Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e32382e302f32332d3233203d3e20323639313630.roa
File:                     34352e3138312e32382e302f32332d3233203d3e20323639313630.roa (raw, json)
Hash identifier:          YnP843U/8jXcNybZBnzUAxHLuG1xVSjk8U92yzssWWk=
Subject key identifier:   87:11:CF:AF:B2:7E:01:A8:0F:E7:75:66:C0:CF:09:9B:3D:F3:FC:42
Certificate issuer:       /CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
Certificate serial:       0D3551D3BDCCD7A3F31ABEC9515D6F4C18AE6A35
Authority key identifier: 0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e32382e302f32332d3233203d3e20323639313630.roa
Signing time:             Thu 04 Apr 2024 00:49:48 +0000
ROA not before:           Thu 04 Apr 2024 00:44:48 +0000
ROA not after:            Thu 03 Apr 2025 00:49:48 +0000
asID:                     269160
IP address blocks:        45.181.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:35:51:d3:bd:cc:d7:a3:f3:1a:be:c9:51:5d:6f:4c:18:ae:6a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
        Validity
            Not Before: Apr  4 00:44:48 2024 GMT
            Not After : Apr  3 00:49:48 2025 GMT
        Subject: CN=8711CFAFB27E01A80FE77566C0CF099B3DF3FC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a5:e9:79:7f:5b:0a:0b:e0:a3:cd:a5:ac:3e:
                    46:83:7e:a9:0b:39:fd:28:3f:78:64:c5:1f:6a:b8:
                    e7:9c:a0:95:79:c6:b0:ae:49:22:c3:94:ac:ca:d6:
                    f7:2d:0d:bd:55:db:58:a6:da:04:68:f0:4b:fe:37:
                    9e:8c:bf:1e:82:41:e6:a0:f0:b4:97:59:d5:2d:75:
                    04:13:30:40:e9:32:c5:d8:85:ad:2c:2c:e3:f2:cd:
                    78:88:2d:d0:50:36:08:8b:8d:01:17:56:e3:b8:f5:
                    fc:bb:9e:b8:63:e7:03:ba:d9:a1:ba:ba:41:62:ae:
                    b7:6f:ff:76:28:8f:b7:b6:bc:14:bf:c2:5e:ed:47:
                    41:d2:ba:08:b0:74:96:7a:e0:44:06:5f:44:68:52:
                    d6:8a:f0:a1:78:7d:d6:ef:bf:d9:84:8b:25:64:91:
                    37:82:71:ac:f8:68:97:cd:c2:f6:0b:8d:f1:8c:4b:
                    7b:46:df:6a:c4:b4:c7:27:2f:ae:10:41:bd:3e:9d:
                    1d:65:7b:36:57:54:e7:8d:2a:bb:0c:84:4f:5d:c0:
                    f1:da:0e:42:38:c9:68:40:dc:af:94:09:e1:9e:c7:
                    20:58:92:8b:82:c9:3c:23:7b:91:32:e3:59:ff:b1:
                    51:40:6c:cc:5b:e2:20:00:08:48:98:17:03:05:c2:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:11:CF:AF:B2:7E:01:A8:0F:E7:75:66:C0:CF:09:9B:3D:F3:FC:42
            X509v3 Authority Key Identifier:
                keyid:0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e32382e302f32332d3233203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:7a:3d:e4:1f:69:67:2a:92:62:dc:88:1e:f6:52:d8:d0:d0:
         ca:2d:2c:cc:16:fc:7c:58:f0:7b:6b:1e:ca:ec:b1:f6:d0:42:
         d5:d7:98:78:b4:9b:c4:92:a6:22:05:6b:c4:0f:65:a4:f8:07:
         f0:95:1f:d2:10:26:a6:61:39:1e:aa:b9:d1:f9:17:dd:78:f4:
         ba:19:ec:df:65:da:87:5d:7c:cf:5c:5c:7c:47:70:ae:fc:54:
         98:fb:97:18:77:44:e9:29:e5:a2:f1:aa:87:d8:e6:4b:87:ca:
         bd:97:a9:48:19:c8:ab:bf:ad:fa:48:8a:10:f8:72:7a:ae:46:
         12:a6:55:38:b3:02:b3:22:da:31:86:25:03:94:2a:35:f1:37:
         0b:0a:8b:4b:f5:f8:fd:1a:16:e9:d1:10:73:4c:4c:ef:26:ec:
         19:97:fc:84:47:01:46:d5:1e:f8:80:19:82:d6:5a:de:d6:6e:
         b4:5f:5a:a9:60:ab:27:1c:7e:8a:6c:66:e0:f4:65:b3:b5:8b:
         59:16:77:8c:9b:29:ae:30:f3:2f:19:fd:5c:70:d9:df:f1:dc:
         61:62:db:5f:8d:eb:61:98:41:6b:7e:76:8c:fd:ec:a7:44:43:
         02:3d:9a:eb:12:09:1f:44:f9:2e:65:2e:08:92:75:69:54:80:
         cd:28:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org