Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/34352e3138342e3134342e302f32322d3332203d3e2030.roa
File:                     34352e3138342e3134342e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          qeU2MxQPwOG2iRR5KxcFHew74g+I3vAgVshKQrgPu54=
Subject key identifier:   29:44:D4:4D:24:4F:D0:1F:95:AA:C5:17:72:63:8B:65:20:75:6D:5D
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       765167611D2AE9E27A05602F96FB554E7BBD333F
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/34352e3138342e3134342e302f32322d3332203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:56:00 +0000
ROA not before:           Sat 23 Sep 2023 16:51:00 +0000
ROA not after:            Sat 21 Sep 2024 16:56:00 +0000
asID:                     0
IP address blocks:        45.184.144.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:51:67:61:1d:2a:e9:e2:7a:05:60:2f:96:fb:55:4e:7b:bd:33:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:51:00 2023 GMT
            Not After : Sep 21 16:56:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:96:28:0d:08:e9:42:3d:90:5a:ae:ce:72:7c:
                    4b:7c:04:63:fd:36:76:82:bc:75:e1:99:5b:37:6c:
                    35:f6:65:2b:1a:7c:44:3d:03:e4:55:d3:0d:0a:9c:
                    d7:00:4d:23:17:e3:98:71:b0:0f:6f:9c:f1:32:ee:
                    ae:fa:40:24:ef:86:b7:1a:4c:df:3f:40:cd:47:d7:
                    84:7c:38:94:b7:b5:1e:cb:6d:3b:0b:34:2b:95:f6:
                    9e:cc:7d:88:45:a7:c2:29:39:f4:55:e1:e0:cd:3f:
                    4f:bf:3c:30:f0:49:2c:d6:ef:4f:25:cc:b1:31:b9:
                    3f:de:e3:b4:81:09:f3:42:65:ba:e0:f3:65:e2:da:
                    58:14:26:30:1c:7b:ff:8c:08:33:31:b7:c6:91:57:
                    62:47:2b:48:31:db:fd:e7:33:80:2f:ca:3d:fb:50:
                    77:91:17:eb:fb:d5:72:fe:95:15:63:63:7e:fb:48:
                    46:44:ec:fe:7b:db:43:75:c8:aa:d4:dc:03:41:f5:
                    de:84:e8:46:63:34:5e:a5:98:15:73:d4:47:0b:59:
                    17:48:26:55:6a:77:91:55:d8:b7:41:4b:81:10:be:
                    08:e4:3a:b5:bb:31:e8:31:90:af:d6:df:26:96:b5:
                    7d:51:a1:2d:aa:a6:9b:cf:d9:3d:18:5c:ac:a3:3e:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:44:D4:4D:24:4F:D0:1F:95:AA:C5:17:72:63:8B:65:20:75:6D:5D
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/34352e3138342e3134342e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:f7:3e:e7:7a:5e:46:d0:0c:f1:19:48:34:74:f0:07:7e:
         d6:92:38:ab:1a:cb:f4:0b:8e:b6:cf:4c:c6:22:47:45:13:62:
         61:6b:ef:76:0d:37:98:6c:60:8d:b8:0b:ce:05:37:84:52:4a:
         1b:ff:14:58:75:39:fb:5f:15:d4:97:2c:d0:ae:1b:c9:2b:a2:
         bf:79:93:af:bb:d1:9c:c1:e3:9d:3f:81:f6:16:d8:3f:a5:da:
         b1:f9:91:66:4b:0b:e7:17:4a:74:4d:aa:29:ed:6b:0f:e6:f7:
         57:67:99:b5:1b:a1:b4:26:38:bd:90:89:5c:46:fb:43:b7:dd:
         30:55:52:75:3f:75:82:ad:ff:68:d7:be:12:b3:b1:32:9f:db:
         bb:d1:80:9b:1b:a5:cb:fb:7d:ad:02:bb:84:2a:3a:19:0d:8a:
         69:10:cb:e3:65:b8:48:c2:85:9a:12:ff:b9:1f:42:7f:45:d7:
         50:ce:6c:10:b9:1b:f2:3f:b7:3b:b5:15:1f:21:50:03:eb:9c:
         85:3c:cf:1f:c1:65:37:72:df:d4:73:f4:81:71:45:d9:26:51:
         c8:61:27:0b:5a:8a:d3:11:00:01:4e:22:7c:bf:53:af:57:2c:
         df:16:5d:4b:5a:95:33:3d:d7:69:05:a6:c3:23:04:99:31:f2:
         0f:36:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org