Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38392e302f32342d3234203d3e20323632343934.roa
File:                     34352e3232362e38392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          UL7ml4m0axEmnTOzgJ8T6qM4wgm7+NLTr+vpWY35RLI=
Subject key identifier:   A9:14:BA:BF:7C:FB:DE:96:0E:D6:19:EC:26:A3:FC:47:12:C1:E7:BE
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       013994B1FF56E06E3DA158D9F0FD121DF77BEAEB
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38392e302f32342d3234203d3e20323632343934.roa
Signing time:             Fri 18 Aug 2023 11:51:13 +0000
ROA not before:           Fri 18 Aug 2023 11:46:13 +0000
ROA not after:            Sun 18 Aug 2024 11:51:13 +0000
asID:                     262494
IP address blocks:        45.226.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:39:94:b1:ff:56:e0:6e:3d:a1:58:d9:f0:fd:12:1d:f7:7b:ea:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug 18 11:46:13 2023 GMT
            Not After : Aug 18 11:51:13 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:45:46:b3:91:84:b1:f7:92:42:14:a6:ae:
                    9a:6a:c5:f7:3c:ca:46:25:5d:92:b4:0e:8b:bd:fa:
                    0e:bf:b6:3d:f7:39:61:d5:be:14:b0:e2:03:32:73:
                    fe:b1:80:57:45:90:7f:c6:f1:eb:b0:1b:a0:e1:7e:
                    f2:2c:3b:f4:5b:35:a3:1f:3b:0f:77:c8:10:68:0c:
                    6a:a5:66:d9:71:5b:bf:e3:7e:b1:9a:5a:a2:0f:ca:
                    32:6e:98:9c:53:c4:f4:32:a6:03:73:d0:b3:f8:a5:
                    a3:45:f0:07:df:09:f7:d3:2b:17:95:41:4e:73:a9:
                    17:bf:44:46:8f:0d:14:fe:36:f5:01:5d:18:59:fc:
                    32:5b:47:44:42:51:77:26:4f:27:0e:df:4e:39:cd:
                    c6:fa:33:21:e5:ab:bf:dc:cd:03:69:e9:c9:42:37:
                    24:87:8f:16:9b:cc:97:1d:76:b0:be:d4:18:3b:36:
                    2d:6f:2e:e9:3c:38:df:eb:a6:cf:a9:f5:44:1b:a8:
                    16:a2:06:b7:9d:53:6f:d0:52:b6:73:0a:69:0f:68:
                    86:ab:0c:62:47:6d:67:c5:1b:39:b5:d1:47:f8:3d:
                    db:b3:c2:cb:91:4c:73:cf:25:c1:9f:9c:62:ba:59:
                    f0:da:4a:8b:99:cc:39:74:88:f3:4a:4d:fa:08:b1:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:14:BA:BF:7C:FB:DE:96:0E:D6:19:EC:26:A3:FC:47:12:C1:E7:BE
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e38392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:72:c5:91:1e:f6:d7:97:22:a2:e7:cc:70:58:f4:62:c3:eb:
         dc:ae:8d:7f:9c:7c:ef:e3:92:c2:72:35:7c:15:ff:19:5b:2b:
         9b:22:94:c7:44:74:c1:32:83:88:22:da:76:97:d0:7a:cb:43:
         92:eb:ba:51:07:a1:9a:83:84:0f:ab:38:57:84:b8:9e:9b:2a:
         bb:1c:89:17:70:49:a4:07:2e:5d:31:92:fd:6f:28:9c:2a:e6:
         71:56:b2:d8:59:01:ce:f0:97:42:c5:4c:15:60:42:89:89:2e:
         82:29:36:ce:76:2a:ce:4c:29:87:dd:97:9d:a1:2e:45:42:54:
         21:4e:84:85:55:2d:ac:4f:0e:78:27:86:e5:83:c3:e1:37:fd:
         49:32:39:4b:6b:86:7e:0b:61:e2:51:f0:e1:f9:64:c7:b5:90:
         77:ca:cc:d2:b4:88:e6:a4:08:97:5d:0f:13:7b:30:a1:75:72:
         2f:46:45:15:f1:e5:47:31:b6:d5:5d:47:65:ce:97:c2:72:5f:
         8c:de:f7:bc:9b:11:aa:26:f0:60:e6:8b:26:52:3e:70:85:19:
         1b:8e:15:d9:0e:9d:70:95:70:6c:01:fb:92:d6:34:39:fe:b5:
         05:c4:c0:24:af:2c:34:81:94:0a:71:6a:02:02:b0:f5:9d:39:
         b9:21:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org