Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
File:                     34352e3138352e37362e302f32322d3332203d3e20323639333637.roa (raw, json)
Hash identifier:          1GtQMSqluwfu4vD1bQATvbZjH8xHWEcFuzs2KyyDcIY=
Subject key identifier:   73:28:E2:EF:B0:73:7D:2F:D5:47:FA:8F:D9:F7:95:E3:B2:67:F0:35
Certificate issuer:       /CN=449501A41FB5B63BE134A62426AA3A72D306EF80
Certificate serial:       282BF6B5A1723DC78F889EC2C63FE480E699716D
Authority key identifier: 44:95:01:A4:1F:B5:B6:3B:E1:34:A6:24:26:AA:3A:72:D3:06:EF:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449501A41FB5B63BE134A62426AA3A72D306EF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
Signing time:             Tue 02 Apr 2024 18:02:19 +0000
ROA not before:           Tue 02 Apr 2024 17:57:19 +0000
ROA not after:            Tue 01 Apr 2025 18:02:19 +0000
asID:                     269367
IP address blocks:        45.185.76.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2b:f6:b5:a1:72:3d:c7:8f:88:9e:c2:c6:3f:e4:80:e6:99:71:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449501A41FB5B63BE134A62426AA3A72D306EF80
        Validity
            Not Before: Apr  2 17:57:19 2024 GMT
            Not After : Apr  1 18:02:19 2025 GMT
        Subject: CN=7328E2EFB0737D2FD547FA8FD9F795E3B267F035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:8a:fa:ba:9e:50:e1:17:b2:22:36:87:4c:
                    d8:1c:0a:53:1b:55:f4:27:ab:3d:b6:5e:71:b9:c3:
                    ac:af:6f:01:4b:ce:4c:48:ad:62:08:ac:57:60:b5:
                    e5:ec:3b:18:17:ac:59:d8:da:8a:82:28:91:86:f7:
                    d8:72:3d:e2:de:c5:6a:d8:14:2c:4e:fe:ab:7e:85:
                    da:af:ce:6b:1e:e3:76:b5:9d:9a:9a:0b:16:c7:fc:
                    29:f8:61:58:a6:cc:f5:c6:dd:ba:ac:bd:30:57:f8:
                    1c:5e:6d:2b:ae:7e:bb:02:5c:84:f4:e1:1d:01:cb:
                    7b:7c:59:69:37:4f:8a:59:14:28:e3:37:16:16:17:
                    0f:db:56:16:13:24:dd:5a:8d:73:ff:9f:b4:50:a7:
                    90:e7:a4:e7:ab:0b:83:5d:c1:9f:ac:18:62:dd:62:
                    20:1b:13:67:ea:ee:08:df:30:0a:3e:dd:cc:50:7e:
                    ee:45:76:75:71:73:ff:ea:8f:63:43:b7:5d:9f:11:
                    54:85:d5:42:74:24:e8:ce:f9:02:0f:f2:b9:9b:92:
                    ee:34:fd:c0:3e:79:08:b2:d5:c5:6a:bb:8d:ef:a1:
                    df:02:2a:7a:62:81:ee:a9:e4:d6:d7:8f:0d:97:91:
                    11:2e:ea:b2:52:4d:d6:38:59:d6:c0:87:4c:4a:35:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:28:E2:EF:B0:73:7D:2F:D5:47:FA:8F:D9:F7:95:E3:B2:67:F0:35
            X509v3 Authority Key Identifier:
                keyid:44:95:01:A4:1F:B5:B6:3B:E1:34:A6:24:26:AA:3A:72:D3:06:EF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/449501A41FB5B63BE134A62426AA3A72D306EF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449501A41FB5B63BE134A62426AA3A72D306EF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:06:4b:95:ea:4b:4d:43:6e:c5:74:75:17:d9:ea:5b:28:d6:
         ee:69:50:c5:b9:f2:55:c7:ab:73:e8:22:5f:c3:6f:c8:e2:e7:
         8a:43:8b:cf:3a:03:d0:3b:72:8c:d5:cd:d4:13:69:ac:56:2a:
         5e:88:d9:43:1a:ae:65:b9:a4:3c:89:4c:5c:bf:01:7e:13:4b:
         c0:b6:76:9f:f0:66:75:ec:65:bb:87:36:f5:fc:82:76:94:a7:
         31:52:f0:0d:b3:3d:21:3c:48:22:13:bb:6f:1a:4e:bf:39:64:
         d6:78:3a:71:ee:6a:d1:c7:fb:2d:a4:27:52:b4:1c:64:c7:e6:
         a2:44:b7:04:25:b0:54:c6:69:ca:c2:a0:c7:6d:d6:45:4a:62:
         f6:3b:3e:33:61:8b:07:75:68:4e:9f:16:50:1f:27:a8:70:cd:
         05:33:88:0f:e5:a2:75:a5:71:0a:88:f8:2a:2e:96:15:31:6c:
         78:18:7c:77:0c:de:63:3b:be:55:76:bf:0e:96:c6:52:8e:40:
         3d:1d:a5:3c:97:ae:a1:da:12:80:ea:55:b3:03:f7:b6:66:2d:
         83:38:59:ba:d0:13:27:60:c5:3c:96:e0:de:09:e7:62:e0:46:
         63:02:78:6f:36:53:e6:cf:cd:d5:ac:8a:e0:74:57:ed:cd:84:
         9b:88:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org