Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32322d3232203d3e20323639353538.roa
File:                     34352e3138392e32382e302f32322d3232203d3e20323639353538.roa (raw, json)
Hash identifier:          owNgcYFmnsBfJI6OKigzvOZfDgOZcrKVfPhZ9LhF6tE=
Subject key identifier:   1E:3B:E5:32:AA:17:01:F4:42:DC:01:3D:79:AD:CD:C3:38:09:16:D4
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       26734FF6E3813DA4909C2951ED88D3EAD24D800B
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32322d3232203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:21 +0000
ROA not before:           Wed 29 Mar 2023 02:25:21 +0000
ROA not after:            Wed 27 Mar 2024 02:30:21 +0000
asID:                     269558
IP address blocks:        45.189.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:73:4f:f6:e3:81:3d:a4:90:9c:29:51:ed:88:d3:ea:d2:4d:80:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:21 2023 GMT
            Not After : Mar 27 02:30:21 2024 GMT
        Subject: CN=1E3BE532AA1701F442DC013D79ADCDC3380916D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:33:5f:76:68:d5:94:6b:53:b1:ec:10:67:
                    d2:c4:53:60:ac:f3:36:ca:ae:1e:62:bf:dc:2c:1d:
                    ce:03:c2:b5:d3:e9:3c:19:3b:b9:2b:92:f7:c8:22:
                    15:56:d8:37:c8:34:9e:58:0b:e3:7d:d5:b1:27:f1:
                    d9:63:af:1f:c1:56:e6:9e:4f:bb:de:ff:d1:6c:f1:
                    f9:ad:41:45:f7:9c:80:18:d0:23:ab:4e:1a:49:31:
                    ea:cb:90:39:f9:ed:cb:1a:e8:63:2f:f7:1f:a3:46:
                    6f:02:60:04:4d:23:6e:bd:76:c5:7a:2a:ce:85:38:
                    96:70:72:7e:d0:5e:2d:27:99:e4:c5:84:52:19:0b:
                    24:db:07:d1:68:ed:9a:63:74:20:18:a0:95:6b:60:
                    3f:fd:2f:4b:3e:a4:e4:a8:52:5b:16:6a:95:8e:6b:
                    f3:dc:c7:7d:e9:ac:e7:63:c2:10:6c:c9:4b:d7:ff:
                    f3:51:13:81:10:a6:f5:09:ea:47:3c:c7:a2:33:3e:
                    28:3e:f7:d2:d2:d9:88:f7:da:d2:83:c6:2b:15:8a:
                    47:c5:ae:b9:f1:5c:43:44:71:42:f1:f9:db:07:16:
                    63:ac:84:f2:04:e0:a2:c0:f9:b7:cd:59:5d:4f:c0:
                    eb:44:47:62:01:06:49:d7:c5:8b:42:79:ca:bd:58:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3B:E5:32:AA:17:01:F4:42:DC:01:3D:79:AD:CD:C3:38:09:16:D4
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32382e302f32322d3232203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:ee:e6:08:2b:9e:f8:d7:7e:ad:39:6a:1e:f4:2b:7f:82:8b:
         ad:30:80:4f:0d:3f:b7:6e:92:e7:88:26:9c:88:6d:4d:30:9b:
         b4:d8:3f:3f:e0:0b:70:89:41:86:12:e0:e9:c9:04:61:b2:77:
         e1:a6:7b:3f:f0:ad:cc:33:ad:60:1d:10:c8:bc:1f:cc:62:33:
         59:35:88:0a:9b:b5:f7:8c:2c:c1:89:9c:d8:56:60:6f:e1:ff:
         a5:d6:aa:63:c4:f5:e3:76:01:f8:0d:c4:54:91:3a:6b:04:07:
         89:fc:13:d6:42:b9:28:13:6b:b9:37:62:37:0b:4f:e0:93:bd:
         55:aa:0c:ef:bc:99:bb:fa:d1:38:d6:ef:79:a4:88:60:ed:7d:
         93:ad:04:96:67:cd:4c:26:b4:15:f3:bc:f1:dc:74:9e:d5:a0:
         8b:5e:21:6a:1f:11:0a:84:36:71:20:9c:7f:ca:a5:c8:e3:de:
         92:af:37:51:6b:a6:78:4b:16:cd:d0:5a:1b:f5:1b:d6:08:f1:
         df:6e:14:55:81:0a:6b:f7:91:b4:f9:ab:e8:6b:8c:27:77:68:
         89:1d:ba:90:0c:07:77:e2:0a:da:db:56:4c:63:22:6e:0b:08:
         cb:e0:5a:0b:d2:b9:f2:43:12:4d:c9:4e:b1:d6:11:96:a8:d0:
         57:61:96:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org