Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32322d3232203d3e20323638393434.roa
File:                     34352e3137362e3134302e302f32322d3232203d3e20323638393434.roa (raw, json)
Hash identifier:          2q1hrJHJgLymnTMCpeD+lMBjZoiKxL28Vm/PlvXWzeI=
Subject key identifier:   92:B6:B2:E0:2B:84:EB:77:42:00:CE:EB:C0:4E:23:78:1A:C5:64:A8
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       304AE4142EDD3C10D3EDDEAA3002B31F85B18E30
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32322d3232203d3e20323638393434.roa
Signing time:             Mon 22 May 2023 18:46:20 +0000
ROA not before:           Mon 22 May 2023 18:41:20 +0000
ROA not after:            Mon 20 May 2024 18:46:20 +0000
asID:                     268944
IP address blocks:        45.176.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4a:e4:14:2e:dd:3c:10:d3:ed:de:aa:30:02:b3:1f:85:b1:8e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: May 22 18:41:20 2023 GMT
            Not After : May 20 18:46:20 2024 GMT
        Subject: CN=92B6B2E02B84EB774200CEEBC04E23781AC564A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:3c:9d:d9:d7:59:8c:6a:27:28:2b:60:d3:
                    b6:d8:c8:d7:f0:7b:e4:55:51:e1:20:67:c1:ad:46:
                    84:fa:5c:b7:f6:c1:07:14:70:7f:39:04:62:1a:5c:
                    93:a6:04:1e:15:9b:ed:bc:28:f6:5f:46:ad:3e:ed:
                    9b:51:7a:0c:27:a1:1a:d5:b6:2f:b1:18:e6:2f:75:
                    d1:9a:d6:9d:9c:ea:04:2e:a4:dd:54:86:b1:cd:63:
                    f0:f2:58:25:a6:f3:46:31:cb:ee:40:e5:93:f0:0d:
                    92:f4:a4:bf:52:35:c2:c9:c7:56:36:b0:91:b1:5c:
                    34:3e:0c:2f:b5:62:78:fb:70:b3:66:1e:8e:09:d5:
                    db:63:d9:b5:57:fc:93:07:b2:5e:a3:7c:46:49:a9:
                    be:b8:2f:bf:97:18:29:d5:62:d8:48:7e:d1:60:ee:
                    e2:ca:f1:8f:85:fb:77:31:0a:c9:5b:7e:aa:c7:29:
                    4d:16:db:64:76:29:0f:08:ce:f8:48:53:12:7f:3e:
                    8a:03:1d:05:a0:af:7a:b3:6f:d4:fb:9f:93:b0:33:
                    5b:34:35:c6:2b:26:47:59:72:82:c7:d1:19:a3:1e:
                    49:e9:2c:22:2e:f5:a0:bb:40:76:65:fb:cc:b7:d9:
                    5d:7d:25:02:14:3f:43:51:88:06:18:52:8f:5a:be:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B6:B2:E0:2B:84:EB:77:42:00:CE:EB:C0:4E:23:78:1A:C5:64:A8
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32322d3232203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:2d:51:30:63:2b:bb:a4:a9:8b:33:8e:aa:64:c9:d1:96:97:
         a2:3b:8e:2e:08:3a:51:24:9e:bb:10:03:99:0a:5a:60:37:05:
         c7:23:03:20:a1:3d:47:10:1a:a4:41:d6:25:71:d4:5e:c9:f6:
         5a:06:c9:4f:74:b6:7d:4a:de:fa:68:af:52:e2:15:07:e3:4d:
         cc:cb:bd:97:92:3c:6e:73:9b:59:e7:f9:a1:c5:6e:dd:26:81:
         e7:55:75:ce:35:fb:a6:1a:8a:54:b6:11:2c:e5:d7:3f:56:9d:
         dc:c1:0d:03:e1:da:db:fa:11:27:1c:f4:b7:cc:76:f4:5f:fc:
         12:b1:cd:89:23:61:30:78:b3:a3:88:23:cf:20:45:b8:91:dd:
         fe:10:66:8c:c0:64:ae:a6:23:c8:07:a3:c5:3f:bf:05:73:39:
         72:99:a7:0f:c8:5f:7d:83:d3:e2:01:83:46:ec:7c:ae:b8:5f:
         0c:cd:81:58:e7:dd:44:a1:bc:f1:5b:10:68:ef:d4:0e:5a:ec:
         64:93:21:ee:97:c8:4f:b7:4f:e1:44:ef:70:2d:d7:f3:48:b3:
         ae:e1:43:58:25:a6:5b:24:bb:9c:84:b8:20:33:51:1d:23:af:
         d5:b3:76:2f:7d:95:4f:40:66:77:47:24:62:4b:0c:3f:9f:60:
         e5:b7:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org