Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa
File:                     34352e3139302e32382e302f32322d3234203d3e20323639363332.roa (raw, json)
Hash identifier:          OjAMXbzbKx0/oOdOqe/F1DS67wp2RucgF8zLRUWfMSs=
Subject key identifier:   17:9C:98:5B:37:A0:84:00:44:25:7E:36:E5:44:62:07:C9:40:79:F2
Certificate issuer:       /CN=C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A
Certificate serial:       3A3D2254217EDB1C8F6388E20C3611A1A10003AF
Authority key identifier: C9:B2:C4:9F:87:C4:74:74:2D:6F:0F:7C:7A:3D:1D:CC:84:19:34:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa
Signing time:             Fri 01 Mar 2024 21:54:29 +0000
ROA not before:           Fri 01 Mar 2024 21:49:29 +0000
ROA not after:            Fri 28 Feb 2025 21:54:29 +0000
asID:                     269632
IP address blocks:        45.190.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3d:22:54:21:7e:db:1c:8f:63:88:e2:0c:36:11:a1:a1:00:03:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A
        Validity
            Not Before: Mar  1 21:49:29 2024 GMT
            Not After : Feb 28 21:54:29 2025 GMT
        Subject: CN=179C985B37A0840044257E36E5446207C94079F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:bb:ed:8c:da:1e:f7:2e:23:1d:7f:b5:a8:
                    2e:90:7f:8b:4e:19:97:a2:e2:c5:86:74:ae:72:e6:
                    bf:7d:75:aa:74:35:23:01:31:48:35:11:a3:84:61:
                    0f:fe:9f:ae:73:79:34:84:30:bf:0a:ab:88:06:78:
                    e3:29:d5:58:ae:5d:de:3e:e0:20:3b:dc:f9:27:38:
                    6e:25:cd:ca:5f:c2:40:36:65:b4:e0:66:57:52:4e:
                    b1:dc:fe:e9:bf:38:bf:92:89:3d:f7:5f:fa:d4:42:
                    f0:a7:f5:03:7c:ee:9d:03:8e:5e:58:88:f9:a3:76:
                    36:ee:38:ec:a7:16:80:55:5f:67:79:bf:12:36:d7:
                    ca:2a:ff:ef:5c:62:9b:ac:36:87:5f:62:76:6b:b3:
                    04:72:3b:9c:37:8f:eb:aa:5a:45:32:f3:26:97:0c:
                    17:fb:97:c3:57:a5:51:ff:0a:b1:89:eb:e8:8f:b3:
                    00:cd:f3:67:3f:6e:b3:74:20:9a:e6:5b:1a:dd:a5:
                    c2:1c:4e:e1:4e:7c:4e:da:0c:bb:15:26:ba:4d:19:
                    b7:db:b0:34:f9:ed:48:e1:79:76:eb:63:4a:af:6c:
                    fb:d9:78:9e:15:9c:b3:7e:4b:c1:c7:53:88:71:c7:
                    f6:de:f8:fa:18:f0:8f:2b:4c:db:82:f5:a4:12:c1:
                    4a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9C:98:5B:37:A0:84:00:44:25:7E:36:E5:44:62:07:C9:40:79:F2
            X509v3 Authority Key Identifier:
                keyid:C9:B2:C4:9F:87:C4:74:74:2D:6F:0F:7C:7A:3D:1D:CC:84:19:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9B2C49F87C474742D6F0F7C7A3D1DCC8419346A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:10:c8:c9:34:c1:16:ce:f4:c2:2b:e8:76:dc:8b:10:1e:
         3d:d6:be:45:a4:5b:91:94:7e:68:f0:3b:bd:1e:2d:b2:a1:fa:
         09:d8:1f:a9:d1:cb:f8:ea:62:ba:de:8a:2e:14:62:47:60:b6:
         71:51:1f:d1:a8:34:d6:3d:1f:0c:8e:5d:33:33:3b:02:9f:e5:
         30:11:0b:6a:b0:81:fe:c7:46:80:91:75:74:99:92:83:9e:45:
         6f:64:f2:dd:b3:c8:2e:e7:ee:9e:27:c4:98:16:96:db:27:b7:
         89:2a:40:e5:d6:91:d1:0b:5b:30:08:da:ed:f2:80:84:95:29:
         4d:ef:46:50:8b:45:24:82:38:8a:4f:63:28:30:25:d0:1a:22:
         23:a5:f4:bb:06:5a:7d:1f:51:a6:52:d4:88:f7:11:89:0c:f2:
         4f:c6:4c:d9:96:c0:ab:56:64:14:f7:36:70:b6:61:16:d6:ac:
         c9:d4:88:2a:b1:f4:89:4f:1c:f9:b8:a9:f9:b9:d0:50:3d:c3:
         02:bd:c5:3c:11:5b:60:e3:f0:47:b9:3a:7d:b8:3a:d1:33:30:
         fb:9e:33:26:b8:e5:1a:7e:87:a1:ed:96:2c:a9:f5:08:1b:90:
         91:de:21:6a:ea:86:81:51:40:45:39:61:1f:ff:4f:88:2f:ad:
         57:f2:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org