Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34382e302f32332d3233203d3e20323639333139.roa
File:                     34352e3138332e34382e302f32332d3233203d3e20323639333139.roa (raw, json)
Hash identifier:          5+yVAssFizyugHms8w0KnK3Q8FthJC0/An1CdvHv9Rw=
Subject key identifier:   90:23:0C:87:0A:7B:2C:A0:2F:DB:E8:22:67:E9:C5:7D:C1:95:FB:BA
Certificate issuer:       /CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
Certificate serial:       483C4CF47FFE28910D7624C9F8CE096155D793D8
Authority key identifier: C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34382e302f32332d3233203d3e20323639333139.roa
Signing time:             Tue 18 Jul 2023 13:00:00 +0000
ROA not before:           Tue 18 Jul 2023 12:55:00 +0000
ROA not after:            Tue 16 Jul 2024 13:00:00 +0000
asID:                     269319
IP address blocks:        45.183.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3c:4c:f4:7f:fe:28:91:0d:76:24:c9:f8:ce:09:61:55:d7:93:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
        Validity
            Not Before: Jul 18 12:55:00 2023 GMT
            Not After : Jul 16 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:20:6e:d7:78:2f:a3:94:23:31:ab:63:c9:
                    a0:d1:bb:0c:55:0c:ea:f8:51:c1:a0:ee:45:78:e5:
                    a3:ad:eb:9c:e7:17:36:df:44:a7:a1:2b:c3:98:71:
                    5b:5d:f1:33:8c:91:05:f3:c6:38:a9:b4:c2:71:d9:
                    2d:d3:6d:61:a5:4c:95:18:0c:b0:a4:c6:80:3e:ba:
                    2e:4a:66:c0:06:27:95:67:db:ff:c6:74:f7:ce:ea:
                    1b:83:e7:ff:2d:06:b8:e7:c0:43:83:68:70:c4:e9:
                    8e:08:26:73:02:a9:7d:0d:c3:6c:80:6f:62:48:ca:
                    f2:c9:59:96:9a:aa:88:a2:14:cc:cb:6c:e1:d0:97:
                    e7:64:8f:59:1b:c1:72:35:f2:c6:63:52:cf:d0:3c:
                    88:9f:07:b0:9d:d9:3f:c0:24:fd:6a:08:9b:51:44:
                    c1:f6:d9:bd:e6:bc:7c:79:2a:f8:76:68:a7:c8:c6:
                    fd:b4:87:ad:d9:e1:a5:93:39:3d:3d:91:21:29:37:
                    b0:09:9d:00:7b:9a:a9:8f:0b:4e:53:ad:36:44:b9:
                    7e:ba:ea:ad:38:ca:7d:7d:44:c7:72:22:9c:a6:b0:
                    d9:fa:65:73:5f:a0:2e:b0:f1:d0:e2:92:ba:55:8a:
                    cb:3c:a4:8a:81:01:0a:b8:0c:ca:ff:52:a6:90:9d:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:23:0C:87:0A:7B:2C:A0:2F:DB:E8:22:67:E9:C5:7D:C1:95:FB:BA
            X509v3 Authority Key Identifier:
                keyid:C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34382e302f32332d3233203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:1d:2e:d5:8b:ec:73:4e:81:4e:95:37:33:5b:a0:0f:84:7e:
         06:2f:a8:7d:88:2c:fb:77:9f:e4:0e:b9:39:2b:ed:ce:35:66:
         bb:99:01:6e:05:b8:8b:1b:a5:ec:8d:7d:e9:89:56:7b:c7:e5:
         8f:07:71:cb:86:61:f5:8b:bc:a9:06:1d:3a:d9:d9:6f:04:49:
         4e:f8:f7:0f:cd:d5:40:40:2e:05:f2:a1:a7:f0:95:d6:1c:6a:
         e2:13:4f:9e:05:43:da:f2:c5:5c:54:35:1a:6a:15:ae:75:c7:
         64:b8:08:83:4f:ae:c9:26:69:f9:62:69:d2:e9:53:b1:72:bc:
         f4:e6:6a:df:79:13:5b:2c:a6:43:91:f9:2c:03:5a:b1:9f:cd:
         c6:0d:8c:58:ee:e4:35:15:85:fd:cc:54:e7:cf:99:38:26:60:
         1c:82:d4:7f:73:65:48:35:70:f8:fe:3a:61:d4:ac:98:6e:41:
         99:86:b9:09:33:05:35:0d:2c:97:86:d5:dd:08:e5:99:db:cb:
         c9:7b:71:b7:c4:1f:66:54:f8:8c:54:14:b7:d9:ff:84:53:d6:
         26:a0:85:7d:c0:79:68:ab:1f:d1:b6:bd:d0:c8:a2:fc:b0:10:
         85:d4:aa:9b:1d:0e:6a:5e:00:e5:9b:d9:6b:e5:97:d4:8c:56:
         39:da:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org