Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/0/34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa
File:                     34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa (raw, json)
Hash identifier:          s55wv2B/9N1pKKoyL9xLV+BwD3BesTgyDpaR7Lwb4so=
Subject key identifier:   D1:36:E8:77:6A:41:65:3D:0B:86:84:8F:45:0C:61:21:F0:68:2C:3D
Certificate issuer:       /CN=B50DE90AF1B9A89BE6D6B70A1D9FA74864D477C3
Certificate serial:       211AE40BE443126CC5521BE0848FBC3BD89E92B8
Authority key identifier: B5:0D:E9:0A:F1:B9:A8:9B:E6:D6:B7:0A:1D:9F:A7:48:64:D4:77:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B50DE90AF1B9A89BE6D6B70A1D9FA74864D477C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/0/34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa
Signing time:             Fri 08 Mar 2024 14:16:17 +0000
ROA not before:           Fri 08 Mar 2024 14:11:17 +0000
ROA not after:            Fri 07 Mar 2025 14:16:17 +0000
asID:                     269203
IP address blocks:        45.181.192.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1a:e4:0b:e4:43:12:6c:c5:52:1b:e0:84:8f:bc:3b:d8:9e:92:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50DE90AF1B9A89BE6D6B70A1D9FA74864D477C3
        Validity
            Not Before: Mar  8 14:11:17 2024 GMT
            Not After : Mar  7 14:16:17 2025 GMT
        Subject: CN=D136E8776A41653D0B86848F450C6121F0682C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:26:25:1e:0a:06:d9:51:c3:c6:8a:ed:9d:
                    3f:4a:d3:72:d9:6e:c4:97:04:32:fa:34:47:7b:65:
                    28:1e:4e:60:68:90:50:47:65:0a:29:bd:76:33:d3:
                    e9:1e:ba:76:3e:db:fa:5d:18:16:35:93:74:85:c8:
                    b4:cd:68:79:29:5a:78:f6:7f:ac:8c:86:01:bf:87:
                    16:ab:bc:1c:47:12:a2:f6:36:db:7f:93:18:2c:b5:
                    e8:ad:8b:95:3a:66:80:e8:26:d2:a3:c1:68:1e:c2:
                    9f:ea:94:22:6b:b0:c2:80:8b:2e:37:d8:64:83:bd:
                    f7:96:7c:5b:14:92:aa:d7:2b:c3:db:5d:42:aa:b8:
                    ed:2c:48:d8:05:39:c8:fc:e5:9d:3c:ca:ad:14:70:
                    70:03:0d:61:71:c8:88:1e:eb:e1:9c:71:73:aa:3c:
                    f4:20:9c:01:69:77:4a:0c:e0:7e:ed:0b:17:f5:81:
                    59:37:de:29:42:aa:60:8b:f6:0e:f0:eb:d3:a2:6a:
                    fb:7b:b8:0e:c1:4b:af:eb:9b:a7:ae:12:0c:f5:d1:
                    a9:65:f5:e4:c9:34:09:38:ba:00:2c:46:65:45:65:
                    fb:03:b9:9f:c4:b8:87:bc:f3:67:e4:c5:39:71:79:
                    aa:89:f1:1b:73:2a:38:3f:b5:ab:6e:7a:b8:32:82:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:E8:77:6A:41:65:3D:0B:86:84:8F:45:0C:61:21:F0:68:2C:3D
            X509v3 Authority Key Identifier:
                keyid:B5:0D:E9:0A:F1:B9:A8:9B:E6:D6:B7:0A:1D:9F:A7:48:64:D4:77:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/0/B50DE90AF1B9A89BE6D6B70A1D9FA74864D477C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B50DE90AF1B9A89BE6D6B70A1D9FA74864D477C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/0/34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:e1:bf:fe:39:ed:63:cc:9b:5f:6b:86:1a:d3:5b:1a:fa:ab:
         3e:cf:83:17:64:63:27:de:98:e0:87:bb:ec:8c:23:0d:4f:66:
         3c:eb:5d:fd:5a:2f:10:49:4c:e2:47:95:e7:47:50:46:a6:9c:
         55:1e:32:aa:2c:67:dc:42:86:67:cc:90:10:a9:3e:63:23:a7:
         1b:8d:70:28:29:5d:1b:1d:df:46:e5:11:69:76:d3:55:a0:07:
         7d:cd:55:bd:83:dd:43:74:fd:c9:82:82:2e:14:e2:4a:0d:94:
         99:43:1c:26:81:b7:b1:40:e0:03:2a:8d:19:96:ec:00:8b:af:
         23:0c:dd:9b:60:c8:9a:93:5e:df:39:2a:4c:32:25:3d:82:df:
         03:50:7c:b3:a3:da:a2:89:04:a7:44:76:a4:e9:d8:55:69:fa:
         ff:4d:d5:94:bf:72:41:d1:c9:ea:98:8c:ef:ac:40:41:6b:ed:
         42:40:e4:d1:4b:7b:b7:40:43:1e:2a:8e:f5:e1:ec:ab:8e:90:
         dd:46:a3:98:fe:37:e2:6a:b7:e8:bf:7b:b1:94:b7:00:08:8a:
         7c:8e:64:a6:ed:6a:8a:cf:44:6a:2e:7f:57:85:0a:57:8a:82:
         82:5d:75:4f:d8:c2:b7:6c:e3:9c:dd:17:11:93:7e:0d:28:5d:
         47:a1:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org