Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/34352e3137332e38382e302f32322d3332203d3e20323638383139.roa
File:                     34352e3137332e38382e302f32322d3332203d3e20323638383139.roa (raw, json)
Hash identifier:          +24vgKTJwqB1gtVADB5ks5BR2SfzfcOkziAutnffhhM=
Subject key identifier:   71:33:6A:BB:10:5D:CA:A8:63:3F:B8:E8:34:A3:BF:DE:F5:14:35:5A
Certificate issuer:       /CN=19E71BAF4341B8B8710822D2D9F19AEC58B506BE
Certificate serial:       349B8E91CFD7ACB2E300F09EC290E3CB814933B6
Authority key identifier: 19:E7:1B:AF:43:41:B8:B8:71:08:22:D2:D9:F1:9A:EC:58:B5:06:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19E71BAF4341B8B8710822D2D9F19AEC58B506BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/34352e3137332e38382e302f32322d3332203d3e20323638383139.roa
Signing time:             Wed 21 Dec 2022 18:19:27 +0000
ROA not before:           Wed 21 Dec 2022 18:14:27 +0000
ROA not after:            Wed 20 Dec 2023 18:19:27 +0000
asID:                     268819
IP address blocks:        45.173.88.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9b:8e:91:cf:d7:ac:b2:e3:00:f0:9e:c2:90:e3:cb:81:49:33:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19E71BAF4341B8B8710822D2D9F19AEC58B506BE
        Validity
            Not Before: Dec 21 18:14:27 2022 GMT
            Not After : Dec 20 18:19:27 2023 GMT
        Subject: CN=71336ABB105DCAA8633FB8E834A3BFDEF514355A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0d:3d:db:35:d9:bb:82:fa:5c:75:1f:ed:75:
                    29:8d:d1:d9:20:11:b8:43:50:da:ff:df:d4:c8:c0:
                    f4:6d:82:8c:07:ce:e9:00:8c:42:f5:fb:06:72:c2:
                    ca:08:6b:6e:fc:e6:a4:25:2d:35:dc:eb:9f:7a:17:
                    2c:86:04:53:b5:93:9d:0e:68:23:ed:51:4b:18:99:
                    a8:0e:43:4a:fa:40:a7:64:f7:e4:93:1d:30:5c:5e:
                    53:c7:0e:0d:f0:fe:60:e2:60:93:0a:d8:a8:5b:04:
                    e5:18:d7:b0:f7:01:b8:41:06:e0:dd:df:27:96:2c:
                    56:90:b0:9c:4c:49:ca:73:36:9f:5d:14:52:00:4f:
                    e5:31:ad:9d:d9:ca:70:52:fc:a4:84:5e:09:06:0c:
                    ec:80:0e:87:9d:b1:0d:f5:9c:ee:ce:34:e1:b4:94:
                    1d:ef:86:b7:bd:04:7b:39:b4:4f:26:f2:65:0c:3b:
                    a0:aa:01:d7:b3:f2:7b:7f:b3:eb:2f:d5:60:cc:64:
                    8b:ce:29:aa:3c:bb:36:b9:aa:94:50:76:47:1d:25:
                    3e:51:39:f5:cb:cc:00:c8:11:f1:11:e7:1f:b5:05:
                    ca:78:ef:40:e9:06:39:a7:54:7d:7a:7b:6c:88:b5:
                    8b:48:6d:22:30:6b:68:75:54:75:b9:2d:51:f8:c0:
                    08:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:33:6A:BB:10:5D:CA:A8:63:3F:B8:E8:34:A3:BF:DE:F5:14:35:5A
            X509v3 Authority Key Identifier:
                keyid:19:E7:1B:AF:43:41:B8:B8:71:08:22:D2:D9:F1:9A:EC:58:B5:06:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/19E71BAF4341B8B8710822D2D9F19AEC58B506BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19E71BAF4341B8B8710822D2D9F19AEC58B506BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/34352e3137332e38382e302f32322d3332203d3e20323638383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:15:c8:f9:be:17:2b:f2:75:d0:cf:8e:a2:cf:d3:a3:e0:00:
         5f:5a:f2:53:f8:e2:d1:ec:b8:b1:db:1b:6c:34:81:e6:52:ee:
         7c:f4:46:e8:cc:42:81:71:ef:ee:88:d7:57:e9:b7:ab:6a:3a:
         71:47:04:95:72:ed:1f:00:50:bf:4f:ff:46:d2:97:68:7e:a1:
         4c:b9:c0:cf:0c:cf:6d:65:cc:52:0a:f1:dd:17:5e:b3:3a:c4:
         d8:4f:7c:c0:64:92:49:c6:63:cd:f1:d4:d1:43:da:82:3e:c4:
         f3:d6:2d:60:d9:20:08:96:ca:61:d8:f6:d6:e0:18:03:43:41:
         21:f1:78:63:19:57:1c:b0:7f:9b:ac:f1:98:cb:81:89:2e:66:
         85:6c:0e:cd:4c:44:e9:ba:ef:57:35:2d:60:cb:da:f7:92:1c:
         21:55:09:dd:e6:8e:d7:7f:f9:27:a3:7f:81:d7:dc:99:e5:d6:
         99:a8:94:c0:83:f5:fa:ea:b9:fa:de:b4:e2:54:28:f5:e8:c2:
         87:4e:4f:9c:17:80:a1:f6:c5:ab:aa:6f:3d:42:17:f9:d1:98:
         9d:9f:21:3c:d2:36:f0:de:cc:15:87:ce:3f:78:2d:39:20:36:
         0f:36:23:ac:8a:9e:17:cc:d2:12:25:21:f6:75:49:6f:08:29:
         ad:15:26:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org