Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/34352e3138372e3232382e302f32322d3234203d3e20323639343838.roa
File:                     34352e3138372e3232382e302f32322d3234203d3e20323639343838.roa (raw, json)
Hash identifier:          aFa5axO3cHgCBfaxpwDEvTCiqO7wu88URLjlbTXSeBw=
Subject key identifier:   64:D2:75:FE:A1:59:C5:4A:84:E6:D0:6F:74:11:64:7F:61:A8:FE:12
Certificate issuer:       /CN=B14780C65B69F08DED776EDAAFC62ACF928404DB
Certificate serial:       40282F75239307792877C62EE7E96965F0452CEC
Authority key identifier: B1:47:80:C6:5B:69:F0:8D:ED:77:6E:DA:AF:C6:2A:CF:92:84:04:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B14780C65B69F08DED776EDAAFC62ACF928404DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/34352e3138372e3232382e302f32322d3234203d3e20323639343838.roa
Signing time:             Thu 31 Aug 2023 19:48:00 +0000
ROA not before:           Thu 31 Aug 2023 19:43:00 +0000
ROA not after:            Thu 29 Aug 2024 19:48:00 +0000
asID:                     269488
IP address blocks:        45.187.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:28:2f:75:23:93:07:79:28:77:c6:2e:e7:e9:69:65:f0:45:2c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B14780C65B69F08DED776EDAAFC62ACF928404DB
        Validity
            Not Before: Aug 31 19:43:00 2023 GMT
            Not After : Aug 29 19:48:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:a9:70:ef:eb:26:e4:04:77:37:aa:b0:3a:
                    09:1f:76:c6:d9:e5:b8:36:e0:19:e2:16:50:93:ff:
                    11:0c:3a:cc:e5:b6:00:a9:c1:da:bb:8f:3f:49:2b:
                    b8:7e:81:40:de:12:af:23:70:e0:70:41:0e:ec:1a:
                    f8:62:d8:56:fb:c8:67:e0:ba:f0:40:41:84:fe:32:
                    6b:4b:04:bc:64:6e:a5:e5:3c:9c:18:eb:22:26:60:
                    62:2d:c4:a6:40:32:d5:5a:a6:eb:6a:13:99:58:12:
                    3b:53:94:12:67:08:a2:62:77:80:81:2b:db:40:d3:
                    57:0a:74:c9:4e:d5:cc:d1:b2:76:f3:c0:2b:25:15:
                    9e:83:56:87:ca:5e:8d:56:6e:99:f6:d9:e9:a7:5b:
                    47:c0:1f:e0:8c:14:fa:a1:aa:64:67:52:c6:0d:84:
                    e9:1f:43:02:b1:11:6e:78:64:e1:bf:81:11:e7:d1:
                    70:81:13:41:fe:90:f2:97:a6:47:65:71:e6:7d:29:
                    6f:f0:b4:f0:6f:12:86:23:72:ec:32:64:39:43:b1:
                    da:36:7c:cc:e3:ad:ac:fa:10:e3:72:3f:f9:a3:35:
                    3a:56:39:d4:64:47:62:bc:9c:97:3b:5b:79:ae:e3:
                    77:fe:54:0a:c4:ae:75:ab:19:d9:57:88:8d:0a:ae:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D2:75:FE:A1:59:C5:4A:84:E6:D0:6F:74:11:64:7F:61:A8:FE:12
            X509v3 Authority Key Identifier:
                keyid:B1:47:80:C6:5B:69:F0:8D:ED:77:6E:DA:AF:C6:2A:CF:92:84:04:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/B14780C65B69F08DED776EDAAFC62ACF928404DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B14780C65B69F08DED776EDAAFC62ACF928404DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/34352e3138372e3232382e302f32322d3234203d3e20323639343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:41:4c:3e:1e:d9:f0:85:66:a6:0e:5b:79:62:d4:d1:2a:60:
         b5:c3:2a:6b:02:35:4a:73:21:f5:c3:62:38:54:63:07:70:de:
         e9:72:ce:dd:88:0d:43:3d:9b:a4:11:c4:e8:f5:90:99:c6:fe:
         e2:5e:4a:a6:2d:fb:40:72:fd:f2:e0:ff:a7:af:30:80:c0:c7:
         ad:d0:34:e5:3d:3a:e6:3f:2a:e9:52:8c:0d:b8:06:fd:f8:84:
         99:dc:03:39:a1:a8:0b:b7:a5:f5:3a:2b:23:f4:f2:8d:cc:18:
         c7:73:12:5f:57:5d:de:6b:bc:1e:5c:a9:34:da:3b:c3:af:da:
         b5:89:3c:53:ba:bf:01:8d:0c:f3:a9:0a:b7:ca:66:7a:ca:84:
         83:a8:70:f2:3a:f5:63:f8:7e:af:f2:a0:e3:82:90:51:fd:cd:
         9a:f3:0c:c7:26:fe:e0:62:42:6f:fa:f2:40:f6:64:ec:62:36:
         2a:2e:fe:a7:8e:95:6d:5d:eb:2d:4d:b4:0d:65:e3:53:fe:48:
         6c:bf:da:b9:d2:14:07:a9:a3:e2:c5:27:82:cb:61:7d:59:d6:
         7d:a6:b2:d1:33:b0:41:17:5d:6b:a0:ca:85:8e:62:f2:ae:bd:
         bb:7c:88:b7:74:02:3a:84:8d:68:0d:c2:a0:2b:1b:5f:85:fa:
         8d:fe:16:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org