Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/34352e3138382e3134392e302f32342d3234203d3e20323635333335.roa
File:                     34352e3138382e3134392e302f32342d3234203d3e20323635333335.roa (raw, json)
Hash identifier:          Tl9LngR8GDIrCbstD9WIsRNQn2NyQcwwSSxHQf4+99o=
Subject key identifier:   18:AC:E2:2D:7B:3F:F7:C4:04:58:82:A6:D4:C2:EE:1E:3E:E6:B4:B6
Certificate issuer:       /CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
Certificate serial:       122FCE331538483AA9F0E6DEADA49E735F6AF31B
Authority key identifier: F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/34352e3138382e3134392e302f32342d3234203d3e20323635333335.roa
Signing time:             Wed 20 Dec 2023 19:15:54 +0000
ROA not before:           Wed 20 Dec 2023 19:10:54 +0000
ROA not after:            Wed 18 Dec 2024 19:15:54 +0000
asID:                     265335
IP address blocks:        45.188.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2f:ce:33:15:38:48:3a:a9:f0:e6:de:ad:a4:9e:73:5f:6a:f3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
        Validity
            Not Before: Dec 20 19:10:54 2023 GMT
            Not After : Dec 18 19:15:54 2024 GMT
        Subject: CN=18ACE22D7B3FF7C4045882A6D4C2EE1E3EE6B4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:02:89:ca:f8:7a:e6:28:6c:68:19:ae:c1:
                    f2:94:09:05:44:ae:ef:e0:13:40:46:6f:d6:1c:69:
                    df:4c:76:b6:21:13:9b:0c:b5:17:b3:08:c7:ef:fe:
                    6c:2f:a9:4a:82:90:88:e2:a8:f3:46:b9:ec:da:b3:
                    73:ed:b5:ca:24:2d:47:61:14:7c:ba:30:83:9a:fb:
                    a5:ad:9f:31:8e:fe:b7:b6:a8:a4:04:51:32:46:de:
                    5f:0d:85:a2:5d:04:41:92:03:df:de:af:8a:95:35:
                    b1:85:44:85:5c:dc:04:36:e0:3f:02:4e:29:2d:54:
                    18:ab:03:78:b0:4a:81:b4:5e:62:bf:23:ee:17:2c:
                    ef:57:64:30:ea:53:c9:a6:51:74:e4:c6:76:74:23:
                    10:34:c0:86:4e:e8:02:1b:06:92:da:58:89:c8:29:
                    41:bc:c4:b7:0c:3c:6a:7a:28:0b:4a:f9:54:5e:48:
                    5f:ac:da:57:0f:57:23:a6:d7:8f:d9:02:fb:62:d6:
                    98:0e:39:25:d9:df:6b:56:29:58:21:4d:47:20:6f:
                    fa:f5:7d:4c:ff:d3:a6:0a:b8:19:fa:6d:46:8e:31:
                    91:64:f4:6e:81:02:c0:80:15:38:4c:d4:44:8a:d9:
                    e8:37:5a:90:8b:30:ad:79:ba:56:96:3f:4b:05:55:
                    bc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AC:E2:2D:7B:3F:F7:C4:04:58:82:A6:D4:C2:EE:1E:3E:E6:B4:B6
            X509v3 Authority Key Identifier:
                keyid:F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/34352e3138382e3134392e302f32342d3234203d3e20323635333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:90:46:85:1c:53:8d:8f:31:1a:91:4c:e2:d9:98:bd:ef:92:
         ef:81:59:f0:1a:68:e1:5c:41:90:51:23:6a:7a:e9:13:bf:73:
         b0:76:f0:db:f9:47:ad:81:70:59:e3:fd:c0:fb:f0:b9:ee:e1:
         5e:3c:ba:b5:9e:fa:7e:67:a5:fd:67:e3:39:c0:a2:b1:b7:6d:
         24:11:9e:ca:f7:46:21:9c:f1:6a:92:11:39:a2:2f:31:03:f1:
         38:0c:e5:5c:fb:46:36:0e:78:24:1e:37:ce:8b:2b:c3:64:73:
         fc:88:d8:be:ae:77:69:4f:74:77:a6:fb:e2:a2:1b:25:be:be:
         10:3b:c6:88:fd:3d:94:d5:6c:35:d4:e2:97:5c:9b:3c:e0:df:
         f6:e2:8c:5d:26:e7:8c:ca:2d:5b:f8:6c:b4:c5:9b:2e:ca:88:
         33:8b:ec:2b:c7:87:65:e3:5c:61:b4:16:c4:f9:9c:66:23:34:
         c8:32:d1:08:87:97:8f:5c:b5:73:e5:02:7a:92:aa:7a:4f:5a:
         f6:44:86:6c:5e:40:86:f7:d8:c3:aa:ff:21:ab:38:d5:90:87:
         b8:a9:94:c7:db:c0:6c:92:78:85:f7:d1:5d:18:43:f5:14:31:
         3b:71:57:26:19:4c:70:21:fa:0c:ba:bd:f4:6f:90:f4:a3:dd:
         5c:f8:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org