Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32322e302f32332d3233203d3e20323638353038.roa
File:                     34352e3136322e32322e302f32332d3233203d3e20323638353038.roa (raw, json)
Hash identifier:          BHLdFrXieMXGDorPFhBsPTyfvFnz1fO4dqHz5x9AvV4=
Subject key identifier:   F4:82:55:CA:C6:E0:34:1F:DA:19:9F:77:0B:35:35:42:F1:BF:53:A7
Certificate issuer:       /CN=DAEA49A3FD15ABED2107C811FA0C254372F1ACBE
Certificate serial:       39A8F2E1417BEA5943BB292EC928DFE520665481
Authority key identifier: DA:EA:49:A3:FD:15:AB:ED:21:07:C8:11:FA:0C:25:43:72:F1:AC:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAEA49A3FD15ABED2107C811FA0C254372F1ACBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32322e302f32332d3233203d3e20323638353038.roa
Signing time:             Tue 28 Feb 2023 19:40:48 +0000
ROA not before:           Tue 28 Feb 2023 19:35:48 +0000
ROA not after:            Tue 27 Feb 2024 19:40:48 +0000
asID:                     268508
IP address blocks:        45.162.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a8:f2:e1:41:7b:ea:59:43:bb:29:2e:c9:28:df:e5:20:66:54:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAEA49A3FD15ABED2107C811FA0C254372F1ACBE
        Validity
            Not Before: Feb 28 19:35:48 2023 GMT
            Not After : Feb 27 19:40:48 2024 GMT
        Subject: CN=F48255CAC6E0341FDA199F770B353542F1BF53A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:95:f5:e4:b5:a6:d9:6f:24:d6:05:53:93:cd:
                    1c:a3:60:9e:09:2a:49:ac:fd:ce:e7:99:3b:6d:d9:
                    b6:14:1e:7a:23:21:51:bd:0b:2a:82:ea:72:82:f3:
                    35:f9:57:1b:af:73:65:95:45:48:45:b4:d4:4c:9b:
                    d8:4c:64:91:11:ea:74:7a:8e:6f:96:05:b6:80:c6:
                    17:44:06:65:4b:a2:90:e3:b3:8a:79:46:35:fa:4e:
                    7c:3d:95:f1:48:77:0c:9c:3a:ce:9f:1e:34:ee:13:
                    dc:9e:5f:73:6f:94:e6:6a:ca:2e:d5:20:f8:a4:c0:
                    12:e4:f6:db:bb:ca:0f:03:f0:61:7a:fc:e6:7f:5a:
                    6e:d9:1e:7f:95:1c:e5:89:a3:8f:61:14:54:7c:9c:
                    e2:58:3a:b7:c3:34:3d:b3:7e:3b:49:39:a1:18:87:
                    04:e1:27:6c:80:91:46:c7:c9:8a:94:b7:c7:2b:76:
                    30:3a:83:86:c8:d7:52:fc:0c:b8:76:ba:ac:96:2d:
                    c7:88:9f:6e:d0:a5:f4:23:de:3b:c9:6d:04:d7:80:
                    05:52:a2:a9:ae:98:4c:cf:d3:81:8e:67:af:24:23:
                    27:48:ee:69:31:75:a1:5a:16:50:eb:c5:31:bf:84:
                    fa:5f:16:71:07:1c:f7:7f:d7:85:98:38:f8:81:62:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:82:55:CA:C6:E0:34:1F:DA:19:9F:77:0B:35:35:42:F1:BF:53:A7
            X509v3 Authority Key Identifier:
                keyid:DA:EA:49:A3:FD:15:AB:ED:21:07:C8:11:FA:0C:25:43:72:F1:AC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/DAEA49A3FD15ABED2107C811FA0C254372F1ACBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DAEA49A3FD15ABED2107C811FA0C254372F1ACBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32322e302f32332d3233203d3e20323638353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:89:eb:de:cc:79:81:a4:e5:38:ba:74:a9:e0:fe:d3:c6:5b:
         38:e0:c0:b7:86:58:fb:8f:36:b5:58:ed:fb:94:6d:00:d2:ab:
         a2:16:7a:94:8a:04:86:72:8e:9b:8e:1f:76:47:76:66:68:65:
         c4:63:42:1d:da:dd:f1:2a:72:3c:d5:80:89:c0:4a:5f:17:6e:
         23:1f:90:85:97:01:12:b6:0c:19:2f:ed:58:25:f4:ce:a1:18:
         50:c6:2d:22:00:5e:61:10:ef:c2:f3:7e:3d:3b:47:ca:aa:3e:
         b5:28:96:03:11:3b:ec:62:bd:fc:09:56:60:3e:b5:32:82:cb:
         1b:a5:7d:1a:fe:25:f4:70:7d:d9:52:86:e1:2a:d3:a0:e9:27:
         8c:97:89:f9:e3:10:ce:ff:ea:e4:74:e9:a4:7c:15:6a:2c:b4:
         35:69:19:ec:ac:2f:2e:02:56:1d:11:e8:dd:ed:da:ab:8b:e4:
         6d:de:de:7b:f7:34:31:af:25:58:b1:88:07:60:70:51:7a:7f:
         9f:86:f7:1b:11:a0:4d:d4:6c:13:1b:29:ad:f5:a2:80:f1:85:
         65:fb:79:e9:59:bf:3a:0d:3a:d0:a4:92:a3:a0:9c:39:91:1b:
         a7:b3:de:c1:b2:bf:00:1e:85:27:68:31:b6:ce:ec:6e:89:1f:
         37:bd:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org