Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132302e302f32342d3234203d3e20323639343233.roa
File:                     34352e3138362e3132302e302f32342d3234203d3e20323639343233.roa (raw, json)
Hash identifier:          gX0VqdRuQJ93TdlthSs0tLt936j376Q6TM9H555aMGw=
Subject key identifier:   BE:15:1B:26:29:44:BF:ED:13:E9:7C:69:9D:FA:53:42:7B:29:0A:CD
Certificate issuer:       /CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
Certificate serial:       45B0BAC13E724E4517B1EEA80AC16601DC1AFDF3
Authority key identifier: 75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132302e302f32342d3234203d3e20323639343233.roa
Signing time:             Wed 18 Oct 2023 14:00:42 +0000
ROA not before:           Wed 18 Oct 2023 13:55:42 +0000
ROA not after:            Wed 16 Oct 2024 14:00:42 +0000
asID:                     269423
IP address blocks:        45.186.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b0:ba:c1:3e:72:4e:45:17:b1:ee:a8:0a:c1:66:01:dc:1a:fd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
        Validity
            Not Before: Oct 18 13:55:42 2023 GMT
            Not After : Oct 16 14:00:42 2024 GMT
        Subject: CN=BE151B262944BFED13E97C699DFA53427B290ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:c5:cd:70:21:43:56:a9:90:00:0c:08:ae:
                    0b:8d:ff:d6:8f:f1:2d:e8:65:b6:61:4a:2c:df:95:
                    55:b9:e3:c5:0e:82:64:44:70:e1:74:e4:7a:6b:0f:
                    03:3e:64:ec:d1:7e:8b:5d:a4:f0:c3:5e:df:86:f7:
                    15:8f:2f:2d:1d:9a:a6:51:af:22:3d:78:ab:da:fd:
                    c3:ca:32:32:e5:4b:ad:e8:2f:9e:49:17:a9:51:cb:
                    ac:27:32:e4:fd:fa:6c:92:94:62:d8:f6:47:61:43:
                    54:cd:82:4f:21:a3:3d:96:5e:95:cf:86:63:cb:e6:
                    26:4f:db:00:52:8e:48:5e:c6:33:5d:ad:30:42:65:
                    3b:3b:22:81:34:ab:26:eb:1a:da:74:6d:fa:13:a4:
                    3d:a3:19:3a:4d:3e:48:e5:9e:4f:61:43:a9:39:92:
                    36:b4:45:dd:5f:44:15:ce:b0:30:90:34:56:70:3f:
                    65:4f:92:ef:e7:da:48:35:23:2e:7e:51:28:4c:a0:
                    7c:0e:c7:9f:76:72:07:be:ef:e5:ac:37:81:c7:17:
                    17:30:71:03:4a:de:31:7c:d1:ad:b5:a1:0f:ed:cb:
                    b8:dc:1a:2b:43:ee:80:c0:48:fe:db:a3:96:9b:50:
                    f4:57:fc:ea:e0:d5:8c:64:67:d6:84:fe:e4:b6:26:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:15:1B:26:29:44:BF:ED:13:E9:7C:69:9D:FA:53:42:7B:29:0A:CD
            X509v3 Authority Key Identifier:
                keyid:75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/752DF8A511E583FD16AFDE7868B695CB08BB271E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132302e302f32342d3234203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:3b:67:29:11:71:50:da:0b:4c:35:5e:22:ae:45:ab:b4:
         f5:80:42:16:09:b2:cc:4c:59:6a:fc:d6:8f:e2:68:3f:18:f1:
         d1:07:a2:18:27:3f:74:f5:6b:7d:d0:d3:d2:aa:51:b0:21:40:
         59:bb:cf:d3:f2:b7:c4:38:f2:fc:9c:e4:cb:cc:3d:c5:ec:de:
         55:6b:2a:f9:da:20:29:f0:c4:21:a7:0a:db:27:27:34:01:8d:
         7f:53:50:62:f6:9a:38:e4:21:e2:9f:7f:60:a3:2c:99:d1:fa:
         8b:e8:32:cb:bb:a1:fb:ed:b1:5e:ef:6e:6d:94:80:b6:a4:96:
         2a:fe:79:17:ca:59:20:59:08:bc:f9:b6:85:e7:0d:92:aa:dd:
         d9:30:c3:7b:c9:66:33:bc:8c:a3:82:c3:40:4d:bd:8c:4f:b2:
         f4:46:0a:6a:34:5f:0b:ff:59:1c:3e:6f:d0:ce:98:d8:26:ea:
         74:f1:61:2c:79:ed:35:d0:10:48:78:a3:f7:b8:46:73:98:3f:
         bf:f7:c9:fb:13:05:f2:61:0e:74:a1:40:f5:e0:53:aa:0b:77:
         ab:98:a3:41:2b:0f:3f:f2:91:75:41:3d:2d:3d:3b:61:94:37:
         a8:d4:87:0b:52:a4:e9:69:be:4b:55:9f:84:15:f1:e0:c6:3c:
         39:f3:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org