Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e33302e302f32332d3233203d3e20323639313630.roa
File:                     34352e3138312e33302e302f32332d3233203d3e20323639313630.roa (raw, json)
Hash identifier:          BizOSYHUfSIK/Qr3G/NchxocJNJ2ti1V3EbSYI6bSw8=
Subject key identifier:   07:84:80:39:50:E3:F8:3A:93:AA:F3:5B:CA:33:D0:18:09:38:BC:5F
Certificate issuer:       /CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
Certificate serial:       51FDE7454984C72FF3F1040AFD9335F23E329653
Authority key identifier: 0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e33302e302f32332d3233203d3e20323639313630.roa
Signing time:             Thu 04 Apr 2024 00:49:47 +0000
ROA not before:           Thu 04 Apr 2024 00:44:47 +0000
ROA not after:            Thu 03 Apr 2025 00:49:47 +0000
asID:                     269160
IP address blocks:        45.181.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fd:e7:45:49:84:c7:2f:f3:f1:04:0a:fd:93:35:f2:3e:32:96:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
        Validity
            Not Before: Apr  4 00:44:47 2024 GMT
            Not After : Apr  3 00:49:47 2025 GMT
        Subject: CN=0784803950E3F83A93AAF35BCA33D0180938BC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:8b:b3:40:4e:c4:e6:10:c1:47:2d:a6:0a:
                    ff:64:bb:4b:59:6f:82:39:ab:c0:54:d2:7d:9c:90:
                    f6:69:e5:40:d0:a6:70:6e:21:4a:53:d1:6c:75:82:
                    d1:c0:40:08:a6:cc:36:3e:01:f1:9a:fd:4c:03:7a:
                    14:2f:d3:19:a6:2f:9b:32:0c:53:72:1f:73:dd:f1:
                    c4:c0:37:8e:2a:ab:3e:f7:c4:a3:11:1c:67:21:d0:
                    6d:de:86:e7:e8:c1:96:a1:41:c6:fa:67:5a:d7:9b:
                    8e:55:85:ad:ba:e4:98:8b:83:b5:39:11:b7:4d:78:
                    64:78:f3:e1:83:2c:cb:fd:50:1d:e6:f1:08:0f:d5:
                    63:c9:3d:8c:a4:8a:39:0e:e3:57:b4:98:8b:3a:e4:
                    c3:3f:27:b4:9b:68:d6:d1:4b:40:63:b9:ea:48:37:
                    76:39:d8:88:8b:c6:2a:35:9f:87:ab:0e:3a:f4:83:
                    03:a0:81:a2:25:8f:0d:98:16:ea:f1:82:e7:07:f6:
                    79:0a:26:56:ba:ff:c4:a8:5c:ea:31:f1:0b:04:f7:
                    ac:f0:19:74:f2:86:90:41:07:b5:a5:1e:a9:ff:e3:
                    cc:f5:09:74:0a:df:1c:2c:6f:a3:d9:21:54:15:86:
                    0d:6a:64:e6:23:bb:8c:40:96:3b:1b:de:c6:e9:7d:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:84:80:39:50:E3:F8:3A:93:AA:F3:5B:CA:33:D0:18:09:38:BC:5F
            X509v3 Authority Key Identifier:
                keyid:0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/34352e3138312e33302e302f32332d3233203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:29:ed:38:17:6b:fd:4e:bb:76:c4:ce:02:de:e6:8f:c6:
         9b:df:79:ee:4f:ce:5b:f4:99:47:50:0e:fb:4d:a8:92:5b:0d:
         d2:24:34:d1:09:59:a7:7c:a0:fd:21:a6:fc:36:cf:1d:b3:d5:
         5f:38:bd:fe:cb:1c:da:e2:ab:d3:f3:45:96:43:ed:5c:08:92:
         8e:cb:ec:6d:39:a2:13:66:b9:a1:96:3c:f9:5a:ef:29:c8:fb:
         8e:e3:44:3e:68:3f:5a:cd:d8:a1:ba:92:be:5a:db:c7:bb:2b:
         06:db:e9:93:21:7c:d6:37:81:12:90:21:bc:c5:c2:bb:0a:8c:
         35:70:9e:f6:44:fd:b4:ab:f9:95:2a:2f:44:7a:5b:ad:8f:4e:
         89:9c:39:12:fb:0a:28:79:96:3a:e8:13:26:9e:62:a0:a7:3f:
         a0:d0:8d:0e:f2:fe:3e:45:f7:2b:30:74:4e:7c:d5:dc:6a:42:
         2e:9d:fa:0c:14:a6:a5:80:08:01:75:ff:67:2e:46:14:1b:f4:
         cc:c8:a2:03:f7:dc:81:8f:4f:36:cd:54:6f:c8:b4:74:2c:f0:
         fa:25:cb:dd:f9:a6:5b:9f:32:ac:42:39:be:86:d6:97:df:4e:
         bd:4b:f2:cd:9e:6a:e4:69:27:ab:b4:16:bf:27:40:e2:59:1b:
         13:e5:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org