Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32392e302f32342d3234203d3e20323639353538.roa
File:                     34352e3138392e32392e302f32342d3234203d3e20323639353538.roa (raw, json)
Hash identifier:          jcKIXAXhD8Kh6JaYZU9uVdoOpGbcY9AvueXTPRZJRrA=
Subject key identifier:   9E:34:1D:99:E1:9B:3D:DF:4E:18:30:A0:D8:9E:70:E8:5F:75:40:DE
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       6BDF4A7B7082B40BC5F696A48C16631DF6A01E04
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32392e302f32342d3234203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:29 +0000
ROA not before:           Wed 29 Mar 2023 02:25:29 +0000
ROA not after:            Wed 27 Mar 2024 02:30:29 +0000
asID:                     269558
IP address blocks:        45.189.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:df:4a:7b:70:82:b4:0b:c5:f6:96:a4:8c:16:63:1d:f6:a0:1e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:29 2023 GMT
            Not After : Mar 27 02:30:29 2024 GMT
        Subject: CN=9E341D99E19B3DDF4E1830A0D89E70E85F7540DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:6e:ba:81:f1:dd:3d:e6:9e:5f:5d:6a:c2:
                    12:f5:2b:a9:af:67:07:81:0a:0a:1c:a6:ef:c2:c7:
                    05:50:c5:61:9a:44:3e:cc:b1:cf:0a:75:72:17:c7:
                    72:4b:a7:db:61:57:9c:88:fa:8f:97:b9:2b:0b:ea:
                    37:56:7e:1c:c2:9a:44:af:5e:df:88:50:0a:b4:04:
                    a7:a3:fa:c4:b4:ee:14:af:ad:6a:05:6f:2b:9b:5c:
                    f4:49:15:bf:bf:74:fe:32:6e:ba:2b:50:21:e3:17:
                    44:12:fd:d9:85:7b:17:d6:bb:d8:4d:a4:e2:a8:68:
                    1c:04:ec:5d:1e:ec:ff:75:e7:69:4c:4a:d0:aa:c0:
                    92:24:b6:4c:d1:c9:85:e0:05:f3:74:ed:35:70:4b:
                    df:f8:bb:e7:d9:c5:a0:55:66:ce:b0:1d:d6:f0:20:
                    91:5f:1c:96:01:03:88:7c:00:25:7c:fb:da:a0:ec:
                    b0:1c:df:a5:a9:d1:c9:0e:c4:b7:3f:a2:9c:c2:c1:
                    00:9a:7d:6c:2d:5a:95:61:77:c4:d2:ac:54:e1:e8:
                    71:44:7c:4a:48:0b:4a:e8:c0:67:82:12:94:cd:d8:
                    3d:49:c9:43:6c:37:4a:6a:a6:bb:3a:fb:64:91:7e:
                    74:fc:66:91:3c:ab:1a:70:86:c7:56:33:7e:0d:40:
                    01:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:1D:99:E1:9B:3D:DF:4E:18:30:A0:D8:9E:70:E8:5F:75:40:DE
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e32392e302f32342d3234203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:7e:98:74:10:43:53:a3:9b:be:bf:ad:91:09:44:ae:ec:
         55:7a:42:41:a0:89:fb:79:92:b1:73:3a:b0:08:e9:cc:1d:4c:
         ba:d1:60:13:c5:85:05:88:f2:5e:ec:81:9e:14:a1:02:9f:4f:
         a8:51:22:27:29:b8:ea:94:83:25:8b:82:52:8b:7d:1a:49:fb:
         8a:18:c5:15:cf:ca:e5:ca:e5:e7:71:f8:ef:83:f1:71:0c:9d:
         cc:33:34:1f:27:41:00:20:ef:0c:2d:be:9e:27:a9:02:8e:50:
         84:4a:a8:11:79:8f:1d:20:d3:12:e6:f0:e6:ce:ec:ab:4c:5e:
         91:0b:72:67:af:bd:52:2a:35:56:21:72:c1:03:0e:c4:63:1f:
         fa:7d:b7:74:dd:f0:9e:2b:10:17:0b:c7:42:0e:1e:72:f7:c8:
         1d:d1:ac:0a:52:c8:dc:7f:35:44:e7:66:cb:ae:73:96:d8:ed:
         eb:85:62:e3:d1:e7:81:bc:74:17:0c:70:56:f7:22:8a:a6:31:
         dc:39:b3:6d:66:a6:c9:bc:9f:cd:37:e9:cf:4b:59:46:b6:91:
         9b:33:6e:92:01:fb:39:33:b6:dd:db:ea:a1:d9:88:19:e7:94:
         85:3f:ad:36:9e:50:41:54:43:50:78:bd:85:fc:3d:bf:b5:56:
         02:bf:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org