Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35382e302f32332d3233203d3e20323639353436.roa
File:                     34352e3138372e35382e302f32332d3233203d3e20323639353436.roa (raw, json)
Hash identifier:          93WLNLsdQsnMl7QyxR6MrRhzlfBCplWYTFXtwWlpVt4=
Subject key identifier:   AE:14:1A:F9:69:9B:6B:63:C3:0E:FA:E6:73:71:F6:B6:E1:9A:3D:F9
Certificate issuer:       /CN=549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3
Certificate serial:       352EA34316A3812F414DC2358F567A6DC0512BA9
Authority key identifier: 54:9B:96:CD:BE:DD:FA:CD:C6:11:B9:A0:90:3F:B4:23:3E:3F:FD:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35382e302f32332d3233203d3e20323639353436.roa
Signing time:             Wed 08 Nov 2023 17:19:46 +0000
ROA not before:           Wed 08 Nov 2023 17:14:46 +0000
ROA not after:            Wed 06 Nov 2024 17:19:46 +0000
asID:                     269546
IP address blocks:        45.187.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2e:a3:43:16:a3:81:2f:41:4d:c2:35:8f:56:7a:6d:c0:51:2b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3
        Validity
            Not Before: Nov  8 17:14:46 2023 GMT
            Not After : Nov  6 17:19:46 2024 GMT
        Subject: CN=AE141AF9699B6B63C30EFAE67371F6B6E19A3DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:ac:42:27:2e:bb:c4:86:a8:35:20:25:f4:
                    85:16:c5:59:8e:9f:8c:ef:57:39:aa:f6:76:3c:7d:
                    71:0d:ce:4b:06:c5:5b:42:49:e0:89:34:0e:89:9e:
                    93:87:86:99:16:92:68:d4:0a:63:6d:44:83:60:8d:
                    36:f0:78:cb:c1:c3:89:10:93:4d:30:b2:5f:66:eb:
                    98:74:66:1d:78:1f:13:34:b6:ef:2f:d2:60:0e:f7:
                    47:c7:36:50:67:5b:f4:72:7b:bb:00:9e:53:c2:b9:
                    27:c9:df:3c:b2:bd:ed:b2:8b:b1:28:ed:f0:6e:14:
                    f3:39:e6:6f:03:e9:1c:f3:2f:44:db:e0:69:22:09:
                    a4:42:c5:4c:37:d6:1e:29:07:d0:36:7b:ce:01:03:
                    75:fc:32:d0:fa:66:e7:5b:ae:b4:f5:f9:dc:c2:3b:
                    d2:30:21:12:6d:b9:12:3a:e8:81:2b:ab:5e:f2:a1:
                    cd:0a:a7:9e:48:95:94:51:fe:41:7f:eb:ad:15:54:
                    70:c2:f0:59:b8:d3:c9:d4:6b:dd:7b:ee:b2:5d:41:
                    dc:d7:76:33:00:59:34:9b:c9:9c:e9:56:7f:2b:06:
                    18:51:b0:0e:98:d7:c5:21:a9:6c:3d:fd:66:3e:7e:
                    d9:58:4d:63:66:b1:a8:24:86:e8:ec:79:df:2d:bc:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:14:1A:F9:69:9B:6B:63:C3:0E:FA:E6:73:71:F6:B6:E1:9A:3D:F9
            X509v3 Authority Key Identifier:
                keyid:54:9B:96:CD:BE:DD:FA:CD:C6:11:B9:A0:90:3F:B4:23:3E:3F:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35382e302f32332d3233203d3e20323639353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:e6:44:eb:c1:b9:e5:54:c9:00:7e:0a:0a:74:b8:83:f2:
         17:eb:5b:39:e2:73:cb:88:b2:b5:ab:64:30:29:1f:b7:17:82:
         8c:87:8b:c8:53:1f:95:24:0f:b6:f0:63:23:6a:83:cf:36:f0:
         01:c6:e6:c6:49:00:7c:a6:d6:41:e9:e2:3a:69:27:28:ae:e1:
         f8:23:b8:0b:cf:1a:09:9b:f6:6c:44:e0:27:69:a2:3b:4c:31:
         b2:0e:6f:f3:e0:70:0f:3e:9f:b9:e3:d1:32:62:64:e4:0a:22:
         b8:83:5d:9f:bd:3f:e3:f3:cc:5f:a1:ae:15:5f:8b:95:96:f6:
         bf:e9:c6:9b:9e:8c:e7:4b:c7:76:07:a6:f6:1b:41:fb:ac:f9:
         8f:d7:db:d4:ad:71:2e:02:01:06:76:57:ef:8a:58:aa:b6:d1:
         c8:26:b2:32:08:83:fc:0c:1c:c6:6e:1e:d1:40:8e:8d:a6:c6:
         02:a5:aa:6a:e7:88:60:eb:a1:8e:41:3d:db:63:cb:ca:1c:0d:
         e6:5c:67:7f:be:57:9c:73:ab:51:e4:d3:cc:78:35:2c:91:06:
         28:df:1a:cd:ed:43:11:28:c3:f0:d8:34:ff:54:9d:93:e7:75:
         92:49:da:a2:a2:74:48:b7:1e:dd:21:25:60:f7:da:4e:52:2f:
         39:c6:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org