Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31392e302f32342d3234203d3e20323639323534.roa
File:                     34352e3138332e31392e302f32342d3234203d3e20323639323534.roa (raw, json)
Hash identifier:          DHkgp639xIftUP6/GqZEQNLBTEzMtF9a5APY2G5KBnA=
Subject key identifier:   E2:87:6F:BA:4E:42:24:DD:CF:22:E2:2B:C6:DA:E2:31:62:46:5A:8F
Certificate issuer:       /CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
Certificate serial:       795AAA440E1616DB648DF5225E7596DFEEA8729C
Authority key identifier: 47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31392e302f32342d3234203d3e20323639323534.roa
Signing time:             Tue 15 Aug 2023 14:31:03 +0000
ROA not before:           Tue 15 Aug 2023 14:26:03 +0000
ROA not after:            Tue 13 Aug 2024 14:31:03 +0000
asID:                     269254
IP address blocks:        45.183.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5a:aa:44:0e:16:16:db:64:8d:f5:22:5e:75:96:df:ee:a8:72:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
        Validity
            Not Before: Aug 15 14:26:03 2023 GMT
            Not After : Aug 13 14:31:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:dc:92:f9:07:ef:6c:23:6f:ee:73:8f:99:
                    05:62:85:5e:22:05:b2:3c:7a:8c:80:bd:cd:3e:66:
                    80:4a:ab:8d:24:92:27:4a:e7:66:09:43:4b:3c:56:
                    41:9a:78:28:1c:9b:30:76:d8:82:91:f6:31:18:85:
                    58:6b:b9:dc:a1:19:af:fb:a6:96:c7:83:07:19:f7:
                    01:70:87:df:da:64:16:cc:f7:40:d3:25:e3:da:bc:
                    38:f7:33:c1:03:0b:c3:ca:19:13:e7:66:33:5d:d6:
                    15:b4:9a:dc:f8:15:4c:92:00:02:53:e2:7f:3b:55:
                    ee:90:c6:7d:51:4e:d9:ca:90:30:3f:54:75:42:a9:
                    00:a5:74:75:59:03:5d:a4:2a:31:38:2e:2b:c0:0a:
                    42:0e:93:a2:44:98:c6:b8:b1:55:c2:c6:9c:b0:77:
                    d9:27:72:ca:43:12:e3:16:63:7d:1d:c5:9b:7b:a3:
                    05:05:27:f0:d3:3f:72:2b:f4:ca:e7:77:2b:2f:7a:
                    98:2e:7a:65:df:c7:49:bc:f4:42:d3:0f:42:40:3e:
                    65:17:42:81:4b:0e:a6:f8:7a:9e:e6:78:45:c9:c0:
                    82:00:72:fb:ba:6c:ec:f5:48:f2:c3:9a:b9:12:21:
                    eb:f0:94:16:da:68:95:b9:98:b4:ae:fd:75:b8:d6:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:87:6F:BA:4E:42:24:DD:CF:22:E2:2B:C6:DA:E2:31:62:46:5A:8F
            X509v3 Authority Key Identifier:
                keyid:47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31392e302f32342d3234203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:7c:21:1c:b4:fe:94:70:ad:7f:4e:01:e0:9b:a2:64:dd:52:
         27:6d:61:40:90:8a:3b:b7:43:93:9c:a8:37:1b:e2:f0:b4:88:
         9b:73:0b:01:be:c6:a3:52:c0:93:b9:7b:f7:4e:c3:e8:eb:01:
         59:26:4f:9d:4b:83:e8:63:5b:a5:14:89:d3:f8:0c:ad:52:31:
         95:f6:5c:b1:59:4a:8a:af:ed:89:dc:cc:ac:39:06:4f:4c:33:
         79:77:7f:85:5d:c1:61:1f:d2:ee:a7:cb:93:6d:3f:b9:b3:4a:
         11:7e:c5:ba:63:b7:6d:29:8d:e4:c6:a9:cb:bf:4e:d4:66:9c:
         ff:eb:a6:47:5a:aa:cf:d1:3c:e1:cc:98:55:8f:8a:75:aa:62:
         a4:14:ab:72:64:8c:78:a4:7c:c7:a6:f1:b4:58:d4:a5:ec:58:
         7a:ab:89:53:fe:6f:06:9a:12:8c:f8:d2:56:4c:ec:9b:f7:ba:
         1d:ac:71:c5:29:1c:14:8f:4a:3c:47:0c:bb:60:dd:d1:7f:ac:
         a9:9a:df:84:44:4b:8a:38:47:57:2f:ae:3f:4c:a4:57:66:08:
         7d:e2:e3:ed:14:8d:b6:b4:8b:b3:22:b0:fb:52:9d:80:82:13:
         3d:73:de:94:7d:17:ec:5a:48:95:2f:de:ea:2b:ca:fa:9f:16:
         5b:68:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org