Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/0/34352e3137332e38302e302f32322d3234203d3e20323638383032.roa
File:                     34352e3137332e38302e302f32322d3234203d3e20323638383032.roa (raw, json)
Hash identifier:          3KbJH4ckFi1DLkFbP7/gV/ga5OWwKNS9Rqo1ppIjhA8=
Subject key identifier:   41:18:AB:34:7B:C2:09:03:87:60:E0:C0:BE:EB:31:F3:5F:EA:36:E1
Certificate issuer:       /CN=A0A41AB113D3E18D0DF6258A21F9E1BE70AEDB93
Certificate serial:       176C523F02B5A0CDB2107F74A299D8151EE35BE3
Authority key identifier: A0:A4:1A:B1:13:D3:E1:8D:0D:F6:25:8A:21:F9:E1:BE:70:AE:DB:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0A41AB113D3E18D0DF6258A21F9E1BE70AEDB93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/0/34352e3137332e38302e302f32322d3234203d3e20323638383032.roa
Signing time:             Thu 09 Nov 2023 18:53:13 +0000
ROA not before:           Thu 09 Nov 2023 18:48:13 +0000
ROA not after:            Thu 07 Nov 2024 18:53:13 +0000
asID:                     268802
IP address blocks:        45.173.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6c:52:3f:02:b5:a0:cd:b2:10:7f:74:a2:99:d8:15:1e:e3:5b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A41AB113D3E18D0DF6258A21F9E1BE70AEDB93
        Validity
            Not Before: Nov  9 18:48:13 2023 GMT
            Not After : Nov  7 18:53:13 2024 GMT
        Subject: CN=4118AB347BC209038760E0C0BEEB31F35FEA36E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:fa:c3:2e:87:ce:8e:94:9e:74:14:f1:a4:
                    3c:59:ec:3f:f2:78:0b:b8:4a:e4:78:72:69:8e:80:
                    4a:d2:fd:b2:47:29:63:1d:9a:a6:e3:b4:43:5b:4b:
                    25:6e:c7:30:9e:c6:5c:50:1f:f3:c3:0f:b9:d1:97:
                    d7:4a:29:b1:19:ae:cf:1a:c1:a1:a8:87:75:9b:c5:
                    2a:ae:69:57:31:aa:f6:28:0d:62:52:ac:67:42:1c:
                    45:38:ed:29:56:75:01:f8:2f:f7:2d:30:4d:ef:4e:
                    88:b2:d7:74:82:e7:8c:bb:a5:e8:ec:c5:36:8a:0d:
                    7c:dc:3c:ae:00:25:82:ea:b7:50:7d:5f:11:0c:8a:
                    55:6d:6d:e4:fb:d5:17:ce:0e:f3:22:f1:09:ed:17:
                    a7:5f:ac:58:e3:ec:ad:0c:c5:41:00:91:be:c8:96:
                    0d:8f:12:98:83:72:9b:a8:6f:1d:33:ce:3a:bc:af:
                    92:fe:a0:fc:2e:89:05:f5:f6:54:0c:60:38:51:3d:
                    65:35:18:60:39:79:6c:3e:f8:3f:61:f2:8d:71:d9:
                    09:01:49:70:04:af:c7:8c:5a:c9:f0:05:ca:64:08:
                    86:ec:ca:52:c9:9a:a2:ae:d9:db:69:48:91:9c:60:
                    f3:9b:52:23:f5:c4:5f:45:b7:68:8f:42:3a:85:00:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:18:AB:34:7B:C2:09:03:87:60:E0:C0:BE:EB:31:F3:5F:EA:36:E1
            X509v3 Authority Key Identifier:
                keyid:A0:A4:1A:B1:13:D3:E1:8D:0D:F6:25:8A:21:F9:E1:BE:70:AE:DB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/0/A0A41AB113D3E18D0DF6258A21F9E1BE70AEDB93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0A41AB113D3E18D0DF6258A21F9E1BE70AEDB93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/0/34352e3137332e38302e302f32322d3234203d3e20323638383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:f6:20:0e:cb:3f:91:02:c4:2d:77:19:4e:be:7f:45:9f:3c:
         5d:6c:68:64:6b:25:f1:71:eb:d6:02:09:35:05:42:f5:79:3a:
         fe:97:52:7a:dd:a8:45:22:2c:c7:58:48:6e:29:5b:9d:a6:3b:
         7c:7e:25:a6:e0:6f:a4:9b:ea:73:f7:14:6e:0b:c8:cf:6c:df:
         e0:b8:c6:3c:27:01:eb:a0:0c:70:42:63:b4:aa:50:34:98:a3:
         30:28:cb:9c:93:4f:47:c5:bd:6b:f3:5f:80:a1:9e:b6:6a:99:
         1b:ab:0f:fa:f8:fb:f4:ce:0a:dc:ed:e4:98:03:83:57:37:b6:
         6d:b2:35:fc:f3:ab:51:21:44:7f:74:d1:76:61:fb:21:7d:98:
         3e:03:e4:45:e2:57:a5:b5:1b:78:65:ca:3f:c2:c5:80:f2:0f:
         b3:0e:05:ac:25:0c:36:91:9c:95:d3:03:7d:12:78:a9:96:fa:
         96:fd:3c:3b:dd:c5:3b:e3:d7:1c:70:1c:74:02:11:f3:89:28:
         4a:93:1d:7b:74:3d:79:c9:75:99:31:20:dc:37:1b:0e:b1:1a:
         52:98:f6:3f:78:8d:92:56:dd:69:b3:4f:d3:66:05:33:ac:e3:
         b5:c3:d0:c6:ef:86:03:0a:93:74:f1:78:5d:cb:08:38:ba:e2:
         92:3c:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:51 2024 by rpki-client on console-ams.rpki-client.org