Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e33302e302f32332d3233203d3e20323639313630.roa
File:                     34352e3138312e33302e302f32332d3233203d3e20323639313630.roa (raw, json)
Hash identifier:          uGyWSdUSwT0ND6sC6A0FI7GJW9ARULCZNtY1P5Mr/YQ=
Subject key identifier:   73:D2:81:32:2E:FD:8D:43:A8:9B:2B:06:67:AA:40:4A:F6:2D:43:0E
Certificate issuer:       /CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
Certificate serial:       204BBC930AE06B758C5952B45EE5F081E94C8EA2
Authority key identifier: 72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e33302e302f32332d3233203d3e20323639313630.roa
Signing time:             Tue 19 Dec 2023 22:31:39 +0000
ROA not before:           Tue 19 Dec 2023 22:26:39 +0000
ROA not after:            Tue 17 Dec 2024 22:31:39 +0000
asID:                     269160
IP address blocks:        45.181.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4b:bc:93:0a:e0:6b:75:8c:59:52:b4:5e:e5:f0:81:e9:4c:8e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Validity
            Not Before: Dec 19 22:26:39 2023 GMT
            Not After : Dec 17 22:31:39 2024 GMT
        Subject: CN=73D281322EFD8D43A89B2B0667AA404AF62D430E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:c8:c0:71:10:28:cf:ef:67:f0:77:f8:10:
                    99:68:40:84:75:0e:98:f1:b7:2d:91:ba:67:4f:5b:
                    59:a9:2e:bd:9f:5b:2e:65:fa:2a:0a:7d:8a:98:1c:
                    1c:89:d1:d9:59:01:65:39:e4:d5:a3:f8:7b:1f:be:
                    81:a9:6b:68:42:99:ab:f9:eb:0e:0f:ac:2a:bb:54:
                    57:18:ba:d2:fe:9b:5f:4b:8b:0c:1b:b7:9f:b1:97:
                    eb:91:aa:7f:db:ab:44:62:bd:4f:7c:80:01:9f:54:
                    f3:9c:90:5e:dd:32:37:5d:06:b5:71:72:3b:d7:cb:
                    24:9d:c7:c1:5b:a6:ef:12:92:86:23:df:0b:1d:47:
                    71:ce:a9:5b:43:69:04:10:9f:20:29:78:0a:b8:2d:
                    f6:6d:5a:f9:91:9b:a4:6c:f1:cb:1f:fc:b9:d3:29:
                    af:1f:b5:30:6c:84:4d:6d:a6:d3:96:92:c1:b0:69:
                    ad:2c:f2:75:d5:eb:39:7a:75:b2:e8:00:c1:d9:b2:
                    6e:0a:8d:8d:ab:37:e6:a2:95:d6:c9:88:3c:ed:68:
                    2a:19:7e:5f:38:1d:a3:89:53:80:9f:0c:14:b1:9b:
                    e2:fb:22:ef:a6:c4:1f:0a:c0:6e:46:c4:d7:cd:eb:
                    f0:14:fa:7a:1b:6d:43:52:8e:e2:74:2a:cc:43:9e:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D2:81:32:2E:FD:8D:43:A8:9B:2B:06:67:AA:40:4A:F6:2D:43:0E
            X509v3 Authority Key Identifier:
                keyid:72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e33302e302f32332d3233203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:3a:55:d6:78:54:42:cf:ad:1d:75:e2:85:7f:eb:9c:87:5a:
         45:a0:5c:25:87:9e:0f:49:c2:79:4b:d4:4d:9c:22:bb:75:f7:
         30:ef:a4:33:8c:7e:ce:12:51:06:07:d4:85:db:48:6b:b5:28:
         16:0b:a0:3e:6e:5e:9c:af:66:dd:7d:c6:dd:57:a6:6b:fb:df:
         ef:6b:76:c0:60:4c:3f:73:af:d5:ff:36:dc:a7:de:86:82:fe:
         f0:1a:08:b1:d1:b2:f7:45:d2:b5:a7:7f:aa:a6:cb:2c:f0:7e:
         45:da:25:d6:57:24:0c:3e:96:94:40:f9:0b:81:50:bd:41:64:
         35:2d:c8:b1:4c:e9:ce:e5:30:48:81:ff:72:98:d9:4c:cc:0c:
         6e:f3:c8:80:18:80:ef:04:68:b7:b6:54:df:26:1e:32:9d:f0:
         e6:46:d2:76:37:30:3f:f7:e0:bc:b5:16:d7:f1:62:7a:49:7c:
         9c:1a:93:b1:87:a7:2b:4f:ca:21:65:3c:75:50:f8:8d:c6:05:
         5f:8d:9b:3b:72:fb:3e:a2:46:4e:c6:b3:10:f6:06:c1:55:88:
         11:04:b5:67:80:0b:23:fd:18:64:f4:96:7e:a6:2e:4a:45:4c:
         ab:fb:5c:b6:83:f5:f5:05:1a:b4:c6:e5:0b:71:45:59:6b:61:
         df:60:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org