Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/34352e3136352e32302e302f32322d3232203d3e20323638363532.roa
File:                     34352e3136352e32302e302f32322d3232203d3e20323638363532.roa (raw, json)
Hash identifier:          g4GNExDuiybeoDZjWnjlXXCYi9X97dbY75MoQmzf498=
Subject key identifier:   26:15:F0:50:D8:8D:F0:6F:A4:A2:62:7A:43:48:42:9C:51:D6:DA:E5
Certificate issuer:       /CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
Certificate serial:       400AA261DD03D5A7E033E18BEA5F2ECDBCB39475
Authority key identifier: 9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/34352e3136352e32302e302f32322d3232203d3e20323638363532.roa
Signing time:             Mon 08 Apr 2024 20:11:30 +0000
ROA not before:           Mon 08 Apr 2024 20:06:30 +0000
ROA not after:            Mon 07 Apr 2025 20:11:30 +0000
asID:                     268652
IP address blocks:        45.165.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0a:a2:61:dd:03:d5:a7:e0:33:e1:8b:ea:5f:2e:cd:bc:b3:94:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EF83D76B3DC326DCCE8463508DDB005DC545896
        Validity
            Not Before: Apr  8 20:06:30 2024 GMT
            Not After : Apr  7 20:11:30 2025 GMT
        Subject: CN=2615F050D88DF06FA4A2627A4348429C51D6DAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:12:c0:00:23:03:93:8f:af:67:f0:e5:3c:
                    da:0e:34:e9:17:9e:de:9b:8b:bc:0d:bd:87:20:70:
                    6e:fe:c0:a0:94:3e:d5:0a:27:a7:ce:4b:1b:1f:9f:
                    af:36:00:50:39:54:59:e6:08:86:7a:5e:8c:9b:ff:
                    81:93:c2:2d:2c:59:5a:be:69:fe:45:19:c0:9f:73:
                    c6:8c:4e:c5:14:86:84:a8:68:38:85:ed:5e:0b:ae:
                    fa:38:83:0a:e6:8e:3e:82:a2:1c:e9:50:6d:4b:71:
                    3b:5b:9d:0a:56:4d:b6:b9:33:cf:54:18:00:33:fd:
                    11:c0:a3:1f:d5:25:5a:72:f5:f4:05:ec:12:8d:64:
                    84:be:9e:05:10:cf:23:cd:94:95:ce:4d:ac:7e:b6:
                    b3:84:2d:ca:86:d9:2d:d6:30:52:a6:a2:ed:45:fa:
                    64:0f:2c:43:8d:f1:1c:3a:c8:04:d7:31:5d:48:87:
                    4e:51:ba:c4:d4:8c:ca:7d:cd:99:c9:62:12:0d:b8:
                    eb:9d:83:47:85:18:1c:f6:cb:2d:5f:5a:91:32:93:
                    e8:d1:dd:4d:31:cd:3e:2d:ff:98:7c:55:66:6b:a5:
                    a5:2d:26:7b:2c:f2:ae:e3:9a:37:27:a3:16:26:6f:
                    8d:b0:98:e7:b6:1b:27:e4:a6:8b:6e:0a:08:a2:ff:
                    57:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:15:F0:50:D8:8D:F0:6F:A4:A2:62:7A:43:48:42:9C:51:D6:DA:E5
            X509v3 Authority Key Identifier:
                keyid:9E:F8:3D:76:B3:DC:32:6D:CC:E8:46:35:08:DD:B0:05:DC:54:58:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/9EF83D76B3DC326DCCE8463508DDB005DC545896.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EF83D76B3DC326DCCE8463508DDB005DC545896.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/1/34352e3136352e32302e302f32322d3232203d3e20323638363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:c1:f4:40:19:27:04:2a:38:64:b8:ff:4f:e1:b6:36:9e:b6:
         5c:3c:23:76:61:d2:f4:3f:ef:30:02:24:23:c3:65:88:fc:26:
         fc:3b:3d:83:a7:1d:8d:7c:a0:63:66:5d:30:fc:02:bd:10:3b:
         08:61:f4:e4:bc:cf:87:12:e1:f4:9c:ea:08:eb:39:b2:00:59:
         71:05:49:b2:0f:ea:be:85:55:f9:36:de:17:f7:ee:5f:7f:1a:
         24:eb:86:7b:a5:41:49:70:0c:3b:a1:c7:41:d1:12:2d:17:29:
         72:23:60:28:a8:5a:d6:ba:78:cc:de:0b:a6:0d:b6:a3:0a:67:
         fd:9a:d0:ef:01:d1:ad:37:34:44:ee:b8:54:27:2f:82:14:ff:
         f7:56:ce:08:3a:ed:f7:bc:60:81:8e:6b:98:39:95:2d:37:5f:
         b2:93:59:0f:cb:84:dd:38:10:d7:45:29:b1:5e:c2:00:a2:99:
         86:ad:0e:93:48:d9:36:02:20:99:da:44:88:dc:fc:19:fc:06:
         39:40:2b:3d:fc:34:e1:a2:0d:66:e0:10:73:91:3f:32:de:3e:
         c8:13:4c:5b:f6:dc:b6:cc:1b:65:82:68:44:10:fa:3e:aa:96:
         ac:1f:08:46:f3:a0:0c:db:a4:2f:08:5e:4f:cb:ab:c3:af:44:
         2a:4c:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org