Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/34352e342e34342e302f32322d3234203d3e20323636303535.roa
File:                     34352e342e34342e302f32322d3234203d3e20323636303535.roa (raw, json)
Hash identifier:          HUs00ZQ1ByWdX8rhyMEebqleDEltaIcEk8pDAe6Mm1s=
Subject key identifier:   B4:5A:3F:AF:2E:4E:0E:CD:03:83:44:E7:B6:64:69:E7:70:0A:29:09
Certificate issuer:       /CN=FEB9944CC6DC0147175B1A57691C6C3D81D7312E
Certificate serial:       2FB8B74B07B745F247F6D0F13C5024EB5126979B
Authority key identifier: FE:B9:94:4C:C6:DC:01:47:17:5B:1A:57:69:1C:6C:3D:81:D7:31:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEB9944CC6DC0147175B1A57691C6C3D81D7312E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/34352e342e34342e302f32322d3234203d3e20323636303535.roa
Signing time:             Thu 14 Sep 2023 21:04:41 +0000
ROA not before:           Thu 14 Sep 2023 20:59:41 +0000
ROA not after:            Thu 12 Sep 2024 21:04:41 +0000
asID:                     266055
IP address blocks:        45.4.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b8:b7:4b:07:b7:45:f2:47:f6:d0:f1:3c:50:24:eb:51:26:97:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEB9944CC6DC0147175B1A57691C6C3D81D7312E
        Validity
            Not Before: Sep 14 20:59:41 2023 GMT
            Not After : Sep 12 21:04:41 2024 GMT
        Subject: CN=B45A3FAF2E4E0ECD038344E7B66469E7700A2909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:22:d1:bc:6b:1c:bb:d3:9a:22:9e:f7:2a:
                    c7:f7:df:d0:bf:2f:5f:de:31:a5:4c:ef:d5:19:c6:
                    91:20:ac:00:6f:45:f8:e4:33:15:8a:da:ba:21:64:
                    5e:e9:2c:aa:7b:24:28:23:31:5e:45:b5:ef:fe:0e:
                    db:81:35:b7:41:7c:6e:ee:be:d0:a3:20:07:2c:d2:
                    62:72:7b:21:cd:7c:ad:5a:41:c6:be:61:dc:a7:f2:
                    27:a7:df:57:7c:45:d7:9c:d1:93:b3:d7:32:85:1b:
                    bf:63:13:5e:0f:2b:4a:14:db:4a:74:2b:e4:89:58:
                    17:f8:78:8c:44:dd:0f:db:a2:f0:96:96:9a:aa:9b:
                    8d:26:dd:ac:04:fb:f3:e5:e7:43:b2:17:f7:af:b1:
                    c5:67:90:b0:11:6a:e3:1b:16:2c:6e:68:83:6a:26:
                    f6:73:83:55:33:92:bd:b5:54:a2:69:73:1a:9f:9e:
                    45:83:5a:71:20:92:20:04:bf:7d:92:21:28:9e:11:
                    3a:76:a8:50:6a:0e:ae:5d:40:2d:84:0d:cd:45:e6:
                    68:fd:69:55:b2:5d:b2:da:0b:d8:be:61:67:8a:8f:
                    b9:fd:2c:52:36:63:6e:13:7a:e9:aa:5a:0a:80:18:
                    97:dc:f6:6b:b1:1e:8c:14:8b:13:80:54:8b:6a:7f:
                    6f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5A:3F:AF:2E:4E:0E:CD:03:83:44:E7:B6:64:69:E7:70:0A:29:09
            X509v3 Authority Key Identifier:
                keyid:FE:B9:94:4C:C6:DC:01:47:17:5B:1A:57:69:1C:6C:3D:81:D7:31:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/FEB9944CC6DC0147175B1A57691C6C3D81D7312E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEB9944CC6DC0147175B1A57691C6C3D81D7312E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/34352e342e34342e302f32322d3234203d3e20323636303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:30:b2:0d:0b:42:ae:13:fd:0d:19:01:02:af:7b:af:00:c4:
         68:7a:47:ec:f7:2d:22:7d:4f:87:37:92:38:c8:23:59:51:c0:
         8d:d8:51:5e:90:be:32:54:e9:95:9d:89:36:2e:f1:f5:37:41:
         a8:fb:cd:d4:6e:a5:2f:18:5c:77:e5:22:41:13:e6:7f:ee:82:
         4e:cf:0b:ae:82:0d:0c:09:c5:e3:a3:76:e3:16:55:98:72:95:
         5d:51:62:04:ba:ae:90:ef:1d:61:83:08:7a:11:51:66:e3:d2:
         8a:fc:b1:4f:0c:76:bc:0a:a7:8c:1f:7c:55:74:53:20:09:57:
         fd:79:b3:2c:2b:8e:38:7c:c8:d0:24:b5:ba:53:b8:af:db:2e:
         48:1c:ae:48:67:80:f9:ca:3c:f3:f7:73:c7:97:26:c1:f5:63:
         9e:f0:17:ae:1e:09:ef:93:af:4a:52:45:d8:19:b6:39:72:b9:
         cf:5b:fa:f7:34:f6:a5:3d:9f:8e:6e:6d:35:12:df:a8:f3:84:
         b5:10:33:20:00:2f:82:8f:1d:02:40:1b:ee:f9:04:15:be:33:
         af:af:9f:b0:ed:a7:39:f0:61:56:02:2f:a3:52:21:80:ad:b7:
         29:66:49:a5:af:41:b6:37:94:97:82:c3:9a:ba:3e:22:53:17:
         4d:57:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org