Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34382e302f32342d3234203d3e20323639333139.roa
File:                     34352e3138332e34382e302f32342d3234203d3e20323639333139.roa (raw, json)
Hash identifier:          NxAkjV5BY2nNFxbOxMWpDPw/AFvClAMfyBByJMvXegA=
Subject key identifier:   32:96:92:68:34:94:BC:97:F8:73:5E:EA:B2:B4:D3:1C:08:96:E7:E0
Certificate issuer:       /CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
Certificate serial:       7C9FFDFC01AA5C0DEF457AD11962176016D7EBE6
Authority key identifier: C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34382e302f32342d3234203d3e20323639333139.roa
Signing time:             Tue 18 Jul 2023 13:00:01 +0000
ROA not before:           Tue 18 Jul 2023 12:55:01 +0000
ROA not after:            Tue 16 Jul 2024 13:00:01 +0000
asID:                     269319
IP address blocks:        45.183.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9f:fd:fc:01:aa:5c:0d:ef:45:7a:d1:19:62:17:60:16:d7:eb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
        Validity
            Not Before: Jul 18 12:55:01 2023 GMT
            Not After : Jul 16 13:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:b8:8f:99:52:c7:82:72:30:39:2f:72:67:
                    c4:f6:e6:7c:35:f6:43:ff:45:6c:74:e2:a1:ca:ce:
                    1b:6d:7a:68:91:2c:8d:b1:a6:5f:9b:f4:e6:e3:15:
                    ca:8f:e2:7e:8d:c4:c0:24:49:45:f1:85:49:03:b7:
                    f0:43:39:bb:17:32:56:3b:3a:2a:fb:2a:49:05:26:
                    a4:23:6b:7c:3e:d6:df:8f:39:ce:74:8b:2d:b4:23:
                    55:a5:7f:b2:fb:82:ff:6d:13:e1:9d:8a:8f:f6:93:
                    79:37:51:e6:00:e8:9d:81:00:97:be:3b:1e:4d:e0:
                    cc:8c:12:c2:15:f4:a6:c2:12:9d:30:4f:22:5a:a4:
                    75:d4:20:3c:bb:ea:12:6e:17:49:24:1a:80:de:e6:
                    1f:57:35:bf:67:e0:94:5b:35:4a:9a:76:bb:f9:d4:
                    cb:f8:12:b8:75:86:90:bb:08:f0:5a:22:66:0d:4b:
                    5f:20:96:c5:b7:2a:81:fe:2d:bf:56:6e:dd:c9:c7:
                    a6:9e:b1:6a:39:8a:01:ad:cb:26:00:84:27:46:77:
                    81:a4:ce:87:6a:33:bf:9b:7e:e9:cc:35:df:da:4d:
                    d3:31:1e:5f:fb:f5:e4:8c:04:84:cf:be:d2:4d:4f:
                    d9:48:a3:d4:40:7d:45:ea:8e:9a:8e:62:31:e8:75:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:96:92:68:34:94:BC:97:F8:73:5E:EA:B2:B4:D3:1C:08:96:E7:E0
            X509v3 Authority Key Identifier:
                keyid:C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34382e302f32342d3234203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e4:f1:f9:69:b0:f3:7a:cd:6f:2d:c6:4a:ed:81:1e:76:b0:
         42:00:66:74:8b:33:cd:c7:2b:1f:2a:4a:b1:f7:27:7e:23:46:
         93:01:3a:4a:f2:c1:0b:95:1d:c7:05:02:3c:b2:c8:3b:86:c9:
         1c:2c:89:90:38:67:98:76:57:ec:1a:ea:d2:61:7f:92:1e:2b:
         0f:81:a6:2e:bc:fe:2c:48:01:7d:10:ec:fc:5c:d0:15:ee:69:
         a7:2e:4f:19:40:b6:2a:cf:f3:54:36:91:e4:c0:b7:74:b4:36:
         cf:8e:2a:97:e2:29:b2:f1:69:14:a3:fd:df:c5:c7:58:d7:7b:
         50:eb:39:60:7c:a1:55:7c:48:d2:3c:e2:9b:10:18:16:08:3f:
         42:af:b5:6b:c7:ab:a0:cd:fc:5a:35:20:87:40:ec:e8:33:e2:
         fe:29:dd:af:7b:e1:3f:35:d0:1f:4c:f0:c0:39:f2:9c:a4:d2:
         e2:ce:83:f0:6a:a1:ae:04:39:10:0f:55:3e:c9:15:35:04:1f:
         9f:0e:c8:69:a8:b2:0e:61:1b:c2:1e:93:15:a8:c8:fb:4a:99:
         c4:01:d7:10:16:0f:b7:12:83:87:7a:5f:3f:46:47:fd:c9:57:
         a8:a6:5c:eb:61:8f:2e:1f:db:c4:af:3d:6f:ce:ad:37:9b:75:
         a2:ed:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org