Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/34352e3137382e32302e302f32322d3332203d3e20323639303135.roa
File:                     34352e3137382e32302e302f32322d3332203d3e20323639303135.roa (raw, json)
Hash identifier:          8TCE049zO+eB6PAkDi7d5fbh+A2U0lfrH32IN98EpT4=
Subject key identifier:   C9:00:A4:3A:C9:43:81:F2:A8:0C:3C:DC:61:03:B9:64:4D:52:72:3D
Certificate issuer:       /CN=C50CA4FF7E2D11574F46D0D7274665DAA95B21B5
Certificate serial:       6165DFBB0338A1828C5C14D6D224F348FFD8AD2A
Authority key identifier: C5:0C:A4:FF:7E:2D:11:57:4F:46:D0:D7:27:46:65:DA:A9:5B:21:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/34352e3137382e32302e302f32322d3332203d3e20323639303135.roa
Signing time:             Mon 04 Dec 2023 15:15:58 +0000
ROA not before:           Mon 04 Dec 2023 15:10:58 +0000
ROA not after:            Mon 02 Dec 2024 15:15:58 +0000
asID:                     269015
IP address blocks:        45.178.20.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:65:df:bb:03:38:a1:82:8c:5c:14:d6:d2:24:f3:48:ff:d8:ad:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C50CA4FF7E2D11574F46D0D7274665DAA95B21B5
        Validity
            Not Before: Dec  4 15:10:58 2023 GMT
            Not After : Dec  2 15:15:58 2024 GMT
        Subject: CN=C900A43AC94381F2A80C3CDC6103B9644D52723D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f7:1d:cc:62:f1:69:47:aa:4f:23:65:9f:8d:
                    c0:52:8d:3e:93:7c:1a:ec:75:56:e5:82:ba:aa:72:
                    d9:05:66:0b:6b:ba:2f:17:ac:d0:5a:d0:00:db:68:
                    03:c9:70:eb:39:d0:d8:5f:c1:14:42:af:fc:76:59:
                    b7:d8:1b:30:c2:68:ef:31:10:ea:22:a1:c5:78:3b:
                    dd:b7:a2:01:01:90:5f:06:76:ba:5b:8a:ea:12:5a:
                    8c:fa:45:a1:61:aa:ce:f6:ed:20:93:7c:6d:b6:fe:
                    81:28:6d:8f:b0:b5:d0:8c:c3:7e:33:dc:64:30:dc:
                    e1:fb:49:e7:4d:e0:b5:99:ee:33:9c:6b:74:c1:99:
                    d5:c4:49:ea:5d:1b:a8:8e:c9:8a:90:88:48:75:40:
                    1c:b6:1e:9f:67:50:66:92:5f:32:89:9b:96:72:9a:
                    d8:8c:fd:22:86:e2:80:5c:d5:a8:fc:00:1d:c1:87:
                    44:36:7b:bd:09:bb:ae:07:7d:95:dc:74:23:79:c0:
                    15:f2:4d:39:30:a0:00:fc:7b:6e:55:50:ab:e3:ed:
                    02:6f:e0:26:60:6f:a5:b6:8c:f1:6e:84:07:57:97:
                    18:75:11:63:33:40:f0:02:10:5c:35:bf:74:ad:8e:
                    d6:b3:1a:da:d2:3d:ff:b3:5d:7e:7e:5d:82:f8:97:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:00:A4:3A:C9:43:81:F2:A8:0C:3C:DC:61:03:B9:64:4D:52:72:3D
            X509v3 Authority Key Identifier:
                keyid:C5:0C:A4:FF:7E:2D:11:57:4F:46:D0:D7:27:46:65:DA:A9:5B:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/34352e3137382e32302e302f32322d3332203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:08:b9:5a:a6:72:fb:9d:d7:0f:59:9a:f2:9c:30:f1:bd:57:
         f0:f4:d1:e1:f9:45:e0:07:5f:6e:03:ab:86:56:dc:a2:71:6c:
         30:c8:e2:de:58:84:b4:52:92:ee:12:6f:9a:c5:af:b6:cd:a6:
         a6:47:94:97:25:f2:2e:e2:8b:42:7d:b1:44:fd:0d:61:25:22:
         cf:82:42:8f:13:50:16:87:88:09:ac:ca:3c:92:5c:d6:3c:12:
         c3:0d:b9:ad:60:32:95:d5:00:46:17:4b:91:5c:da:c8:cb:17:
         bb:9f:8f:28:13:e8:04:8b:0b:7c:60:d5:8d:b8:c9:d4:07:24:
         1c:5e:e1:09:92:90:d6:12:5d:ef:10:13:77:6c:d4:29:2e:1c:
         55:ba:2d:05:8c:b3:c0:8f:9d:50:ed:05:f0:6c:77:f9:ea:8c:
         9f:90:96:e6:08:62:c1:8f:1d:53:07:f2:34:3a:ac:18:91:b3:
         0b:40:11:13:f4:3d:af:bf:e5:08:b5:0c:35:27:d8:c1:84:44:
         aa:2c:2f:7b:2b:26:5d:d0:db:ec:7d:25:c1:98:2d:11:21:27:
         bf:dd:e9:90:96:cc:6a:b9:cf:a1:f5:14:12:1f:f8:88:97:92:
         cd:cc:b0:c6:ce:d5:2b:f1:38:0b:57:ab:16:b4:6a:68:43:f6:
         83:af:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org