Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32322d3232203d3e20323639353339.roa
File:                     34352e3138372e3136302e302f32322d3232203d3e20323639353339.roa (raw, json)
Hash identifier:          rVlZx0JK80I0EqSqSY6sLSFMQWZzRsZOsbguETtwXR4=
Subject key identifier:   DB:F1:0F:EF:54:1E:83:24:1D:B6:98:63:F6:30:1A:DC:6E:94:BF:4C
Certificate issuer:       /CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
Certificate serial:       3ED4DC58C9DE12D9466297409C34F68511A633ED
Authority key identifier: C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32322d3232203d3e20323639353339.roa
Signing time:             Fri 16 Jun 2023 15:03:39 +0000
ROA not before:           Fri 16 Jun 2023 14:58:39 +0000
ROA not after:            Fri 14 Jun 2024 15:03:39 +0000
asID:                     269539
IP address blocks:        45.187.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d4:dc:58:c9:de:12:d9:46:62:97:40:9c:34:f6:85:11:a6:33:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Validity
            Not Before: Jun 16 14:58:39 2023 GMT
            Not After : Jun 14 15:03:39 2024 GMT
        Subject: CN=DBF10FEF541E83241DB69863F6301ADC6E94BF4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:97:cd:1f:2e:5d:36:f4:57:ff:c5:44:19:
                    95:12:cf:07:f4:ee:27:21:ad:1b:3a:ff:c3:d5:a7:
                    42:fd:db:54:3c:30:8a:5e:fc:1e:1a:0a:25:57:75:
                    33:4f:1a:63:da:29:40:d9:be:29:3d:61:3e:78:50:
                    f8:e4:34:82:a9:20:8b:c9:31:cd:1f:fd:46:1e:5e:
                    e2:9f:af:6f:6c:83:89:67:82:75:66:2d:6c:83:b0:
                    07:e4:11:b3:30:37:5e:a7:a9:03:e4:ff:f2:b0:56:
                    f8:cc:37:f3:ae:79:c7:b1:6d:9b:df:8b:d4:85:1f:
                    bf:3d:3a:49:fd:3d:80:ba:b5:e6:5d:10:ad:7b:9f:
                    dc:20:cd:c1:f1:0e:1d:94:b1:1d:d2:16:17:2c:73:
                    a4:bf:c6:46:e7:e1:32:8c:71:67:51:88:2f:18:25:
                    92:88:c2:18:23:97:5b:09:49:1a:e0:f9:3a:60:8b:
                    8c:78:01:53:0b:a2:56:a1:24:88:67:d0:c7:d9:f0:
                    eb:fe:66:9b:d2:15:13:09:c4:9d:2a:f2:63:af:fa:
                    1a:7f:d0:f2:07:08:27:c9:5a:6d:62:b3:81:e7:96:
                    e3:19:f7:d9:3c:9b:ce:a6:8b:cf:3b:11:b6:1f:9b:
                    b7:05:c8:58:8e:3b:2f:c2:14:3a:15:75:32:09:92:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F1:0F:EF:54:1E:83:24:1D:B6:98:63:F6:30:1A:DC:6E:94:BF:4C
            X509v3 Authority Key Identifier:
                keyid:C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136302e302f32322d3232203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:91:70:31:0a:1d:86:dd:8d:e9:4d:93:d5:0e:26:30:fb:91:
         42:e0:cc:7a:22:a3:3f:4a:d1:4d:07:04:32:9f:da:92:ce:b7:
         aa:7a:af:7b:8c:10:1f:03:76:2a:d4:69:7c:3d:8a:8d:a6:1d:
         d2:42:fd:af:13:74:1e:d8:80:75:c0:59:1e:bb:93:cf:67:15:
         05:ba:25:65:93:8a:81:a3:1f:be:16:09:80:d8:ea:25:e6:7e:
         19:da:d3:e6:ab:76:c8:a4:aa:ef:15:ff:09:40:c8:90:73:e8:
         d8:90:ae:e8:6f:7b:7a:c9:36:31:38:81:13:62:41:51:73:a5:
         c9:a0:f6:14:37:9b:34:b6:d1:18:14:9a:9b:e1:46:28:8c:7b:
         a3:37:1c:d4:36:8f:8d:15:ad:2b:2d:35:6d:62:76:6f:b9:1a:
         1d:9d:3e:e7:fc:a5:5a:78:74:f8:13:e2:79:ef:82:cb:47:c3:
         9a:b9:2c:c8:3a:25:16:6a:7b:3d:a0:f0:3f:8e:ae:fd:fa:5b:
         a1:af:d8:55:20:91:06:73:f9:84:61:ad:ff:85:fa:10:55:64:
         20:0b:c2:af:d7:47:50:6e:96:8e:23:d5:a4:73:3d:2d:ed:78:
         7d:0d:a6:4f:35:8f:ab:22:03:e3:70:28:0e:9e:59:05:fe:13:
         b0:4a:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org