Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa
File:                     34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa (raw, json)
Hash identifier:          c58LM1j0SDTytFVLKUAUImZ7i8CgAURb+q3AcaW4Vuo=
Subject key identifier:   AD:8E:93:64:17:39:9B:82:E2:D9:8B:F0:15:08:2C:9D:DD:30:7B:5C
Certificate issuer:       /CN=E239018413238D8FC9938F9C53BE175FEE6B7085
Certificate serial:       2FC1D6B2CEA23E42400E1DA20A0620AAD680D636
Authority key identifier: E2:39:01:84:13:23:8D:8F:C9:93:8F:9C:53:BE:17:5F:EE:6B:70:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E239018413238D8FC9938F9C53BE175FEE6B7085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa
Signing time:             Wed 27 Sep 2023 18:13:52 +0000
ROA not before:           Wed 27 Sep 2023 18:08:52 +0000
ROA not after:            Wed 25 Sep 2024 18:13:52 +0000
asID:                     268112
IP address blocks:        45.169.120.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c1:d6:b2:ce:a2:3e:42:40:0e:1d:a2:0a:06:20:aa:d6:80:d6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E239018413238D8FC9938F9C53BE175FEE6B7085
        Validity
            Not Before: Sep 27 18:08:52 2023 GMT
            Not After : Sep 25 18:13:52 2024 GMT
        Subject: CN=AD8E936417399B82E2D98BF015082C9DDD307B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:f6:4c:45:8f:e6:bd:77:a7:f6:5b:aa:0f:
                    e2:cf:68:1f:cc:14:20:93:09:0a:cb:7d:8a:e7:3c:
                    eb:13:db:7f:fe:12:c8:ab:07:b8:27:f7:55:23:ac:
                    5a:8f:9b:7a:d9:f1:e7:ab:7a:a0:d9:c8:1b:2c:d4:
                    42:a6:8f:b2:6e:00:11:4e:fb:09:7a:dd:62:a4:e1:
                    8a:a1:ee:cd:06:16:b0:41:d1:36:8f:71:57:b8:a7:
                    ce:56:ed:53:5e:8f:c8:52:c7:0d:0a:0a:7c:1b:dc:
                    db:4f:70:09:79:20:68:10:38:60:9a:ca:6d:e8:57:
                    cf:89:5c:d0:39:ab:7b:db:9e:8b:40:31:ed:f0:9f:
                    49:b2:50:e0:9b:e4:7e:70:c0:ea:d6:f2:eb:b1:33:
                    a6:99:94:47:d9:b1:d5:03:ca:bd:7c:6b:5a:ae:cf:
                    a1:0e:29:a2:57:b4:9b:3b:a0:27:a3:80:41:b2:31:
                    13:2f:01:bb:fc:36:70:26:f5:bc:f7:24:d2:ba:ce:
                    ae:9c:5f:dd:ff:01:e5:01:7a:5d:3d:c5:13:65:93:
                    a5:71:a1:41:d5:a0:85:5a:5a:13:0c:77:89:dc:75:
                    c0:2c:73:8a:e5:11:aa:7b:26:57:0a:2a:4f:7c:4e:
                    69:aa:7e:7e:6c:09:92:4c:c5:a5:60:c9:15:80:b9:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8E:93:64:17:39:9B:82:E2:D9:8B:F0:15:08:2C:9D:DD:30:7B:5C
            X509v3 Authority Key Identifier:
                keyid:E2:39:01:84:13:23:8D:8F:C9:93:8F:9C:53:BE:17:5F:EE:6B:70:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/E239018413238D8FC9938F9C53BE175FEE6B7085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E239018413238D8FC9938F9C53BE175FEE6B7085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:20:1f:a1:63:ce:a4:96:51:96:3e:ef:b3:af:15:15:04:c1:
         af:d6:74:e3:e7:1b:24:1f:6a:af:0a:d7:7e:a0:6b:dc:7f:b6:
         f3:9c:2e:57:8e:b2:11:12:d1:00:0d:eb:91:24:f0:ae:68:29:
         f0:90:6d:55:35:49:50:78:80:29:d2:ab:f8:cc:f4:98:fc:34:
         47:94:ab:57:c7:56:d6:fa:ad:44:6d:61:91:14:a6:94:cd:4d:
         60:61:a8:03:4f:98:e2:95:61:40:7d:e0:e2:d8:68:05:65:0d:
         23:fb:4f:89:c1:de:06:55:01:f7:7b:b0:71:63:42:20:f7:37:
         22:c7:f5:ab:b5:eb:d8:06:f1:f9:c7:77:47:40:db:73:aa:1c:
         c3:54:eb:25:26:75:9a:29:04:ea:c8:66:05:1a:14:d5:99:5d:
         9e:42:13:a6:0b:f2:1c:37:b3:b4:f5:56:a6:53:09:6a:cd:e8:
         f2:7b:10:27:5b:a5:f6:cf:8b:c5:1d:f9:36:8d:cb:3e:17:91:
         ca:47:73:b4:58:80:39:85:f2:15:e4:f2:0e:2e:c4:9c:25:52:
         c3:d5:1e:d6:86:11:88:17:c7:89:f9:30:ba:13:df:58:98:78:
         3c:78:de:91:53:a9:43:16:21:87:2e:7f:21:df:9b:20:f3:4a:
         66:f6:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org