Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32302e302f32322d3232203d3e20323639363038.roa
File:                     34352e3139302e32302e302f32322d3232203d3e20323639363038.roa (raw, json)
Hash identifier:          zWmUpiW/2BuqZayXFbnVPuw5cynFv6j1I5oP9l3TQd8=
Subject key identifier:   C7:D4:0A:FC:9D:6A:87:6D:A7:4A:8C:42:23:99:40:4C:B9:59:79:F5
Certificate issuer:       /CN=7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44
Certificate serial:       24417A300D725A4EF012CDA58D124218FF0EE19E
Authority key identifier: 7D:82:A4:0C:C4:B5:7B:E0:D3:A4:C9:FB:FC:0A:3E:16:15:1F:DC:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32302e302f32322d3232203d3e20323639363038.roa
Signing time:             Fri 16 Feb 2024 16:18:42 +0000
ROA not before:           Fri 16 Feb 2024 16:13:42 +0000
ROA not after:            Fri 14 Feb 2025 16:18:42 +0000
asID:                     269608
IP address blocks:        45.190.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:41:7a:30:0d:72:5a:4e:f0:12:cd:a5:8d:12:42:18:ff:0e:e1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44
        Validity
            Not Before: Feb 16 16:13:42 2024 GMT
            Not After : Feb 14 16:18:42 2025 GMT
        Subject: CN=C7D40AFC9D6A876DA74A8C422399404CB95979F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:ec:42:eb:1d:9f:30:b1:c8:ec:78:48:93:
                    28:2d:41:9c:b1:02:81:1b:f2:50:19:ad:6b:af:c3:
                    fe:0a:e0:5f:8a:80:28:e7:06:e5:9d:22:1e:bd:2b:
                    40:00:f3:fe:cb:08:45:34:f0:34:6d:0e:be:01:f1:
                    dd:10:77:13:26:97:08:b2:65:09:3d:b1:d0:c6:9c:
                    0c:4e:86:49:17:c8:fc:fd:99:27:22:fc:de:55:3d:
                    eb:6f:cf:67:a1:d2:5e:8d:0f:9e:ae:01:c0:96:71:
                    33:28:65:5a:9c:79:42:a9:7d:57:78:1c:82:15:15:
                    25:5f:d8:c6:f1:81:eb:df:86:f6:fa:85:56:a6:32:
                    44:84:07:99:7f:af:92:2d:50:43:27:80:6f:d8:ca:
                    6b:b1:17:d6:6f:db:de:74:b9:d2:ae:1c:fc:85:74:
                    12:38:fc:d5:c7:47:82:74:e8:a7:df:e6:03:06:74:
                    66:e5:15:bb:ed:ed:3b:75:d7:40:e9:0a:31:a5:7e:
                    58:8c:62:f4:90:1c:6b:e5:cd:3a:fc:91:74:81:ce:
                    df:92:5e:2c:65:aa:a5:a6:60:7b:8c:5a:d3:34:4b:
                    18:2b:ab:36:cd:d9:27:87:03:a8:b3:e9:f0:d0:79:
                    3e:30:6f:7e:9b:25:dd:a5:43:59:be:66:dc:bb:42:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D4:0A:FC:9D:6A:87:6D:A7:4A:8C:42:23:99:40:4C:B9:59:79:F5
            X509v3 Authority Key Identifier:
                keyid:7D:82:A4:0C:C4:B5:7B:E0:D3:A4:C9:FB:FC:0A:3E:16:15:1F:DC:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32302e302f32322d3232203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:2c:76:46:a3:b5:13:c9:d6:75:42:1f:7d:a1:f3:e7:6f:d3:
         91:90:a8:d9:a0:d7:bb:6c:4a:81:c1:ab:fc:aa:a3:cc:e1:64:
         65:ec:79:1f:52:10:15:e9:c9:0f:ca:4b:e4:2e:bf:94:c9:b4:
         27:6f:6a:7f:8a:07:68:ed:5a:bb:0a:15:05:11:b5:8a:65:18:
         94:a4:97:b4:9d:3c:ae:da:99:a5:a4:db:ea:cb:b2:90:86:70:
         de:af:35:47:0e:a4:e4:48:5a:f2:46:ce:c0:b1:2f:4f:93:35:
         98:37:08:e8:f5:8e:73:87:98:b4:7c:42:60:37:8d:0d:5a:48:
         83:26:92:0c:b8:bf:3a:13:c1:9f:b2:8f:27:ba:cc:da:51:35:
         df:68:62:47:d3:27:f2:96:b3:57:96:ff:97:e6:64:21:88:b1:
         12:4c:df:3d:da:08:6e:84:3d:cf:7d:c1:46:de:4e:93:76:ce:
         b5:9e:e2:fa:40:df:86:85:3e:74:7c:93:9c:dd:ae:63:26:40:
         b4:d6:1a:d8:1a:23:9b:41:4c:a8:bb:a4:91:af:37:84:d6:bc:
         7b:31:c5:83:e3:70:2f:b6:70:63:dd:83:30:56:7c:aa:17:39:
         1a:18:93:56:0d:ab:d1:9d:db:f5:60:ce:1b:a6:82:06:33:6e:
         13:7f:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org