Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/34352e3138322e31362e302f32322d3232203d3e20323639323631.roa
File:                     34352e3138322e31362e302f32322d3232203d3e20323639323631.roa (raw, json)
Hash identifier:          FRe/nIJQglv02H78+7jznxVyeyqDfdvxlcwgUScGuLM=
Subject key identifier:   7B:A2:19:44:10:36:87:86:61:B9:8A:A1:2D:1C:5E:D3:36:DE:25:4F
Certificate issuer:       /CN=43BCFB40CE625A70E8B36669C865055B663C87AA
Certificate serial:       3C00B670B7E890D295809422364CDE9BB982FDE4
Authority key identifier: 43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/34352e3138322e31362e302f32322d3232203d3e20323639323631.roa
Signing time:             Fri 26 Jan 2024 18:29:26 +0000
ROA not before:           Fri 26 Jan 2024 18:24:26 +0000
ROA not after:            Fri 24 Jan 2025 18:29:26 +0000
asID:                     269261
IP address blocks:        45.182.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:00:b6:70:b7:e8:90:d2:95:80:94:22:36:4c:de:9b:b9:82:fd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BCFB40CE625A70E8B36669C865055B663C87AA
        Validity
            Not Before: Jan 26 18:24:26 2024 GMT
            Not After : Jan 24 18:29:26 2025 GMT
        Subject: CN=7BA219441036878661B98AA12D1C5ED336DE254F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f7:d1:fc:92:86:8f:87:a2:3b:7d:f5:60:77:
                    6c:ab:59:54:c5:6e:3e:43:18:a6:df:fd:55:2d:87:
                    f2:22:ca:74:14:bc:d8:5e:27:68:69:a9:51:0b:6e:
                    5e:71:52:95:cf:a2:c8:a6:fd:92:f7:4e:27:4f:9d:
                    85:60:63:37:12:91:f1:6a:aa:2f:f1:9d:c5:ed:48:
                    a6:03:66:5f:e2:33:34:ca:4b:c8:43:54:aa:15:66:
                    49:69:d5:87:25:34:d0:75:96:d3:d9:9c:aa:2f:3d:
                    3d:7e:dd:64:fc:05:37:d7:4a:9c:5f:3c:bc:2f:5a:
                    e3:20:9e:f1:ed:fa:d1:59:30:2f:a3:ff:05:92:5a:
                    d9:0c:61:15:69:32:e1:c2:4d:4c:15:76:ef:9f:b3:
                    da:0e:ff:e9:e6:48:fc:68:37:91:54:f4:ca:c8:16:
                    cc:b8:c7:1b:d2:19:90:c8:c9:8d:54:c1:d3:5a:4e:
                    80:c6:5e:15:8e:24:57:85:1e:b2:7e:08:b2:0b:8a:
                    f9:5d:d4:f8:1b:8d:40:82:db:68:a8:71:65:09:be:
                    e1:af:10:ed:2a:c8:84:9c:94:f4:7c:43:88:86:17:
                    91:fb:6f:03:ca:54:43:61:6c:1a:3d:4e:86:ff:43:
                    65:73:29:fd:25:fc:dd:79:bb:80:ca:0f:15:65:47:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:19:44:10:36:87:86:61:B9:8A:A1:2D:1C:5E:D3:36:DE:25:4F
            X509v3 Authority Key Identifier:
                keyid:43:BC:FB:40:CE:62:5A:70:E8:B3:66:69:C8:65:05:5B:66:3C:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/43BCFB40CE625A70E8B36669C865055B663C87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43BCFB40CE625A70E8B36669C865055B663C87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/34352e3138322e31362e302f32322d3232203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:81:ad:ab:29:8a:56:c3:09:26:ff:b2:3b:4f:f0:16:ab:26:
         90:ca:9b:0d:03:23:32:e0:56:b1:4c:94:77:7d:f4:47:31:be:
         1b:b7:c8:2c:4a:a2:34:99:5f:87:fd:aa:97:3b:ff:57:86:3f:
         82:71:06:fb:bb:51:ab:a0:85:22:88:02:e1:bd:a3:f9:fd:36:
         6c:99:ec:91:d9:5e:24:c4:a9:e4:e7:fb:2a:02:da:83:2b:59:
         76:22:dd:46:dd:d5:9e:36:f2:fc:fd:2a:9a:15:34:05:aa:ac:
         ae:db:b2:ab:81:bc:94:8f:02:7c:ae:60:cf:9a:c0:b2:f4:44:
         37:dc:ef:60:a3:ea:53:af:ae:9f:39:04:58:52:37:55:9f:34:
         29:9d:70:c8:b9:a0:62:4d:ad:0f:06:d0:63:3f:3c:72:f0:d5:
         52:cb:66:8c:78:21:c4:01:17:c4:67:d2:a2:4d:9b:6a:9b:ff:
         68:c1:83:50:4f:77:a6:a4:94:e4:37:60:58:e4:92:a7:4c:74:
         81:03:57:04:87:d3:4e:9c:90:f9:cb:ff:7b:4e:b7:44:9e:f4:
         83:fb:e0:79:10:17:d3:e3:36:36:05:af:43:5c:c7:19:5d:90:
         2d:63:a8:37:a2:15:ec:94:b5:2e:34:1b:2f:c7:5c:86:24:45:
         cc:e8:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org