Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32332d3233203d3e20323632343934.roa
File:                     34352e3137392e3131322e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          aut49dc9px/XIPNhcBbD1CJVkcSR5Ov5bA2u1v9d0rA=
Subject key identifier:   63:71:34:E6:E6:B9:AB:FA:65:3F:A0:D0:2A:95:9D:2D:50:A0:29:39
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       BEBE0B5EB2554A0D4DC0B6CD7DC39C6655B715
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 11 Apr 2024 01:10:46 +0000
ROA not before:           Thu 11 Apr 2024 01:05:46 +0000
ROA not after:            Fri 11 Apr 2025 01:10:46 +0000
asID:                     262494
IP address blocks:        45.179.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            be:be:0b:5e:b2:55:4a:0d:4d:c0:b6:cd:7d:c3:9c:66:55:b7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Apr 11 01:05:46 2024 GMT
            Not After : Apr 11 01:10:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:b2:77:06:85:93:13:46:16:13:f8:8c:a6:
                    22:15:5c:7d:d3:26:dd:25:9c:fa:a7:5a:d9:15:b3:
                    4d:fd:d8:58:86:b2:a4:b2:b9:c2:c5:79:1d:72:b2:
                    cb:9c:62:97:dc:c3:fe:b5:f6:39:df:1d:00:97:9c:
                    fa:bd:93:6b:04:c2:cd:7f:70:0e:b5:f8:ac:ef:69:
                    a4:2b:f5:b4:63:76:59:2e:8d:81:5e:a4:24:04:f4:
                    c9:dc:c2:f4:dd:25:d7:7d:f4:45:6a:6d:5d:3e:ea:
                    0c:a7:b3:f5:8c:69:41:e3:70:ff:59:f1:8a:33:b6:
                    38:77:b0:35:df:47:8c:63:2b:8c:fc:f8:88:f6:19:
                    5f:72:6d:92:c0:7c:69:66:1e:92:43:9d:ac:2c:0d:
                    f7:6d:b4:e6:51:5a:ed:9d:9d:b4:11:61:72:44:c8:
                    6a:72:8b:dd:5e:c0:7f:cb:6a:15:03:cd:3b:1b:11:
                    66:52:b6:9c:ea:be:89:d6:ae:ea:09:a8:9f:81:29:
                    a6:c0:ae:d9:4e:2d:d6:27:1e:1f:df:ea:42:fb:cd:
                    56:df:f5:dd:6d:07:84:de:e2:ab:f0:5a:ea:29:6f:
                    ae:c3:9c:8c:b6:02:43:c7:bb:07:d5:03:c2:39:f7:
                    10:42:5f:5f:64:37:92:25:35:2d:68:03:15:ec:f0:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:71:34:E6:E6:B9:AB:FA:65:3F:A0:D0:2A:95:9D:2D:50:A0:29:39
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3137392e3131322e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:d9:9b:4d:5b:56:b8:ab:50:39:6e:e4:8a:6c:39:43:e9:
         b2:08:ba:f0:1e:2a:7c:45:9e:09:ec:1a:8e:24:18:f0:ba:08:
         c5:8a:93:a0:ed:fb:d0:e8:3d:bb:a6:60:ba:8e:c8:6b:a5:93:
         ba:7d:9d:13:fa:23:74:55:79:40:dd:bb:f0:7b:24:85:2f:50:
         22:4f:63:92:83:91:d5:9e:ca:db:98:6b:40:2f:39:fb:05:50:
         5e:02:04:9b:06:ac:49:c4:6f:2e:ed:bf:dc:e2:94:24:82:68:
         61:30:20:5d:4e:c8:00:af:df:f2:60:f4:ae:cf:af:9f:b4:43:
         12:b3:8e:e2:be:fb:b7:8a:24:d2:3d:30:50:37:57:dd:c0:83:
         3c:90:2e:08:c2:31:73:a2:4a:f6:8a:65:4a:15:c9:b8:d6:b5:
         60:80:80:9c:03:01:d2:8a:f6:53:1d:fd:d5:9e:15:30:dc:0e:
         14:b2:b9:25:fd:a8:ec:fc:59:ff:de:e1:c2:f5:b1:a2:3c:58:
         c6:b3:6e:a8:fa:fc:b6:ae:81:05:0f:eb:39:8e:e6:90:4e:08:
         61:d0:dd:ad:42:01:6e:2b:a0:44:1a:70:7b:4d:a7:d9:7b:dd:
         4c:73:72:fc:49:b8:35:fd:ad:fb:f6:e0:da:fe:ab:c2:c1:84:
         bf:16:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org