Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e39302e302f32332d3233203d3e20323632343934.roa
File:                     34352e3232362e39302e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          c8YSH/4xwWbCm8IFH6hdT/qNhTHbSZIJh+q4Acr472U=
Subject key identifier:   4A:B0:FE:C5:D8:95:DD:87:E2:76:8D:1C:92:6F:D9:72:55:FA:82:2A
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       7FA0B43244E6507EA99D0B44B270F89ACDA4FDBE
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e39302e302f32332d3233203d3e20323632343934.roa
Signing time:             Fri 18 Aug 2023 11:50:39 +0000
ROA not before:           Fri 18 Aug 2023 11:45:39 +0000
ROA not after:            Sun 18 Aug 2024 11:50:39 +0000
asID:                     262494
IP address blocks:        45.226.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a0:b4:32:44:e6:50:7e:a9:9d:0b:44:b2:70:f8:9a:cd:a4:fd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Aug 18 11:45:39 2023 GMT
            Not After : Aug 18 11:50:39 2024 GMT
        Subject: CN=3082010A0282010100C220C8C2B64A6ADEC720527F01752263DEF6D28B992A29CECE11823984DBB0F7DBE4CA72833DBD4761BE87504949F9531C316A2A53B80DA1D78565F69A04DAE363ABE179D76ABC5844A4660A809485DFD00F4521F29093761EBC25C5EE38815BE0A41CFDE7608DF424A5F7BDD0C8B7378382C219CD896EF9169CAD02F4654D08BB128DB538E250D8A18858BD04BA33B36A5C30DBAA32815D8909F86B0B1CFAFE1F377191EDDC6B1EF1E4DB28C84542240C037E0A6F31EE5727035B59F77A5EE1DD3C01022A09DA39B1ADFBD8618D612D3523FE6CB3D72D706C39D0CDC852A10FA553019E17F331E58EDF4BC88552DD0E10A1A5280018AE837A786076C557274D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:c8:c2:b6:4a:6a:de:c7:20:52:7f:01:75:
                    22:63:de:f6:d2:8b:99:2a:29:ce:ce:11:82:39:84:
                    db:b0:f7:db:e4:ca:72:83:3d:bd:47:61:be:87:50:
                    49:49:f9:53:1c:31:6a:2a:53:b8:0d:a1:d7:85:65:
                    f6:9a:04:da:e3:63:ab:e1:79:d7:6a:bc:58:44:a4:
                    66:0a:80:94:85:df:d0:0f:45:21:f2:90:93:76:1e:
                    bc:25:c5:ee:38:81:5b:e0:a4:1c:fd:e7:60:8d:f4:
                    24:a5:f7:bd:d0:c8:b7:37:83:82:c2:19:cd:89:6e:
                    f9:16:9c:ad:02:f4:65:4d:08:bb:12:8d:b5:38:e2:
                    50:d8:a1:88:58:bd:04:ba:33:b3:6a:5c:30:db:aa:
                    32:81:5d:89:09:f8:6b:0b:1c:fa:fe:1f:37:71:91:
                    ed:dc:6b:1e:f1:e4:db:28:c8:45:42:24:0c:03:7e:
                    0a:6f:31:ee:57:27:03:5b:59:f7:7a:5e:e1:dd:3c:
                    01:02:2a:09:da:39:b1:ad:fb:d8:61:8d:61:2d:35:
                    23:fe:6c:b3:d7:2d:70:6c:39:d0:cd:c8:52:a1:0f:
                    a5:53:01:9e:17:f3:31:e5:8e:df:4b:c8:85:52:dd:
                    0e:10:a1:a5:28:00:18:ae:83:7a:78:60:76:c5:57:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B0:FE:C5:D8:95:DD:87:E2:76:8D:1C:92:6F:D9:72:55:FA:82:2A
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e39302e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:f0:2a:ac:69:1b:a6:f7:97:60:82:3e:29:51:9a:36:cc:
         f7:9e:c7:5e:e6:fd:5a:79:c7:16:5c:06:5f:b4:ed:aa:29:30:
         1b:a7:6a:75:e1:73:28:ea:e4:97:22:38:de:be:81:18:6b:3c:
         87:d1:a3:92:87:57:f9:2d:6e:c0:9f:16:6a:31:a3:d8:a1:7e:
         c5:f4:3a:22:01:18:cb:e2:fc:6b:55:b8:89:84:f4:85:0a:7b:
         f5:cc:75:15:32:8d:f7:69:00:d6:f3:99:05:34:a2:54:82:9e:
         be:c3:8c:e2:a3:5b:b0:45:84:fd:52:ca:fe:30:e4:18:76:9b:
         55:31:d7:39:4d:33:9f:65:b5:2f:4c:79:5b:24:21:e6:8e:7c:
         38:1d:17:3b:33:95:3a:42:e4:c0:19:a7:17:26:48:fa:7d:65:
         d7:14:b7:1a:e1:89:f9:a5:f6:05:9d:93:fc:58:46:46:14:77:
         d9:c6:2a:42:d5:45:9c:59:ea:00:6d:9d:45:42:c9:5f:22:27:
         a6:23:41:06:d1:0e:8d:4e:7b:8d:27:b2:64:6a:97:46:5e:0e:
         ed:81:10:9f:45:08:d1:6b:e6:e0:63:28:4c:7c:47:80:91:9e:
         ed:34:7d:e5:24:2d:ad:94:0e:7f:37:2b:2c:65:38:92:62:c1:
         02:3b:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org