Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32302e302f32332d3233203d3e20323639363038.roa
File:                     34352e3139302e32302e302f32332d3233203d3e20323639363038.roa (raw, json)
Hash identifier:          QJqjoJ/r1B+3SwofhsBD6KpIm/jTCLeBYRnLIkfX/V4=
Subject key identifier:   7B:35:B8:ED:9E:9E:7F:22:81:92:30:9A:CD:A9:A2:79:8E:67:31:E7
Certificate issuer:       /CN=7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44
Certificate serial:       5AD7278377232A08FFB5540728DF56365C883EBF
Authority key identifier: 7D:82:A4:0C:C4:B5:7B:E0:D3:A4:C9:FB:FC:0A:3E:16:15:1F:DC:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32302e302f32332d3233203d3e20323639363038.roa
Signing time:             Fri 16 Feb 2024 16:18:44 +0000
ROA not before:           Fri 16 Feb 2024 16:13:44 +0000
ROA not after:            Fri 14 Feb 2025 16:18:44 +0000
asID:                     269608
IP address blocks:        45.190.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d7:27:83:77:23:2a:08:ff:b5:54:07:28:df:56:36:5c:88:3e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44
        Validity
            Not Before: Feb 16 16:13:44 2024 GMT
            Not After : Feb 14 16:18:44 2025 GMT
        Subject: CN=7B35B8ED9E9E7F228192309ACDA9A2798E6731E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:27:ae:40:6d:2b:0d:a7:c9:b4:ed:d0:2a:
                    1c:12:5b:c7:f6:3b:4e:d9:b2:34:2c:65:b0:63:52:
                    95:2e:d7:70:fe:1c:aa:62:4a:42:aa:fe:05:3b:f8:
                    96:e0:1f:97:b1:85:fd:fe:6d:b2:cc:ed:ef:ae:48:
                    f8:ce:4b:4f:e7:5f:c7:f5:4e:ec:df:3e:aa:51:4c:
                    e4:07:29:e3:4b:38:4e:55:dd:b1:14:91:8e:48:a4:
                    3f:1d:f6:11:c2:31:e1:50:fd:ec:2e:cc:f7:3c:f0:
                    3f:15:1b:34:aa:b7:7d:1a:5b:98:ba:34:c7:80:74:
                    2c:73:e9:8c:43:f8:96:ad:77:c6:6f:28:ed:64:29:
                    4a:e3:5e:73:06:31:9b:a3:4b:fc:d0:e0:e9:ec:74:
                    be:a1:be:74:4d:e6:c6:1d:b8:2b:fd:3f:42:84:da:
                    ac:9e:f0:a2:9b:e2:36:d6:85:1a:c5:0f:23:74:4d:
                    7f:a3:70:09:76:21:f6:17:4d:6e:c6:1f:e7:d1:d7:
                    b1:49:6e:99:bb:2d:86:c8:d6:21:c8:71:97:70:56:
                    2d:c0:a8:4c:4e:26:c2:5d:4b:1e:d9:51:24:b6:35:
                    3e:4b:13:6c:d1:d7:7b:5c:ff:a5:43:7c:21:af:6c:
                    c7:34:b2:1a:5e:ae:93:80:bf:dc:40:f0:31:ea:77:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:35:B8:ED:9E:9E:7F:22:81:92:30:9A:CD:A9:A2:79:8E:67:31:E7
            X509v3 Authority Key Identifier:
                keyid:7D:82:A4:0C:C4:B5:7B:E0:D3:A4:C9:FB:FC:0A:3E:16:15:1F:DC:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D82A40CC4B57BE0D3A4C9FBFC0A3E16151FDC44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/34352e3139302e32302e302f32332d3233203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:e0:34:87:ce:fb:92:24:59:45:d0:45:f9:9c:07:42:00:
         99:76:78:e8:2c:b2:57:c6:4e:92:0c:64:63:19:b1:60:9f:00:
         a1:20:47:90:a8:4d:4c:c0:2d:19:59:9b:eb:ca:0e:48:49:b8:
         1e:f7:ac:bf:53:25:b7:02:af:75:f9:ea:a1:32:92:51:ab:a8:
         90:71:f9:9f:29:3e:31:ad:af:d0:17:de:b3:d4:41:e7:0e:ba:
         df:78:ba:04:69:d0:2f:3c:17:e6:e1:57:00:2c:1b:8c:14:b4:
         33:90:45:42:99:4d:c9:08:96:4d:5a:0c:d6:c7:f3:b6:28:99:
         d0:5d:ff:ee:2f:ca:dc:ee:b2:c5:99:28:3a:65:3d:b8:21:a6:
         5a:1c:4f:8f:f6:df:c1:f5:38:f1:a9:86:38:69:10:22:fb:01:
         7f:64:51:12:3e:8a:10:41:6a:60:58:fb:99:dd:99:9e:6c:1a:
         27:c5:cd:26:bf:ff:17:68:b9:a9:28:85:04:16:cc:26:6e:ee:
         8f:4b:e2:91:4e:f3:f8:5b:76:f8:ff:1b:6d:1b:2c:49:9a:9f:
         be:06:1c:72:84:86:d1:1b:6c:66:cc:fb:f8:a8:a8:a5:24:5e:
         35:61:5d:94:cf:8f:a5:b4:97:b5:8e:cf:b3:5a:92:12:47:3b:
         47:0f:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org