Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa
File:                     34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa (raw, json)
Hash identifier:          u/f3wXBa5dHoXXpkWRnZZ6rq5Bf6Zqic2br3lO7NiiA=
Subject key identifier:   8E:55:BA:48:BD:A8:1C:AB:42:A2:CD:A8:E5:AA:AB:AB:4D:8E:9B:33
Certificate issuer:       /CN=A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931
Certificate serial:       270CB52F71146E6C39E7D7C97FE9E5D496D8A4B6
Authority key identifier: A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa
Signing time:             Wed 16 Aug 2023 21:49:50 +0000
ROA not before:           Wed 16 Aug 2023 21:44:50 +0000
ROA not after:            Wed 14 Aug 2024 21:49:50 +0000
asID:                     268809
IP address blocks:        45.173.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0c:b5:2f:71:14:6e:6c:39:e7:d7:c9:7f:e9:e5:d4:96:d8:a4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931
        Validity
            Not Before: Aug 16 21:44:50 2023 GMT
            Not After : Aug 14 21:49:50 2024 GMT
        Subject: CN=8E55BA48BDA81CAB42A2CDA8E5AAABAB4D8E9B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:68:45:f3:a7:81:b2:02:7a:c5:a8:a6:cc:
                    f6:3f:e2:fa:7f:fd:8b:8f:bd:8d:6f:27:f3:b3:9a:
                    6b:ec:2b:64:8d:4f:15:bb:f6:02:02:8e:ce:59:23:
                    62:8e:ee:36:cf:35:2b:53:08:b1:ca:73:e4:1b:f3:
                    a6:01:bc:df:66:19:ee:a0:11:61:26:b1:a8:a8:4b:
                    e4:f5:1a:02:fd:f4:a3:f8:a3:f5:61:5e:7e:bd:eb:
                    1f:98:f8:51:a8:d7:ba:1e:dc:e4:1b:6a:e8:e8:12:
                    2b:cd:98:d1:d0:bc:19:34:61:56:a3:9b:02:f4:07:
                    f7:cf:e2:51:43:f9:1d:0c:59:c2:69:5a:22:6c:c9:
                    5b:fd:79:fa:dd:2a:5c:42:da:2a:0b:f6:a3:30:94:
                    5b:15:81:29:0f:d1:0c:b8:00:e7:4c:1a:d7:ff:34:
                    3b:6d:75:cb:bc:6a:77:4e:e7:da:66:fa:7a:4c:7a:
                    d6:aa:2e:fd:38:a3:29:c7:e7:d6:66:67:cd:f1:98:
                    e2:f7:fe:3e:6e:f8:2f:79:72:d5:87:4b:50:66:51:
                    64:8d:ed:c7:32:74:48:a1:8e:c0:f7:cc:d7:03:74:
                    8f:0b:18:5f:b3:ac:5b:40:94:8b:bb:87:e1:91:40:
                    43:c8:48:ca:8c:9c:10:a4:3c:c0:18:d6:02:2a:bc:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:55:BA:48:BD:A8:1C:AB:42:A2:CD:A8:E5:AA:AB:AB:4D:8E:9B:33
            X509v3 Authority Key Identifier:
                keyid:A5:B0:0D:CE:5A:3E:D6:DF:76:BE:34:EE:A3:56:47:AD:51:B8:A9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B00DCE5A3ED6DF76BE34EEA35647AD51B8A931.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/1/34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:78:2d:9f:b5:bf:e7:44:4a:04:b7:cb:f0:a4:cd:f1:5b:
         91:de:fa:a6:1d:66:1e:10:66:fc:85:11:83:c1:1d:be:78:aa:
         0d:9e:a1:df:8e:e1:ab:96:80:3e:d9:17:73:0f:36:4a:8b:be:
         47:e8:4f:55:8b:e3:58:f4:dc:c4:11:53:5d:f2:f4:f1:00:44:
         d8:eb:04:f6:3a:08:07:28:b6:c2:69:6a:f1:0e:90:9b:1d:98:
         4d:a8:a4:ef:8a:d8:e8:86:a8:6f:03:a1:6e:02:3d:27:64:19:
         09:be:21:12:d3:ea:67:75:68:e7:fc:39:34:f0:1f:dc:a0:bd:
         95:5d:10:a4:ab:02:8f:ce:13:93:02:3d:2b:bf:d1:29:1a:96:
         3b:e8:70:63:f1:e4:20:00:d5:25:b3:aa:b7:b7:87:47:38:21:
         79:69:31:99:cb:cc:54:2d:f7:19:79:3a:08:d3:de:87:90:bf:
         e2:cb:98:73:fb:ea:9e:4c:b6:9f:33:e0:e1:57:dd:f1:9b:f4:
         70:a1:c9:a4:c8:14:b8:72:b2:fa:05:33:fc:7f:ae:3e:d6:0c:
         44:cb:26:58:8b:59:4b:51:45:d4:9a:e0:61:70:3f:4e:09:cb:
         01:9d:64:01:34:48:d1:e3:eb:fa:f8:be:09:62:c6:f3:8c:5d:
         73:48:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org