Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/34352e3138372e3139302e302f32332d3233203d3e20323639353535.roa
File:                     34352e3138372e3139302e302f32332d3233203d3e20323639353535.roa (raw, json)
Hash identifier:          9zT8opgvtFEL+rYbk1pSvAZgAyFHGVSqha0BHDrDmsY=
Subject key identifier:   7A:D6:00:BA:8D:19:42:DB:96:31:74:EE:98:E6:BC:8F:7D:17:95:2A
Certificate issuer:       /CN=39B0A79080E6A51773F6AE71E043B42C04011838
Certificate serial:       3D1B2206E43BA83EE1FAFD38A6660CDCF8D576CA
Authority key identifier: 39:B0:A7:90:80:E6:A5:17:73:F6:AE:71:E0:43:B4:2C:04:01:18:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39B0A79080E6A51773F6AE71E043B42C04011838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/34352e3138372e3139302e302f32332d3233203d3e20323639353535.roa
Signing time:             Fri 27 Oct 2023 18:34:55 +0000
ROA not before:           Fri 27 Oct 2023 18:29:55 +0000
ROA not after:            Fri 25 Oct 2024 18:34:55 +0000
asID:                     269555
IP address blocks:        45.187.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1b:22:06:e4:3b:a8:3e:e1:fa:fd:38:a6:66:0c:dc:f8:d5:76:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B0A79080E6A51773F6AE71E043B42C04011838
        Validity
            Not Before: Oct 27 18:29:55 2023 GMT
            Not After : Oct 25 18:34:55 2024 GMT
        Subject: CN=7AD600BA8D1942DB963174EE98E6BC8F7D17952A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:90:4b:7e:55:c9:78:08:2f:9d:31:9c:5c:
                    a9:dd:76:58:75:86:f6:7b:ee:24:98:8c:56:fc:91:
                    35:a6:d0:22:46:37:f5:33:aa:b8:5e:18:95:73:0a:
                    7c:8f:67:cd:69:17:c9:9c:8c:fe:d3:86:d1:2c:50:
                    75:13:3c:2e:47:1d:24:24:31:ad:2d:15:22:07:a0:
                    23:d8:fb:96:1d:e6:7f:35:6e:f3:e8:3f:7b:a5:f8:
                    74:4a:fa:7f:2e:57:7f:1b:94:2c:0d:ac:2a:b2:d7:
                    43:14:86:c8:e9:50:7f:c1:3f:7d:2c:27:89:b5:3e:
                    b2:16:b4:dd:2d:cd:fe:28:cc:a0:a2:51:3c:6d:0b:
                    6e:7f:11:1c:af:c1:2a:a9:31:4d:78:2a:cf:67:d3:
                    03:3b:11:e4:fa:bc:a6:f4:8e:d6:02:5e:5f:84:59:
                    58:7b:09:82:82:43:cf:92:98:33:28:9d:ae:74:49:
                    79:74:35:d5:25:54:3d:c5:70:e7:1d:58:67:24:14:
                    aa:04:34:ef:51:8e:3e:cc:5b:21:0a:fd:46:d1:e6:
                    5a:0c:b7:2d:a1:b3:23:3d:4e:bc:98:7d:bd:09:50:
                    b7:8f:b1:e7:52:82:28:fb:d3:65:7b:46:e1:0d:05:
                    d0:78:73:f7:ab:8c:63:19:d4:f5:d2:c4:a8:54:2a:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D6:00:BA:8D:19:42:DB:96:31:74:EE:98:E6:BC:8F:7D:17:95:2A
            X509v3 Authority Key Identifier:
                keyid:39:B0:A7:90:80:E6:A5:17:73:F6:AE:71:E0:43:B4:2C:04:01:18:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/39B0A79080E6A51773F6AE71E043B42C04011838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39B0A79080E6A51773F6AE71E043B42C04011838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/0/34352e3138372e3139302e302f32332d3233203d3e20323639353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:1c:ce:b6:85:b1:41:85:fa:66:36:b8:25:71:35:88:d2:e8:
         e8:a2:08:5a:6d:62:92:1c:d8:47:ad:44:29:a0:96:e5:8b:5f:
         78:90:f3:b1:2a:f3:84:80:21:8d:2b:5e:89:9a:c2:4c:97:02:
         a6:8f:40:59:77:63:9e:95:62:15:b2:62:9e:41:bb:2d:4b:e1:
         19:ec:c0:dc:38:ae:b8:44:e1:0e:bb:03:3f:06:f9:54:a0:75:
         b2:66:d2:29:e9:6f:13:74:ea:41:a4:03:a0:ac:2e:b6:c9:6c:
         13:6e:38:f2:ba:28:7c:71:7b:d1:9f:d3:24:9d:93:c0:70:0d:
         2e:72:7e:05:43:0c:58:49:91:71:a8:db:73:dd:ef:fc:83:1e:
         f8:28:c4:17:d1:da:25:95:e1:e8:4f:f6:e4:40:f2:a0:b1:79:
         5e:91:c9:90:b9:ba:85:d8:8f:a9:5d:c7:1d:4e:81:dc:8e:28:
         5b:ae:12:ec:0b:b1:dd:ea:a2:75:6a:3e:12:98:a6:52:d2:67:
         a7:f6:19:af:5f:03:1a:10:ce:5a:cb:f7:15:b6:5b:b7:c7:0f:
         48:c3:1d:af:d5:71:a2:65:b4:36:c3:57:b0:0a:2b:de:5d:7a:
         10:05:5c:30:4b:1e:53:18:45:ed:d5:78:1b:75:c9:ee:b6:0f:
         07:a4:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org