f:70:
                    0d:65:2e:09:97:35:3e:cd:a8:eb:ee:8b:68:33:2e:
                    e1:66:53:23:19:78:82:7d:02:bd:13:34:64:93:e0:
                    97:c0:53:d4:47:60:1e:35:f3:a1:50:4c:35:fc:43:
                    ea:f0:7c:fd:8b:55:d1:8d:62:c0:66:cf:c2:e8:37:
                    c7:8a:da:57:84:9b:0b:93:e8:44:4a:de:60:e7:05:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BB:79:1D:06:DD:FE:0D:B4:AC:BE:9C:98:EB:1D:AC:83:8C:8D:53
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/34352e3138322e37362e302f32342d3234203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c8:35:e1:9a:b9:45:64:f3:5a:61:e6:62:d2:b1:e9:ca:39:
         37:cd:37:33:c7:0d:6d:d7:0b:bd:75:79:5a:6c:f1:a2:b5:81:
         93:4c:08:c8:ce:e7:24:df:7c:54:c8:64:98:16:11:1d:17:65:
         36:86:4d:72:c9:41:51:1f:b2:75:a5:c3:fc:c7:9c:24:41:0a:
         0c:f7:8c:18:79:0a:96:e4:b8:d0:5c:b7:41:db:97:70:72:dd:
         fb:f2:a5:98:72:97:52:5f:6c:98:7b:2f:70:81:c1:4b:c3:2b:
         c3:66:e8:b3:86:27:9f:b3:90:5e:10:45:38:9d:c3:d4:93:65:
         3b:16:15:3b:6d:2d:e7:6a:aa:b3:30:31:cd:9a:dd:5a:f1:3f:
         61:c1:d7:fd:cb:24:d6:ea:75:36:c4:a5:a6:d8:77:0c:12:e2:
         bc:86:11:cf:c6:cd:8f:c9:29:81:d0:b8:6c:38:24:e8:cd:7f:
         26:e4:ac:21:79:ff:1d:7f:0c:c3:fe:a2:52:bd:5c:46:85:38:
         92:ca:6f:53:93:6e:b6:fa:42:fc:2d:c7:c2:52:cb:a0:17:37:
         46:c5:c0:b0:9b:62:4e:68:8d:3e:77:3a:f1:1f:fb:a1:7a:9f:
         53:8a:a7:96:2c:7b:8f:58:ae:d0:50:a4:4d:26:68:6a:da:27:
         f7:51:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:02 2023 by rpki-client on console-ams.rpki-client.org