Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa
File:                     34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa (raw, json)
Hash identifier:          qDVw9jA92oKzNxeNv5x1FJT0B9VD9zVFUc5/DBpLKUY=
Subject key identifier:   1A:0E:36:73:64:53:A0:66:3E:5E:84:2E:77:9E:F5:64:B1:CA:09:7C
Certificate issuer:       /CN=331A86B1CFCE5CD752521AD91A88036C23D00242
Certificate serial:       2C1E8F901DA4D329AFBBD89411BF67699D018DB9
Authority key identifier: 33:1A:86:B1:CF:CE:5C:D7:52:52:1A:D9:1A:88:03:6C:23:D0:02:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331A86B1CFCE5CD752521AD91A88036C23D00242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa
Signing time:             Thu 14 Sep 2023 16:00:00 +0000
ROA not before:           Thu 14 Sep 2023 15:55:00 +0000
ROA not after:            Thu 12 Sep 2024 16:00:00 +0000
asID:                     268848
IP address blocks:        45.174.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1e:8f:90:1d:a4:d3:29:af:bb:d8:94:11:bf:67:69:9d:01:8d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331A86B1CFCE5CD752521AD91A88036C23D00242
        Validity
            Not Before: Sep 14 15:55:00 2023 GMT
            Not After : Sep 12 16:00:00 2024 GMT
        Subject: CN=3082010A0282010100BFDDEDF1EC6A5CA0EE24F3C77D9032C3A905EC8A5B4CE33B6E6D3B9E10F6AEFEF3E87A1F8FB6A8CEF673D57D9E35EDF8E870BE087AEA21AFD3917A027A3682D4E04D54ACB4398EDABE1799C9E3D3F8F93B7B962DF644F334E1768A7F314E703C98D6384F6DC6C85071A31496845F24650791D563BE0BA46FD446BAC5B836A224D0518DDD786A3E13B1C5EC864AF608B02A69BE0EBAD142C160A3388E3B4263275843B223A105D3C642EC78833C872BD470E88929B7F23C13DA5C362A7A25BFDFF3E35D7BBCD28D3AD8C76EF655312F367AD92A39EBBE37DE7E67DA100AA5980EFFADC17416C4ABD5A3F7A47211667B4A88BF63DD4F6D67164F7B1E182E8000670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:ed:f1:ec:6a:5c:a0:ee:24:f3:c7:7d:90:
                    32:c3:a9:05:ec:8a:5b:4c:e3:3b:6e:6d:3b:9e:10:
                    f6:ae:fe:f3:e8:7a:1f:8f:b6:a8:ce:f6:73:d5:7d:
                    9e:35:ed:f8:e8:70:be:08:7a:ea:21:af:d3:91:7a:
                    02:7a:36:82:d4:e0:4d:54:ac:b4:39:8e:da:be:17:
                    99:c9:e3:d3:f8:f9:3b:7b:96:2d:f6:44:f3:34:e1:
                    76:8a:7f:31:4e:70:3c:98:d6:38:4f:6d:c6:c8:50:
                    71:a3:14:96:84:5f:24:65:07:91:d5:63:be:0b:a4:
                    6f:d4:46:ba:c5:b8:36:a2:24:d0:51:8d:dd:78:6a:
                    3e:13:b1:c5:ec:86:4a:f6:08:b0:2a:69:be:0e:ba:
                    d1:42:c1:60:a3:38:8e:3b:42:63:27:58:43:b2:23:
                    a1:05:d3:c6:42:ec:78:83:3c:87:2b:d4:70:e8:89:
                    29:b7:f2:3c:13:da:5c:36:2a:7a:25:bf:df:f3:e3:
                    5d:7b:bc:d2:8d:3a:d8:c7:6e:f6:55:31:2f:36:7a:
                    d9:2a:39:eb:be:37:de:7e:67:da:10:0a:a5:98:0e:
                    ff:ad:c1:74:16:c4:ab:d5:a3:f7:a4:72:11:66:7b:
                    4a:88:bf:63:dd:4f:6d:67:16:4f:7b:1e:18:2e:80:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0E:36:73:64:53:A0:66:3E:5E:84:2E:77:9E:F5:64:B1:CA:09:7C
            X509v3 Authority Key Identifier:
                keyid:33:1A:86:B1:CF:CE:5C:D7:52:52:1A:D9:1A:88:03:6C:23:D0:02:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/331A86B1CFCE5CD752521AD91A88036C23D00242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/331A86B1CFCE5CD752521AD91A88036C23D00242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/34352e3137342e3130302e302f32322d3234203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:a1:ae:33:02:26:6b:6b:ce:62:d0:a0:d2:5f:9b:a8:cc:
         86:13:ce:61:6c:c9:cf:93:2d:04:ac:8b:13:a0:80:3b:b4:c2:
         94:08:a9:e4:0e:9b:6b:87:c2:b1:f1:a8:1c:55:45:27:67:f5:
         ec:68:ff:d2:52:71:f6:e4:8c:61:33:fe:17:fd:cf:db:35:62:
         0a:d6:ee:a7:50:d4:fc:6f:39:de:47:62:0e:27:f9:5d:bb:00:
         f2:44:8c:6f:b2:67:dc:4b:c3:01:68:01:ba:df:b8:43:e6:84:
         e6:2e:c5:75:ec:16:35:0f:b9:28:cc:21:b9:7d:40:4e:d6:fb:
         b7:ce:89:ba:42:f5:3f:1e:fa:76:ef:eb:3b:a7:d3:b2:73:18:
         16:c2:b7:e7:17:a7:54:fc:78:8b:b5:1d:6d:fd:4d:6b:98:b2:
         ea:cb:e8:7e:90:b5:64:dc:c8:3a:68:84:ad:73:a2:ec:8f:ef:
         eb:62:1d:7e:5e:30:05:5e:1e:f4:43:07:a7:ee:25:d0:48:f9:
         00:0c:0a:1e:64:d4:fa:ad:71:bc:df:df:87:1b:18:dd:6f:ad:
         8f:e9:9b:e2:01:42:fa:5e:9f:03:15:ec:75:90:8c:01:a9:d8:
         7c:32:83:99:4e:08:6e:9f:5b:23:30:db:dc:10:67:96:7b:5b:
         0f:d4:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org