Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/34352e3138342e35322e302f32322d3234203d3e20323639333135.roa
File:                     34352e3138342e35322e302f32322d3234203d3e20323639333135.roa (raw, json)
Hash identifier:          9PoCpqaV9J09OzGi2zY4VlUKTlzfjnB8/9YKn1KZbSY=
Subject key identifier:   FB:8F:54:7E:2A:E5:73:EF:5C:0B:ED:CB:86:AA:EB:20:E6:05:94:87
Certificate issuer:       /CN=B7A998992696FF1723DF042964560BDF4E6F9722
Certificate serial:       673679CFB326FE9FBB2C5B50B7A29AE0BD57552F
Authority key identifier: B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A998992696FF1723DF042964560BDF4E6F9722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/34352e3138342e35322e302f32322d3234203d3e20323639333135.roa
Signing time:             Mon 05 Jun 2023 18:00:00 +0000
ROA not before:           Mon 05 Jun 2023 17:55:00 +0000
ROA not after:            Mon 03 Jun 2024 18:00:00 +0000
asID:                     269315
IP address blocks:        45.184.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:36:79:cf:b3:26:fe:9f:bb:2c:5b:50:b7:a2:9a:e0:bd:57:55:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A998992696FF1723DF042964560BDF4E6F9722
        Validity
            Not Before: Jun  5 17:55:00 2023 GMT
            Not After : Jun  3 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:73:b7:ec:e3:f6:75:68:83:6f:ca:af:68:37:
                    3d:71:81:98:10:01:0e:af:c2:da:ea:76:8f:5c:46:
                    0f:95:d5:09:46:f7:12:46:5f:8b:dc:9f:f2:ad:77:
                    1f:42:b0:a6:d1:6e:95:71:14:87:69:8c:19:dc:93:
                    eb:80:c0:8e:12:56:30:a3:33:f7:b6:f9:7d:77:de:
                    6f:bc:40:53:71:90:d8:86:a4:52:fd:c4:96:16:9c:
                    1a:6d:23:13:c3:07:81:e9:c2:e7:08:e8:99:b6:6c:
                    86:b1:45:0f:0d:22:61:9d:eb:9f:25:0a:be:22:80:
                    1e:99:23:6f:ec:22:3b:dc:1a:10:68:08:77:62:3c:
                    55:13:e9:37:e2:a6:f2:bf:64:f4:75:0b:19:63:78:
                    67:f1:58:a3:fa:dc:00:6c:1f:05:a8:88:3d:dc:fc:
                    e0:8b:62:ea:ec:30:8e:5f:58:ab:4d:77:ff:06:39:
                    4e:ea:1c:bf:21:c2:3b:c1:ce:1e:eb:41:59:04:15:
                    3f:63:0c:7c:04:8d:a5:ba:21:fe:5f:b7:65:a0:f7:
                    2f:c9:4b:bc:e0:fd:ce:3a:05:bf:1c:2a:0f:19:e0:
                    9d:5e:ac:a7:84:a0:fa:53:d0:c9:ec:1d:11:97:01:
                    a1:19:d4:ed:79:ec:4f:46:3b:e9:26:a0:9b:bf:09:
                    52:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8F:54:7E:2A:E5:73:EF:5C:0B:ED:CB:86:AA:EB:20:E6:05:94:87
            X509v3 Authority Key Identifier:
                keyid:B7:A9:98:99:26:96:FF:17:23:DF:04:29:64:56:0B:DF:4E:6F:97:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/B7A998992696FF1723DF042964560BDF4E6F9722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A998992696FF1723DF042964560BDF4E6F9722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SAkHxAhQGmQmaW4jG2YmUxqRHaXvdbMB2gGPZjvKZes/0/34352e3138342e35322e302f32322d3234203d3e20323639333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:de:85:9e:33:e0:f9:49:67:13:5e:83:ac:5b:81:3c:1e:4e:
         2f:dd:7c:23:12:78:36:42:14:18:1f:a4:a6:c1:ee:45:52:cd:
         06:21:4d:4b:a8:d3:b2:20:1d:8b:c3:74:87:c8:da:64:32:fa:
         d5:38:84:c7:b9:3f:83:73:04:3f:9a:35:e5:36:57:8e:2b:fd:
         bc:f8:09:d3:ac:14:c2:b1:ad:7c:25:b1:c4:60:bc:6a:1f:3c:
         08:f2:89:fa:05:50:aa:f3:a5:e1:c1:47:90:83:ef:1b:e4:35:
         32:b0:b3:af:2d:8d:16:c3:14:29:ea:fd:df:31:f1:d1:e7:f5:
         1c:0f:e4:34:69:b1:e0:6f:2b:8a:00:90:2c:46:03:ad:74:26:
         b8:6a:06:3e:4c:f3:56:58:42:08:18:64:62:28:bf:d9:88:7d:
         a5:1c:6b:1f:ab:fd:00:4b:1d:93:19:71:b5:a3:38:a6:96:01:
         a7:ac:d0:d1:76:04:0b:0f:87:d5:5d:60:c7:a8:d0:db:4f:2d:
         92:62:ac:a7:4e:04:ca:c0:a7:b8:c6:82:c0:4c:f5:9a:1c:57:
         85:f1:fc:37:d1:f0:78:a1:1b:f4:34:49:9b:ea:c2:19:55:9d:
         3e:81:0e:64:f8:0d:a7:4e:bb:27:a5:6a:84:4a:5b:e9:b1:06:
         dc:d0:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org