Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa
File:                     34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa (raw, json)
Hash identifier:          yTkgxXQ8E4CeHPhWzORSAAEAOSo98AIjbUqt7vQdT6s=
Subject key identifier:   1F:46:A9:E5:2E:E2:2B:AD:F1:54:4C:08:2B:8A:75:60:F2:39:5E:7B
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       299495A28893E87BB27D04C50B028D011B62D159
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa
Signing time:             Sat 25 Nov 2023 22:00:00 +0000
ROA not before:           Sat 25 Nov 2023 21:55:00 +0000
ROA not after:            Sat 23 Nov 2024 22:00:00 +0000
asID:                     269532
IP address blocks:        45.188.140.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:94:95:a2:88:93:e8:7b:b2:7d:04:c5:0b:02:8d:01:1b:62:d1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Nov 25 21:55:00 2023 GMT
            Not After : Nov 23 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:1f:d2:65:c6:e4:3b:39:ab:e6:73:69:4e:
                    3c:78:c6:91:81:53:54:83:86:a5:7d:44:a0:fe:be:
                    00:45:91:22:55:08:c1:f3:d1:a9:7d:b2:44:90:99:
                    da:44:46:0b:85:48:5c:56:de:71:28:ce:08:6d:05:
                    de:8c:a2:d4:12:bd:ab:4c:c0:b0:63:12:ab:33:50:
                    81:b2:24:99:1b:a9:b9:29:43:45:de:4c:19:f9:f6:
                    33:5b:27:3b:58:aa:04:49:c4:c6:f0:35:f7:93:e7:
                    86:58:0c:a1:a6:ce:91:e9:0b:91:57:b5:57:12:2d:
                    22:7d:7d:a1:f5:47:a1:b1:94:39:40:32:cb:e8:45:
                    a2:d2:02:22:32:5b:bf:7a:b7:bd:e2:d9:8c:7e:b3:
                    3f:f4:6e:1c:1d:7d:b0:90:6d:96:30:c7:a0:1c:b8:
                    81:78:ae:a1:db:3c:61:e6:cc:9d:81:4b:94:7d:09:
                    08:4b:a5:a0:42:ef:9e:e3:86:45:52:8c:fa:69:8f:
                    00:48:21:38:14:33:e4:8d:5f:93:00:fe:03:8e:49:
                    8c:5e:c1:67:5c:65:d6:38:96:18:da:7b:94:81:61:
                    74:7c:ff:97:10:11:8e:c4:9e:35:0b:d9:53:d7:0a:
                    16:a0:3a:e8:8a:65:c2:a3:6d:49:19:38:0f:70:c5:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:A9:E5:2E:E2:2B:AD:F1:54:4C:08:2B:8A:75:60:F2:39:5E:7B
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134302e302f32332d3234203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:61:45:82:0b:ef:08:e9:4f:03:df:d3:f5:77:7e:7f:a0:79:
         d6:46:09:ed:f3:5f:ca:2a:26:25:61:e5:da:c3:ff:60:d6:1b:
         72:bf:73:c3:55:04:22:01:a6:11:0b:8c:4b:08:75:d0:84:a8:
         a3:ba:7b:16:80:60:9a:ed:40:36:b0:44:82:30:72:8f:55:e8:
         20:01:e1:1a:15:04:14:86:39:65:04:0d:4c:92:36:a2:a0:ce:
         62:6c:0b:9b:3e:40:f6:bf:e9:37:c1:56:f5:3c:03:0d:37:c1:
         17:1f:88:e2:15:1c:95:c4:9f:bf:e7:9c:31:e1:5e:b4:d9:1f:
         7f:83:16:15:83:24:85:a3:ba:df:7a:6e:60:db:cc:19:24:72:
         a7:cd:ff:8e:95:06:0e:32:d1:04:4f:ba:86:8e:91:d3:c4:69:
         ad:ec:59:4b:77:46:29:70:1d:80:22:69:0a:c8:32:94:f5:5f:
         d6:2f:fc:5b:ca:9b:36:06:6a:53:9a:ab:ff:7a:81:8b:95:91:
         d2:ae:08:3a:fe:50:9d:c7:d7:2a:39:a1:19:06:f4:ea:29:77:
         33:f2:22:f7:fa:41:29:ff:68:af:88:fa:e6:d8:0f:48:0b:1d:
         fb:b9:dc:90:6c:12:1d:7d:b9:d3:21:27:16:c5:5f:39:89:8c:
         5e:ad:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org