Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/34352e3139302e34302e302f32322d3234203d3e20323639363333.roa
File:                     34352e3139302e34302e302f32322d3234203d3e20323639363333.roa (raw, json)
Hash identifier:          2R5z6DmY34yXN0ppBLcHEv7VvzkAialn/PCAeuTeQbg=
Subject key identifier:   36:B8:18:A2:A3:91:E8:73:D9:C6:F5:86:09:46:67:5D:5C:74:0A:B9
Certificate issuer:       /CN=A16031A899116A051747B2AE24495B6B2BDBF616
Certificate serial:       0C73E5FEF57C4D2C3B6415A4172A92A30B633A84
Authority key identifier: A1:60:31:A8:99:11:6A:05:17:47:B2:AE:24:49:5B:6B:2B:DB:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16031A899116A051747B2AE24495B6B2BDBF616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/34352e3139302e34302e302f32322d3234203d3e20323639363333.roa
Signing time:             Wed 27 Dec 2023 06:00:11 +0000
ROA not before:           Wed 27 Dec 2023 05:55:11 +0000
ROA not after:            Wed 25 Dec 2024 06:00:11 +0000
asID:                     269633
IP address blocks:        45.190.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:73:e5:fe:f5:7c:4d:2c:3b:64:15:a4:17:2a:92:a3:0b:63:3a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16031A899116A051747B2AE24495B6B2BDBF616
        Validity
            Not Before: Dec 27 05:55:11 2023 GMT
            Not After : Dec 25 06:00:11 2024 GMT
        Subject: CN=36B818A2A391E873D9C6F5860946675D5C740AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:c5:10:e6:f8:87:d7:a0:e1:e5:c5:a5:e5:
                    2c:16:11:d1:37:3b:00:a2:1c:fd:bd:57:70:cd:5e:
                    75:e3:a2:1f:de:25:b8:7b:49:61:7c:17:47:bf:45:
                    91:01:aa:a9:c8:4f:af:52:58:33:85:fe:f2:e7:80:
                    54:57:57:58:29:ca:d4:af:d5:7f:12:8f:18:95:d0:
                    7b:a8:26:d5:e6:0a:51:63:bb:c1:06:a2:25:41:a0:
                    2f:7f:e1:8f:58:e0:24:48:3e:1e:dd:8d:2e:2d:36:
                    38:62:5e:a5:35:1a:68:ee:df:5d:e3:09:b4:ab:8d:
                    b8:aa:c7:7a:6f:22:eb:79:74:d8:75:cd:6e:d1:21:
                    4e:20:7c:44:07:87:ff:e5:06:6a:c2:b3:46:66:fd:
                    3b:a1:4e:f9:82:8f:e2:58:86:60:d7:c3:94:89:89:
                    af:78:af:d5:94:ff:80:a0:91:e6:2d:61:1e:cc:c6:
                    18:6d:25:73:be:85:77:24:ed:93:ec:9f:4d:9b:ff:
                    7c:ce:f9:72:47:c7:12:da:bc:f6:4c:ec:db:e4:94:
                    b7:17:79:4f:f4:63:dc:20:f0:db:72:b4:44:9a:7f:
                    b6:cb:91:74:5b:63:1b:e6:d0:ab:75:a8:c4:42:f9:
                    76:1d:9a:0d:48:56:5c:de:d7:d3:05:1b:b6:e2:00:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B8:18:A2:A3:91:E8:73:D9:C6:F5:86:09:46:67:5D:5C:74:0A:B9
            X509v3 Authority Key Identifier:
                keyid:A1:60:31:A8:99:11:6A:05:17:47:B2:AE:24:49:5B:6B:2B:DB:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/A16031A899116A051747B2AE24495B6B2BDBF616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16031A899116A051747B2AE24495B6B2BDBF616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/0/34352e3139302e34302e302f32322d3234203d3e20323639363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:29:6f:b1:da:6a:45:d8:65:ca:8c:b6:29:4c:0d:d9:71:
         a1:f6:af:e4:2e:42:e7:7d:c8:71:a1:17:92:23:ac:e9:94:19:
         1d:f3:07:de:ba:19:2a:98:c4:bb:21:e6:04:e5:87:0e:66:7c:
         16:88:6d:62:4b:7d:22:08:5e:99:14:a2:6d:c8:ad:52:55:69:
         3b:a4:d0:95:17:cb:47:b7:c6:4d:fb:76:ae:d5:60:e2:5a:4c:
         d1:19:3e:e5:5e:db:c7:fe:9c:6d:d3:22:3a:97:ec:49:ce:3a:
         25:e8:be:86:43:c2:63:5d:0c:66:94:c0:7e:1e:c5:0b:94:07:
         cc:d9:af:d5:c3:ab:74:34:7f:13:5a:fd:68:24:dd:a3:73:57:
         70:60:17:f8:80:f2:42:38:0d:30:bb:d7:69:fa:f7:6a:b8:d3:
         d1:18:6e:c7:c4:21:10:65:e6:b7:63:eb:92:85:3a:00:03:2d:
         6e:38:8a:db:74:aa:3a:f4:50:3e:42:89:bb:84:70:57:9b:a0:
         43:85:91:1e:5d:63:1d:de:40:41:9d:b7:2f:b5:02:73:c3:96:
         a8:8c:82:fa:fb:1d:2e:28:fb:5d:7c:1c:4b:20:b5:20:89:44:
         8e:22:3f:29:ad:a7:59:ba:9c:28:93:65:de:73:e6:a8:76:87:
         18:f0:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org