Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133322e302f32322d3233203d3e20323639323832.roa
File:                     34352e3138332e3133322e302f32322d3233203d3e20323639323832.roa (raw, json)
Hash identifier:          noU4QmEr78l+Lbf50lNDww1baDQHa0Mve+7crADyW/Y=
Subject key identifier:   6C:24:94:56:B7:7F:D1:C2:EA:64:02:7C:71:DC:86:22:47:C9:F3:2B
Certificate issuer:       /CN=388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7
Certificate serial:       165BB4B530051937305BDED78F5E12B451860553
Authority key identifier: 38:8E:EB:C4:A0:2E:DA:89:CA:BF:A0:84:2A:E8:E8:EE:40:C2:6C:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133322e302f32322d3233203d3e20323639323832.roa
Signing time:             Mon 01 May 2023 14:51:40 +0000
ROA not before:           Mon 01 May 2023 14:46:40 +0000
ROA not after:            Mon 29 Apr 2024 14:51:40 +0000
asID:                     269282
IP address blocks:        45.183.132.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5b:b4:b5:30:05:19:37:30:5b:de:d7:8f:5e:12:b4:51:86:05:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7
        Validity
            Not Before: May  1 14:46:40 2023 GMT
            Not After : Apr 29 14:51:40 2024 GMT
        Subject: CN=6C249456B77FD1C2EA64027C71DC862247C9F32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:49:27:8b:08:83:00:e6:f0:16:f6:d5:df:
                    5e:85:b5:04:0a:63:b6:45:49:c3:0e:01:fa:94:2f:
                    03:ec:b1:2b:36:eb:5b:89:99:89:dd:bb:96:ec:0d:
                    17:db:33:e2:cb:d3:bc:d8:ef:f6:49:63:d7:44:36:
                    fe:23:94:ac:01:f2:a9:95:d5:bd:aa:02:a3:51:ce:
                    e6:a4:ed:70:b0:5e:e2:42:1b:6a:48:11:19:1b:e1:
                    50:0f:06:89:07:b2:44:84:86:75:36:03:2b:06:85:
                    3e:a7:35:05:1d:3c:86:ad:3b:ec:e4:66:5b:23:db:
                    e4:5a:79:f3:3f:9d:a6:61:6c:65:4f:a4:75:b9:09:
                    39:60:24:56:b3:b0:33:84:09:02:82:a6:53:70:76:
                    4d:7a:18:41:d7:f2:40:2d:d8:78:44:fe:cf:9b:99:
                    00:98:25:be:12:f3:ae:ea:d6:ca:e6:4f:88:fd:b7:
                    d7:49:06:ca:4f:0f:e7:e5:3b:e9:cd:80:46:09:1a:
                    23:41:70:6b:46:03:c0:48:dd:8a:74:de:1e:72:3b:
                    61:7a:9b:58:4d:fd:9f:2d:1f:f2:0f:21:76:77:82:
                    67:14:11:6c:42:a5:3a:84:79:e5:47:2f:f0:7b:c1:
                    67:fb:77:6e:0a:8e:89:5b:41:9b:ef:ca:0c:9c:ca:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:24:94:56:B7:7F:D1:C2:EA:64:02:7C:71:DC:86:22:47:C9:F3:2B
            X509v3 Authority Key Identifier:
                keyid:38:8E:EB:C4:A0:2E:DA:89:CA:BF:A0:84:2A:E8:E8:EE:40:C2:6C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/388EEBC4A02EDA89CABFA0842AE8E8EE40C26CA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133322e302f32322d3233203d3e20323639323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:71:7b:e8:76:6d:b3:56:ea:b3:04:74:f4:27:5d:48:5c:52:
         77:22:d4:c8:22:e3:a3:48:c5:a5:8e:c7:56:3e:e0:37:2a:e9:
         78:89:87:30:86:0d:23:68:41:fd:fb:9a:32:7d:be:df:d7:18:
         bd:a5:23:4f:10:e8:f3:7e:a9:af:7c:cb:5e:f6:84:a3:87:b4:
         b5:31:d8:12:0d:3a:6e:92:2d:59:79:51:15:04:70:21:bc:15:
         d2:db:af:db:8c:bb:a1:16:50:8f:b2:1a:02:b8:79:0d:d3:2a:
         c0:bf:4e:6f:7e:98:1e:a3:8f:7c:52:db:78:d9:76:a4:4e:a0:
         2b:cc:90:ab:f9:89:4a:95:81:c3:18:7d:d7:07:99:28:06:94:
         ba:98:99:8d:56:88:02:1f:e6:b5:79:3e:95:90:9b:e6:19:a6:
         8e:ff:cf:53:d0:32:78:d3:b4:df:99:01:b2:17:72:95:57:0d:
         6e:33:9e:57:c4:bc:47:7b:30:40:ab:92:96:e9:b0:54:43:a4:
         f8:c4:a5:82:e0:92:57:76:e9:cb:bb:26:0b:d9:9a:01:d1:31:
         ba:97:c1:31:9e:23:9e:99:3c:a0:fe:f1:47:52:1f:0e:ea:7f:
         4d:3a:9a:23:87:f8:45:ed:0d:35:95:d4:a4:b2:13:75:8e:20:
         a7:a5:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org