Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32332d3233203d3e20323639323534.roa
File:                     34352e3138332e31362e302f32332d3233203d3e20323639323534.roa (raw, json)
Hash identifier:          p4+j6sA2wMnED7MtvLLdrHvUj9STXyYifkg1ADAtRoE=
Subject key identifier:   5C:70:E9:34:59:A8:9B:30:15:46:8D:FE:B3:F7:17:38:1B:8A:E4:AD
Certificate issuer:       /CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
Certificate serial:       58530394E37507514B26146360290E44C10DEF5C
Authority key identifier: 47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32332d3233203d3e20323639323534.roa
Signing time:             Tue 15 Aug 2023 14:31:16 +0000
ROA not before:           Tue 15 Aug 2023 14:26:16 +0000
ROA not after:            Tue 13 Aug 2024 14:31:16 +0000
asID:                     269254
IP address blocks:        45.183.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:53:03:94:e3:75:07:51:4b:26:14:63:60:29:0e:44:c1:0d:ef:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
        Validity
            Not Before: Aug 15 14:26:16 2023 GMT
            Not After : Aug 13 14:31:16 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:9e:19:d3:81:aa:a7:96:84:67:01:75:39:
                    92:46:3b:9b:9b:88:7d:92:9d:8f:78:16:8b:d7:22:
                    9b:bb:68:7f:0f:70:2e:62:2e:81:72:d3:47:6e:81:
                    d7:9f:ee:6c:af:ca:b1:87:e5:53:60:83:24:ef:1b:
                    f5:82:6c:98:2d:35:43:96:6c:ed:61:76:8e:89:aa:
                    59:60:44:20:59:7b:18:07:79:25:a3:a5:0d:c1:66:
                    e4:64:e6:2b:45:d3:6a:0d:9f:43:21:6e:f8:0d:07:
                    be:f4:15:73:dd:e9:9e:e5:cf:fc:88:d1:c5:9a:f5:
                    f5:d9:8c:75:76:4f:b0:d2:10:3c:cb:e9:6f:f0:e3:
                    4c:f2:33:15:11:8e:39:4f:38:d1:e5:a2:e1:1a:31:
                    3c:ad:81:42:2d:c0:45:33:cc:8a:31:ab:2d:87:55:
                    6a:33:5b:9a:c3:4b:6c:50:b0:54:10:9c:d7:d3:3a:
                    81:e3:12:60:78:da:61:84:a2:14:63:da:ff:e5:c8:
                    a8:fb:b4:9d:17:b8:e8:9a:f7:a4:73:de:cf:b2:70:
                    83:d9:75:eb:0f:e9:c7:3c:ff:12:d4:17:79:57:16:
                    58:50:ba:ec:fc:9b:9e:9e:30:8b:ef:0c:67:a1:12:
                    c0:e8:3c:07:a6:c8:d1:81:97:88:ef:0a:39:96:c2:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:70:E9:34:59:A8:9B:30:15:46:8D:FE:B3:F7:17:38:1B:8A:E4:AD
            X509v3 Authority Key Identifier:
                keyid:47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32332d3233203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:d6:b5:df:35:95:c7:80:2d:91:8a:a4:f2:41:39:48:97:eb:
         64:f4:2b:c1:3e:dd:90:ef:b6:dc:ff:c6:35:36:c6:65:e4:18:
         16:ad:53:13:47:00:ee:c9:89:a2:3b:1f:19:14:f1:72:c9:0e:
         e8:90:49:ea:3d:a5:57:cf:5a:4c:fc:45:f1:4a:51:e1:2b:b6:
         d2:6d:68:a1:af:07:ac:a9:ef:db:fb:a8:95:fc:08:3a:a2:47:
         9e:54:c2:e6:15:b4:81:f3:09:5e:d3:38:70:50:6a:f7:32:e7:
         10:e5:27:97:15:be:75:85:50:c5:7e:4e:59:a5:4a:d2:c0:0a:
         cf:ba:59:13:fb:4a:76:ed:b4:1c:62:bb:e1:28:0e:ca:23:2c:
         ab:03:fc:ba:4d:66:39:5d:b6:49:87:33:f7:a4:99:08:06:f0:
         aa:6c:6b:73:bd:60:29:dd:f9:27:e5:c2:54:18:98:1a:17:92:
         64:e2:24:7d:bc:fa:11:b0:c8:b9:8a:92:ec:a3:75:c0:ff:7c:
         52:11:21:d3:9a:2b:ce:5c:7c:a8:5f:1a:63:32:34:65:da:04:
         e3:fc:df:97:f9:82:23:32:b5:89:06:e4:c1:db:2b:67:f4:c9:
         1c:7b:76:7c:e2:4f:ff:ec:74:a0:e2:74:d3:f0:3a:9e:b2:b6:
         d8:b6:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org