Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35382e302f32342d3234203d3e20323639353436.roa
File:                     34352e3138372e35382e302f32342d3234203d3e20323639353436.roa (raw, json)
Hash identifier:          z8feYwvzFJkS0WaSMlQKnPo1dUqsl0kCoyXms7Hn4K4=
Subject key identifier:   A2:01:03:B1:4B:92:39:32:B4:A1:10:8A:30:ED:39:E6:2A:24:00:2C
Certificate issuer:       /CN=549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3
Certificate serial:       5AFE7F67FDD2F894BA74ABD4BCF437EC1BB78015
Authority key identifier: 54:9B:96:CD:BE:DD:FA:CD:C6:11:B9:A0:90:3F:B4:23:3E:3F:FD:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35382e302f32342d3234203d3e20323639353436.roa
Signing time:             Wed 08 Nov 2023 17:19:46 +0000
ROA not before:           Wed 08 Nov 2023 17:14:46 +0000
ROA not after:            Wed 06 Nov 2024 17:19:46 +0000
asID:                     269546
IP address blocks:        45.187.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fe:7f:67:fd:d2:f8:94:ba:74:ab:d4:bc:f4:37:ec:1b:b7:80:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3
        Validity
            Not Before: Nov  8 17:14:46 2023 GMT
            Not After : Nov  6 17:19:46 2024 GMT
        Subject: CN=A20103B14B923932B4A1108A30ED39E62A24002C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:2e:67:df:54:78:df:40:19:8c:16:b7:8f:
                    19:4e:27:b8:9c:5a:01:74:5b:2b:8b:4e:26:aa:90:
                    3b:84:b6:15:16:86:bb:b0:da:bb:c0:ad:4b:08:be:
                    bc:6c:87:d4:e7:46:1b:82:20:80:b2:db:96:a4:47:
                    1b:19:2c:ba:f2:4b:19:f2:7b:ba:e7:b3:e1:56:8e:
                    eb:f5:54:40:0b:5b:a8:fd:b8:3a:49:14:4e:91:7e:
                    c7:fe:8d:aa:4f:fe:61:53:35:b6:c0:cf:51:be:da:
                    60:64:2a:a4:59:51:c3:35:87:c4:13:d2:07:a1:93:
                    62:f0:08:00:26:8c:94:51:e1:fe:67:84:4b:cb:98:
                    19:14:c6:c4:6b:12:1a:ae:be:c6:cc:46:ef:d8:c0:
                    21:a8:bf:bd:f0:ad:e6:16:02:dd:c4:3f:95:37:22:
                    52:76:d7:5a:b1:ff:62:45:86:a9:5e:66:ec:30:ea:
                    56:db:6a:f0:69:b3:e5:87:06:16:7b:27:e0:5b:9a:
                    3d:b8:2f:5e:29:ff:f7:b4:e0:04:25:0b:88:60:ff:
                    f0:ab:be:65:71:59:5b:76:68:21:b4:9d:c2:b5:cd:
                    2f:cd:14:d2:e8:a5:9b:ff:d1:e3:be:d5:0c:59:b1:
                    ef:ea:85:d0:7a:24:52:e0:f8:45:e4:ad:e3:20:f7:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:01:03:B1:4B:92:39:32:B4:A1:10:8A:30:ED:39:E6:2A:24:00:2C
            X509v3 Authority Key Identifier:
                keyid:54:9B:96:CD:BE:DD:FA:CD:C6:11:B9:A0:90:3F:B4:23:3E:3F:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549B96CDBEDDFACDC611B9A0903FB4233E3FFDC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/34352e3138372e35382e302f32342d3234203d3e20323639353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b6:25:b6:34:ad:a5:50:7b:3f:0d:89:d1:27:1d:94:5c:3b:
         ff:04:6d:99:eb:ff:c4:33:ef:88:22:56:d4:f9:a7:8c:cd:e8:
         30:16:01:aa:df:db:17:cc:a2:09:54:a2:ce:c8:fa:75:a2:d6:
         d3:77:e9:6a:d5:4c:1d:81:15:41:13:c4:38:0e:7d:f4:ca:71:
         d3:e9:c8:6f:13:f0:95:5d:34:8e:7a:42:cc:db:a6:78:13:0f:
         be:dc:ef:f7:02:4a:80:14:ca:53:83:ce:89:9e:22:a7:80:0b:
         d8:d9:22:1e:e7:88:89:09:f3:00:4b:47:b9:16:28:85:f0:8e:
         2b:37:a9:2c:1f:37:37:2e:8c:08:42:dd:3b:c0:56:35:0f:0c:
         0e:d7:3b:b3:12:36:82:b1:81:0a:39:3f:36:32:43:36:1c:1d:
         f1:cd:46:90:cf:12:10:41:51:93:66:99:20:90:d6:20:69:2d:
         a8:2b:69:c9:41:a6:77:56:e5:40:4c:94:c5:c9:d1:92:26:35:
         cb:3e:bf:ce:36:5b:52:94:2e:46:6f:54:14:55:24:e6:01:cd:
         1b:fd:f8:ca:e5:39:cc:23:e3:3a:84:eb:e1:54:6b:7f:fd:cf:
         4d:c6:bb:44:f6:f6:a1:d7:1b:c2:70:96:70:fe:1e:c7:25:23:
         54:5a:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org