Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/1/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa
File:                     34352e3139302e32382e302f32322d3234203d3e20323639363332.roa (raw, json)
Hash identifier:          nfI3pjEILSg2BgQY+7yyM9vhSruIhlKqbZr6yfdzW+I=
Subject key identifier:   B7:32:5A:15:5C:3D:CC:09:44:48:D5:E1:EE:27:58:8B:5C:E5:F4:7D
Certificate issuer:       /CN=8851876FD1DAAA9CDF20BEFF50FD6E09721A7894
Certificate serial:       64F6948445671E8DFE8206C2DC27615032F9F7C4
Authority key identifier: 88:51:87:6F:D1:DA:AA:9C:DF:20:BE:FF:50:FD:6E:09:72:1A:78:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8851876FD1DAAA9CDF20BEFF50FD6E09721A7894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/1/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa
Signing time:             Thu 09 Nov 2023 20:01:39 +0000
ROA not before:           Thu 09 Nov 2023 19:56:39 +0000
ROA not after:            Thu 07 Nov 2024 20:01:39 +0000
asID:                     269632
IP address blocks:        45.190.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f6:94:84:45:67:1e:8d:fe:82:06:c2:dc:27:61:50:32:f9:f7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8851876FD1DAAA9CDF20BEFF50FD6E09721A7894
        Validity
            Not Before: Nov  9 19:56:39 2023 GMT
            Not After : Nov  7 20:01:39 2024 GMT
        Subject: CN=B7325A155C3DCC094448D5E1EE27588B5CE5F47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:d2:44:9d:da:20:5b:6e:0d:b5:84:67:23:
                    42:c4:a5:73:50:47:60:34:08:5a:7a:06:ef:78:51:
                    1d:9f:e8:5c:30:8f:34:04:c4:79:ea:55:3a:0f:d9:
                    5f:d9:ff:57:34:2d:71:98:dc:02:e5:52:e7:27:6a:
                    ff:8b:e2:9f:56:44:dd:ea:e2:39:56:a2:f6:c7:cb:
                    d6:90:60:2c:74:f7:cc:a0:62:9e:d2:9d:c6:02:c4:
                    07:f8:76:32:03:65:7a:4e:52:73:04:f7:e4:58:ca:
                    72:d2:14:11:63:73:09:d7:52:67:75:4d:d9:02:9c:
                    3c:ac:8e:3a:46:c6:f9:bd:cb:37:a8:b3:af:3d:c9:
                    d4:42:35:52:31:53:87:14:e1:10:37:88:2e:11:04:
                    db:45:39:48:67:3a:2a:8c:1e:82:86:67:51:d0:80:
                    89:95:87:a7:de:09:9e:93:ec:ae:ea:a5:c5:8d:db:
                    fc:bd:e6:0d:3e:06:e6:42:f7:02:4d:f3:88:63:87:
                    f0:31:88:b0:e1:52:39:8b:14:bf:48:09:aa:bf:6e:
                    14:f8:88:e3:27:74:19:35:37:e0:8d:a0:93:5f:0f:
                    df:d4:ad:6d:01:69:ce:00:a7:e2:06:54:f3:27:c3:
                    e8:32:ce:bf:e4:5f:4e:29:76:45:82:d1:c5:1f:bc:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:32:5A:15:5C:3D:CC:09:44:48:D5:E1:EE:27:58:8B:5C:E5:F4:7D
            X509v3 Authority Key Identifier:
                keyid:88:51:87:6F:D1:DA:AA:9C:DF:20:BE:FF:50:FD:6E:09:72:1A:78:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/1/8851876FD1DAAA9CDF20BEFF50FD6E09721A7894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8851876FD1DAAA9CDF20BEFF50FD6E09721A7894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/1/34352e3139302e32382e302f32322d3234203d3e20323639363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:b5:e3:32:4f:e0:f8:3f:39:ac:d5:1c:47:b0:30:a5:aa:ac:
         f0:77:1f:a0:09:80:a4:de:a8:8f:5b:36:9f:43:0e:d0:0d:fd:
         27:32:d8:df:b4:b1:27:ca:cd:c5:21:bd:8a:17:c1:dc:3b:2f:
         42:fb:ef:36:d9:b7:cb:8b:42:84:fd:9c:a4:98:c2:b6:14:29:
         ff:43:94:e3:16:a4:f1:46:81:13:57:f9:ba:71:0b:6f:73:65:
         5a:a5:8a:b8:fd:90:d8:ca:3b:3b:84:fc:6a:f2:8a:db:bb:02:
         56:ce:7c:85:dc:8a:40:ad:87:de:2a:a2:4f:32:f2:d4:8d:bb:
         41:40:db:58:61:70:2c:8e:55:d0:e7:c5:38:6f:1d:16:e1:7e:
         82:e1:f1:83:0b:18:df:01:89:a0:b7:45:9a:62:fe:a3:22:55:
         8e:79:0e:22:9a:fd:e1:85:98:e8:30:51:3c:6e:fe:46:cf:91:
         c4:1b:f5:29:0f:8d:47:c9:46:3d:de:10:db:76:b2:fc:42:8e:
         fd:ff:52:d5:6e:14:ee:22:49:bf:9e:41:1d:25:61:7a:18:8d:
         e8:48:1f:e6:1b:e9:69:bd:9f:8d:68:0a:bf:b5:0e:09:34:e8:
         6b:70:55:c0:15:21:d9:1b:03:bc:26:22:28:b5:8d:3d:e4:0a:
         fa:5c:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org