Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34392e302f32342d3234203d3e20323639333139.roa
File:                     34352e3138332e34392e302f32342d3234203d3e20323639333139.roa (raw, json)
Hash identifier:          Ry6bJonm2ms23OK6RHMusuJ2i1XhCSoc0oZlTPix34M=
Subject key identifier:   96:56:10:3A:7B:09:75:7E:23:72:A6:0C:26:CF:BA:0D:2A:2B:51:2B
Certificate issuer:       /CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
Certificate serial:       588C0E7329B94E9B4E5FED27EE3AED6B5B29F436
Authority key identifier: C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34392e302f32342d3234203d3e20323639333139.roa
Signing time:             Tue 18 Jul 2023 13:00:00 +0000
ROA not before:           Tue 18 Jul 2023 12:55:00 +0000
ROA not after:            Tue 16 Jul 2024 13:00:00 +0000
asID:                     269319
IP address blocks:        45.183.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8c:0e:73:29:b9:4e:9b:4e:5f:ed:27:ee:3a:ed:6b:5b:29:f4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
        Validity
            Not Before: Jul 18 12:55:00 2023 GMT
            Not After : Jul 16 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:4f:84:88:ee:61:8c:d5:10:20:88:c1:13:
                    4c:20:c5:44:0f:ff:3f:7f:55:d9:79:fb:f1:ad:a4:
                    a8:c3:aa:1e:61:e0:2d:f9:75:ae:f7:b1:11:74:5e:
                    a9:1c:64:78:a9:c9:73:b3:9c:3e:42:ae:a5:f9:ed:
                    81:02:f3:09:09:bc:5a:23:21:38:30:c9:cc:7a:f8:
                    15:51:47:f2:fe:cb:b7:66:d1:11:ea:35:6a:82:5d:
                    3b:d9:7c:4a:9d:0f:b7:15:aa:2d:5e:d2:be:79:63:
                    87:c6:11:3b:f6:c5:b5:b4:40:de:43:85:f7:f2:dd:
                    ae:7c:1c:24:35:2e:72:2e:d5:07:d0:bc:9f:92:3e:
                    28:0d:34:4c:6f:dd:e8:f1:29:ae:58:7b:55:49:1e:
                    99:6c:41:6f:c9:fc:d9:8e:7f:28:57:8d:8a:e4:f4:
                    df:fe:77:8c:c3:af:a4:53:bb:cd:25:b9:44:b6:1f:
                    6d:c6:64:01:0c:68:81:6f:81:7b:91:07:9c:c4:97:
                    cf:2e:c3:6a:21:75:f6:ad:d1:09:4e:62:25:17:c0:
                    07:29:25:a0:89:82:0d:9f:37:7b:39:c4:b9:25:3b:
                    a9:30:27:4d:d6:69:e8:41:40:43:a4:da:26:4c:4b:
                    8b:e1:76:68:0e:af:be:03:6c:1b:cd:a2:cc:e5:c1:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:56:10:3A:7B:09:75:7E:23:72:A6:0C:26:CF:BA:0D:2A:2B:51:2B
            X509v3 Authority Key Identifier:
                keyid:C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34392e302f32342d3234203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:4c:f3:ba:64:1a:ff:99:1c:10:28:e1:99:4d:52:dd:72:
         ca:9e:a2:61:2c:26:70:e6:d1:1c:73:fb:b9:44:f6:5a:64:c1:
         66:3a:92:8b:00:34:d0:e4:7d:3d:33:c9:a6:37:d6:cd:6a:38:
         52:eb:e1:f0:db:8e:ce:7b:0d:0a:c4:ef:28:08:e7:bc:66:67:
         00:75:ae:fe:d2:d6:86:f3:a6:3d:aa:a8:b6:9a:aa:df:47:57:
         c9:7e:99:d0:46:88:30:d1:7d:de:d1:ee:4d:cd:b4:d6:70:6d:
         1a:d6:0e:f7:99:82:cb:e7:1d:77:15:18:bb:e4:7b:67:31:61:
         77:99:3d:8c:e6:ec:05:47:67:01:48:e1:fd:3e:01:58:51:b9:
         05:ea:a4:d8:46:f1:dc:1f:e2:08:c3:38:c7:5b:c3:c5:12:57:
         36:f8:c7:2e:af:8e:c1:2d:0f:75:40:3a:a6:99:57:b2:22:1e:
         8d:77:5d:7b:2b:4b:74:f4:69:de:78:34:60:b5:f8:2f:6c:92:
         13:8b:ec:6e:dc:1d:b3:92:fb:14:c9:ab:83:c2:0e:c7:a5:8b:
         fa:6f:3b:1b:b3:3d:5c:b6:4d:02:45:50:b7:33:5b:da:c2:33:
         ec:91:7a:4b:3a:88:5f:13:c8:ac:7a:34:a1:3b:da:94:99:fc:
         d7:be:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org