Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e33302e302f32342d3234203d3e20323639353538.roa
File:                     34352e3138392e33302e302f32342d3234203d3e20323639353538.roa (raw, json)
Hash identifier:          hF+7cLWOkf7thkkHKKXU3cBIUIriB1Oaj143DFdi4mE=
Subject key identifier:   44:02:CE:69:51:FD:B8:9C:0F:44:72:DA:87:43:59:74:ED:5F:E2:17
Certificate issuer:       /CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
Certificate serial:       70226C9FEDD90B6264461A7CA6488545BAC27189
Authority key identifier: BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e33302e302f32342d3234203d3e20323639353538.roa
Signing time:             Wed 29 Mar 2023 02:30:37 +0000
ROA not before:           Wed 29 Mar 2023 02:25:37 +0000
ROA not after:            Wed 27 Mar 2024 02:30:37 +0000
asID:                     269558
IP address blocks:        45.189.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:22:6c:9f:ed:d9:0b:62:64:46:1a:7c:a6:48:85:45:ba:c2:71:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE3C770E60E7526B83477558F5E7AE8BE99B0AC
        Validity
            Not Before: Mar 29 02:25:37 2023 GMT
            Not After : Mar 27 02:30:37 2024 GMT
        Subject: CN=4402CE6951FDB89C0F4472DA87435974ED5FE217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:41:b7:fc:cc:de:05:da:c0:e6:fb:38:87:
                    29:84:4e:83:7a:b9:c1:b2:64:7b:59:43:1b:7e:09:
                    1a:9e:cc:1e:83:ac:dc:06:fe:41:72:7e:b2:08:b3:
                    7f:08:16:a5:96:81:e8:fc:b1:3d:f6:51:96:1f:14:
                    82:ff:e1:11:58:06:08:13:0b:af:49:71:5f:d8:f7:
                    ff:ee:cf:7b:9c:bf:00:e9:d2:92:7d:2f:6f:79:8b:
                    13:3e:fc:fa:9f:c0:4b:fd:1e:63:66:56:44:32:50:
                    68:ed:cd:74:88:c8:9d:3c:bb:82:b0:1f:03:f5:fc:
                    1a:a8:c9:82:c0:eb:cf:86:ae:82:5c:f2:cc:b8:23:
                    e8:20:c2:cc:64:74:28:56:81:c0:67:81:b2:5b:d5:
                    f8:63:2a:11:18:86:09:a8:a2:3a:34:99:34:c7:e9:
                    e8:ba:46:ec:34:6f:f3:fd:34:8f:18:bb:2d:2e:49:
                    05:bb:f7:53:61:41:1a:a9:6e:79:26:a3:02:d0:4a:
                    db:1c:c7:b7:88:a0:e7:d7:b6:7c:19:69:99:a6:84:
                    d0:49:2e:e3:5b:dd:14:9c:2a:49:ff:e2:a4:f0:a9:
                    4a:8e:92:a3:76:4c:eb:93:15:93:03:b4:61:cb:ad:
                    ae:82:23:42:55:a8:a6:be:04:81:19:0f:cb:8b:bc:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:02:CE:69:51:FD:B8:9C:0F:44:72:DA:87:43:59:74:ED:5F:E2:17
            X509v3 Authority Key Identifier:
                keyid:BC:E3:C7:70:E6:0E:75:26:B8:34:77:55:8F:5E:7A:E8:BE:99:B0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCE3C770E60E7526B83477558F5E7AE8BE99B0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wbDtq1RkWw4SLazsAFNqTNAKx8cUrvakBuCiS5V9Q6Y/0/34352e3138392e33302e302f32342d3234203d3e20323639353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:cd:0e:cc:e2:38:5e:2f:3f:b6:ff:75:4d:70:11:a2:02:
         96:1e:c4:e5:d1:90:06:31:ad:6f:8e:30:85:51:47:2b:7c:02:
         5a:0c:72:9a:c4:fc:6d:f9:b4:85:7e:e2:92:c7:37:ea:a9:02:
         2d:af:0d:8a:f2:93:f2:69:04:af:cd:19:97:f1:72:24:c9:a7:
         d7:ea:69:68:b6:cc:42:4f:94:cc:fe:c0:18:cc:b2:6b:c3:51:
         d8:d9:09:53:e1:e7:1c:41:1c:a5:b5:1f:80:de:5b:c7:ef:ee:
         3b:1c:32:89:21:63:4e:fe:10:39:f9:19:5b:ce:98:bd:b8:17:
         bd:4f:3d:b0:e3:cf:b7:1d:7b:62:1b:06:c9:31:10:50:26:9b:
         b4:ed:ac:88:55:f4:ff:6d:ed:73:c2:b2:d8:20:01:b1:1d:5c:
         0c:60:f4:31:a4:81:39:95:46:25:d3:b1:be:91:c1:70:7a:57:
         e7:88:8a:95:a8:82:81:77:89:11:0c:20:1f:3d:05:74:2b:4d:
         18:b0:75:06:b8:02:72:98:f4:18:cc:79:54:c2:d1:bc:35:6b:
         07:fd:71:fd:ef:0d:18:66:77:83:bd:53:b5:52:82:89:c5:1d:
         17:6e:54:60:ec:7e:f0:6d:c2:e6:1d:26:db:50:c9:c3:f4:0b:
         83:64:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org