Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137322e302f32322d3232203d3e20323639343734.roa
File:                     34352e3138372e3137322e302f32322d3232203d3e20323639343734.roa (raw, json)
Hash identifier:          V5wXBo0hKhAhmF0tOOQ+IlzVaROmJyEbSFRG9Snzv24=
Subject key identifier:   19:90:E4:00:4C:8B:E4:95:47:1B:76:08:CA:96:C4:C1:24:A4:E5:37
Certificate issuer:       /CN=3C6301395210E20E88B4ED2A0D9B997121B8FB1B
Certificate serial:       538EE8BDD3118EBCC4504911DC693A179FD6728D
Authority key identifier: 3C:63:01:39:52:10:E2:0E:88:B4:ED:2A:0D:9B:99:71:21:B8:FB:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C6301395210E20E88B4ED2A0D9B997121B8FB1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137322e302f32322d3232203d3e20323639343734.roa
Signing time:             Thu 20 Oct 2022 13:16:38 +0000
ROA not before:           Thu 20 Oct 2022 13:11:38 +0000
ROA not after:            Thu 19 Oct 2023 13:16:38 +0000
asID:                     269474
IP address blocks:        45.187.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8e:e8:bd:d3:11:8e:bc:c4:50:49:11:dc:69:3a:17:9f:d6:72:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6301395210E20E88B4ED2A0D9B997121B8FB1B
        Validity
            Not Before: Oct 20 13:11:38 2022 GMT
            Not After : Oct 19 13:16:38 2023 GMT
        Subject: CN=1990E4004C8BE495471B7608CA96C4C124A4E537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:52:25:54:54:fa:54:97:bb:f5:32:ae:1e:
                    b3:ec:a9:ff:4e:c3:19:47:58:4b:f4:29:33:f6:f3:
                    7f:3d:6d:f1:85:ff:37:23:6f:c0:37:84:cd:3f:0a:
                    e3:b7:4d:48:9d:1f:b5:a0:d9:d0:23:a0:1f:f1:8c:
                    08:97:78:4d:af:5f:47:07:84:50:c1:24:9c:78:d8:
                    ba:c1:9f:5c:ee:26:b5:78:e9:9b:60:f6:8c:ef:4e:
                    c5:b0:7a:07:70:5d:85:fc:a0:52:f4:7a:74:c5:2f:
                    95:47:26:59:05:17:d7:36:e2:4f:54:be:6a:49:d8:
                    3c:98:5c:4e:4a:c1:97:ac:c7:30:28:cf:8f:cf:38:
                    89:68:95:c0:4c:48:00:a5:4c:b4:e1:99:1a:a9:22:
                    48:73:1d:f5:86:e0:0e:23:e7:3c:37:e4:c3:93:cc:
                    9f:d6:17:d9:8e:21:b1:ce:60:ab:02:1d:9e:e9:1e:
                    b4:b3:a5:54:c6:a0:42:ae:21:02:7d:66:41:7e:68:
                    6a:2d:e8:49:d6:b4:b8:a9:78:3f:c3:70:a1:17:c4:
                    89:c3:77:0c:0e:6c:c7:90:ad:ea:6e:c7:81:c0:04:
                    c3:37:d4:55:25:4d:7f:58:a6:cb:8e:95:7a:5b:21:
                    e6:36:d3:90:6f:0c:b3:a8:f3:d2:43:a5:11:c7:46:
                    b7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:90:E4:00:4C:8B:E4:95:47:1B:76:08:CA:96:C4:C1:24:A4:E5:37
            X509v3 Authority Key Identifier:
                keyid:3C:63:01:39:52:10:E2:0E:88:B4:ED:2A:0D:9B:99:71:21:B8:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/3C6301395210E20E88B4ED2A0D9B997121B8FB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C6301395210E20E88B4ED2A0D9B997121B8FB1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ib9Vq4KPJ9e9FHdPVSjczzxrhMG25CftMNuF46XdA5m/0/34352e3138372e3137322e302f32322d3232203d3e20323639343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:61:ed:40:89:40:c4:6f:cc:0d:5d:d4:32:2f:70:d8:d0:f0:
         0f:08:6f:60:cf:b6:bf:fc:a5:8f:23:17:56:88:c1:1c:e1:df:
         7d:41:46:7d:ea:69:cc:fd:5c:f4:2c:97:d8:65:e3:e1:72:46:
         17:52:52:61:5d:76:4e:fb:f6:92:f9:45:20:1c:d0:de:46:0e:
         c0:f7:dd:18:b7:3b:67:27:2b:40:e7:6d:d5:f0:3a:bf:fa:f1:
         d3:59:2c:1a:f3:7f:47:25:05:b2:1d:e8:14:3d:05:1d:8c:75:
         fe:7f:1a:a8:3a:af:20:29:0a:6b:7b:8d:ec:db:d4:5c:a0:51:
         78:e3:57:28:ce:97:61:f3:57:28:b6:e6:b7:96:4a:f8:ff:c5:
         be:b4:32:1e:3c:bb:95:b7:45:cf:04:c5:3a:05:a5:32:69:d1:
         74:df:c6:22:c2:98:c1:f0:c7:d4:25:9e:86:54:b4:38:96:91:
         00:4f:35:17:a0:63:60:50:5e:b4:f9:9c:c1:a3:55:59:55:93:
         fa:0e:9c:f8:d8:d2:35:4a:e3:ac:0c:ef:3f:0b:7b:57:c0:38:
         85:df:2e:fa:98:81:72:1d:01:f2:26:89:a9:4e:a9:a2:90:00:
         3a:cf:68:2f:1b:41:fb:2d:35:5d:26:de:c5:fd:2d:35:0c:04:
         68:93:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org