Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e33302e302f32332d3233203d3e20323639353538.roa
File:                     34352e3138392e33302e302f32332d3233203d3e20323639353538.roa (raw, json)
Hash identifier:          EzX/m8EcObchVCDUmV3hcd+Y+R3Q+2DUH8lC8LhOQy8=
Subject key identifier:   FF:1E:F1:A7:AB:42:81:16:B7:59:08:D6:C3:04:FB:24:3F:47:40:AF
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       7714E06527B8B2FFDC335610A7463DED8F3B494D
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e33302e302f32332d3233203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:31 +0000
ROA not before:           Wed 29 Mar 2023 02:25:31 +0000
ROA not after:            Wed 27 Mar 2024 02:30:31 +0000
asID:                     269558
IP address blocks:        45.189.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:14:e0:65:27:b8:b2:ff:dc:33:56:10:a7:46:3d:ed:8f:3b:49:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:31 2023 GMT
            Not After : Mar 27 02:30:31 2024 GMT
        Subject: CN=FF1EF1A7AB428116B75908D6C304FB243F4740AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:b6:4c:3f:d0:4e:64:9c:e6:44:60:6b:54:
                    e5:26:65:bf:cc:9d:ff:a4:b5:3e:34:03:39:25:af:
                    38:e0:a8:9a:e4:82:a2:fa:b6:79:0f:2b:17:1e:80:
                    c3:95:4a:a7:48:dd:b0:dd:14:e9:31:17:65:63:f7:
                    01:db:8c:aa:d8:cb:8c:ff:6e:27:62:15:04:46:ea:
                    cb:1e:b6:7f:e6:85:42:f1:4a:85:7c:65:9c:ea:9a:
                    c3:a2:b6:b7:9b:2e:c6:bc:da:49:2f:90:ca:5e:53:
                    57:a0:41:6a:a5:e7:3b:73:79:14:b1:fa:ac:23:6e:
                    f4:d0:f4:26:d4:cc:14:6a:97:00:66:7a:e5:79:3d:
                    a0:9d:60:6a:d3:51:22:92:5f:13:23:a8:de:ed:4c:
                    61:86:db:ea:ba:f9:a1:b7:18:92:9c:53:c0:b1:cf:
                    e8:ad:4b:6f:1b:d9:1c:92:60:fd:1e:33:d7:05:cb:
                    12:53:0d:26:89:70:fb:ae:12:75:6a:34:b3:30:56:
                    73:98:1c:b5:05:88:73:47:c0:db:00:ec:c1:66:70:
                    97:fb:d8:63:4c:d4:12:ca:da:d3:0f:bb:9b:0a:7c:
                    9e:17:1b:db:36:68:0c:2e:09:17:15:1f:78:6d:bf:
                    b0:bb:0a:71:06:0d:35:a9:9a:c7:44:e8:f0:37:75:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1E:F1:A7:AB:42:81:16:B7:59:08:D6:C3:04:FB:24:3F:47:40:AF
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e33302e302f32332d3233203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:d8:2b:d9:3c:34:4c:c8:7e:c1:84:f6:0b:92:9a:d9:b0:6e:
         f6:ea:b4:63:ad:0d:5e:8a:83:93:e4:21:a3:57:5b:39:1e:c0:
         8a:c1:a6:7a:9c:7a:d6:ca:bb:0e:11:a5:4b:96:cf:d7:8f:29:
         6e:ab:a4:ca:6f:1e:99:a5:30:6a:71:bd:89:58:81:05:49:e0:
         4f:ce:d0:22:f3:5a:61:ef:f2:77:d7:c1:2e:9a:50:2d:fb:52:
         18:d0:4b:28:58:be:5f:6a:b6:d7:49:2f:db:bb:8a:e2:4b:48:
         be:54:24:0a:b1:1d:d5:e8:59:64:59:b8:e2:6d:ec:9f:ef:6b:
         d0:a0:fe:04:06:7c:4d:8e:85:fe:0b:9d:e9:f8:6a:96:1b:d3:
         e8:a8:64:ae:47:f0:ea:d4:4f:9f:dd:78:da:f5:08:bd:51:a2:
         98:2c:e7:30:c3:00:24:de:06:58:c1:6c:fc:cb:bd:90:b7:d0:
         0e:0d:dd:b5:f8:c6:95:81:2a:57:91:66:df:ab:d1:e2:1d:5a:
         5e:e0:aa:9c:1e:00:34:08:1a:c2:e0:cf:ee:e1:ee:9b:9b:0f:
         dd:df:41:02:4b:b6:2a:6e:b9:0a:93:77:ff:38:c5:19:88:44:
         ea:fc:fe:b2:bc:0a:66:e6:ef:f3:ed:5a:69:f0:97:69:b0:56:
         af:82:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org