Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32322d3234203d3e20323638313331.roa
File:                     34352e3136392e3138382e302f32322d3234203d3e20323638313331.roa (raw, json)
Hash identifier:          rqNMWGRdT8AO+8rHQtFCzhAVSHPO44Wgb7WW96BqxbQ=
Subject key identifier:   5C:63:EC:9E:72:9F:85:7E:FA:31:FD:99:51:37:4D:BD:A4:02:FE:31
Certificate issuer:       /CN=D05DBE5248CB8C880A34D01683308EF146CC9819
Certificate serial:       59411AA72B0F0C010DC5BB313C5F7091A0640CC3
Authority key identifier: D0:5D:BE:52:48:CB:8C:88:0A:34:D0:16:83:30:8E:F1:46:CC:98:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D05DBE5248CB8C880A34D01683308EF146CC9819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32322d3234203d3e20323638313331.roa
Signing time:             Thu 03 Aug 2023 21:00:00 +0000
ROA not before:           Thu 03 Aug 2023 20:55:00 +0000
ROA not after:            Thu 01 Aug 2024 21:00:00 +0000
asID:                     268131
IP address blocks:        45.169.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:41:1a:a7:2b:0f:0c:01:0d:c5:bb:31:3c:5f:70:91:a0:64:0c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05DBE5248CB8C880A34D01683308EF146CC9819
        Validity
            Not Before: Aug  3 20:55:00 2023 GMT
            Not After : Aug  1 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:78:0e:e4:40:88:57:1e:b0:0d:50:85:f5:
                    42:9e:38:20:e4:ac:7d:b5:57:62:bc:43:3a:39:72:
                    85:18:30:b2:f3:a3:4d:72:0f:a0:83:a4:55:01:77:
                    67:2b:1f:2a:76:f5:b5:7b:f0:eb:aa:4e:15:04:c5:
                    b4:05:da:85:03:58:09:26:34:e8:b0:fa:dc:4b:98:
                    aa:21:cf:90:70:c2:68:2d:60:97:ba:bd:15:71:62:
                    42:11:74:92:62:32:1c:84:9c:a2:4c:4d:a6:d3:ae:
                    92:3a:15:84:13:03:75:93:cb:d6:45:60:18:f8:2d:
                    ec:47:19:4a:06:56:aa:e5:d0:80:2d:95:e9:04:30:
                    70:84:d5:60:e3:4e:17:ff:64:2f:a8:f5:ee:31:5b:
                    67:73:22:ed:c3:c6:44:59:d1:aa:9e:ec:eb:8f:d0:
                    69:0d:bb:c0:f3:c3:67:50:3e:be:75:99:24:b3:2a:
                    6f:28:22:6d:80:f9:2d:ae:bc:8b:bd:ab:36:9f:6c:
                    b7:68:65:8c:71:f8:ed:5c:6a:27:83:79:4f:b4:58:
                    ed:66:84:6c:6b:cc:fa:94:12:35:56:42:25:54:cd:
                    33:1e:94:0c:79:b7:63:ae:9c:a3:61:a1:60:90:c0:
                    e3:4c:e1:ec:0f:b8:b2:0b:82:85:07:09:d5:6d:31:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:63:EC:9E:72:9F:85:7E:FA:31:FD:99:51:37:4D:BD:A4:02:FE:31
            X509v3 Authority Key Identifier:
                keyid:D0:5D:BE:52:48:CB:8C:88:0A:34:D0:16:83:30:8E:F1:46:CC:98:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/D05DBE5248CB8C880A34D01683308EF146CC9819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D05DBE5248CB8C880A34D01683308EF146CC9819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32322d3234203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:c1:c5:2b:7a:41:01:66:88:82:f8:29:5c:69:6b:87:ef:b5:
         e6:68:5f:90:e6:53:7a:a8:23:d8:01:66:40:81:b4:1d:5e:98:
         6f:56:1a:3b:60:bb:36:9c:ce:fe:ab:ff:09:c6:ed:e9:9e:ff:
         6b:a6:df:7f:ea:5d:1b:00:21:e3:dd:01:7f:aa:82:0d:a1:80:
         2a:3a:0f:ec:f0:45:fe:e2:11:09:ec:7d:18:5e:07:d3:32:97:
         20:eb:11:81:c1:32:86:e3:2b:ea:21:93:82:19:db:df:18:64:
         ac:89:5a:48:76:f1:fd:18:45:d5:1c:a3:b8:29:b0:2c:20:49:
         65:94:47:d8:bf:88:21:13:09:52:5c:fc:88:b7:ae:cb:f3:b0:
         81:07:d7:e4:29:25:21:57:7c:7f:55:14:70:a0:67:dc:2c:1f:
         ca:84:b7:d2:cd:f0:cd:b7:60:48:6f:f6:b3:ec:3e:a0:ef:3e:
         ce:cd:22:87:b7:54:94:2e:84:f3:d9:29:81:c4:77:aa:d1:b7:
         8d:33:16:4f:f3:92:60:60:e5:39:83:1a:c9:d8:2c:0e:16:ce:
         be:08:d9:32:23:9c:dc:bd:5f:28:59:74:64:7a:3a:bd:94:92:
         86:29:bf:12:7b:bb:47:10:e1:4e:b8:54:9a:68:40:a5:f8:8f:
         58:f0:77:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org