Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/0/34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa
File:                     34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa (raw, json)
Hash identifier:          uCZ2iAV+lq3kBelw6FXUoWItUgXIOZKBUGOOMvZD22k=
Subject key identifier:   BA:E0:47:86:28:E3:27:2A:86:13:B3:B9:F3:D7:EE:76:67:79:FF:EF
Certificate issuer:       /CN=A15D1076F82853139FB51345CAEBDCF33166789B
Certificate serial:       5AE3D58F523D830F352975489FBF614DA111CF1C
Authority key identifier: A1:5D:10:76:F8:28:53:13:9F:B5:13:45:CA:EB:DC:F3:31:66:78:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A15D1076F82853139FB51345CAEBDCF33166789B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/0/34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa
Signing time:             Tue 15 Aug 2023 20:00:25 +0000
ROA not before:           Tue 15 Aug 2023 19:55:25 +0000
ROA not after:            Tue 13 Aug 2024 20:00:25 +0000
asID:                     268458
IP address blocks:        45.161.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e3:d5:8f:52:3d:83:0f:35:29:75:48:9f:bf:61:4d:a1:11:cf:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A15D1076F82853139FB51345CAEBDCF33166789B
        Validity
            Not Before: Aug 15 19:55:25 2023 GMT
            Not After : Aug 13 20:00:25 2024 GMT
        Subject: CN=BAE0478628E3272A8613B3B9F3D7EE766779FFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:cd:d8:ac:30:40:a5:ae:ce:2d:a0:95:d0:
                    84:70:7d:c0:98:b1:c1:c3:73:3a:d3:3e:e7:ca:c1:
                    12:ea:b7:dc:89:8e:4a:04:d9:03:9b:05:b6:f1:4a:
                    58:64:c0:13:75:49:6c:2e:94:6f:ef:f7:6f:00:a3:
                    cb:80:32:cb:73:84:39:15:d9:08:ff:14:9f:7d:eb:
                    d2:21:cb:da:a9:45:08:ae:ab:79:f7:b7:86:21:da:
                    e9:5c:ec:97:73:de:b5:4e:23:32:9c:96:60:08:52:
                    06:ea:d2:c8:11:e6:d6:ab:26:bf:12:98:c6:5d:25:
                    ed:f8:f7:5e:b3:a5:4d:f2:c4:24:70:d3:a0:91:f9:
                    06:fb:96:51:3b:91:e2:4a:db:b9:59:8e:4b:5f:27:
                    96:bb:ed:d6:5f:fc:27:6f:ad:15:08:d2:2a:88:d5:
                    ab:fb:f4:c6:f3:61:b5:fd:4d:14:1f:48:92:f4:d1:
                    43:43:b6:5d:d4:98:03:9c:f7:cb:f1:c2:e5:8d:a3:
                    4b:5f:4c:5c:49:ec:d9:84:e9:c8:8f:9e:4f:97:3e:
                    4f:64:a3:71:31:42:af:c0:f6:94:da:46:44:5d:ca:
                    71:57:ea:a1:eb:11:1f:fd:16:ed:b6:60:f3:16:85:
                    3f:03:9e:f2:47:8f:3a:9a:ac:cb:a6:a4:66:1f:81:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E0:47:86:28:E3:27:2A:86:13:B3:B9:F3:D7:EE:76:67:79:FF:EF
            X509v3 Authority Key Identifier:
                keyid:A1:5D:10:76:F8:28:53:13:9F:B5:13:45:CA:EB:DC:F3:31:66:78:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/0/A15D1076F82853139FB51345CAEBDCF33166789B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A15D1076F82853139FB51345CAEBDCF33166789B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/0/34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:51:54:1a:5b:1a:22:81:83:0a:f7:4e:7d:7e:4d:54:29:bb:
         99:d7:4b:ad:47:20:2a:17:c3:14:c4:f4:c4:86:08:79:de:35:
         47:3f:f2:02:13:8c:99:de:98:f1:f6:4e:84:65:2d:58:09:41:
         6a:d6:fd:13:b9:54:c8:56:e2:22:31:d2:17:4e:89:89:84:8e:
         a5:01:e0:66:a3:d7:78:57:87:f9:b4:38:d7:79:ae:af:cf:c7:
         3b:c3:82:e4:03:b9:4a:2b:34:65:29:61:7c:5b:66:2f:7d:78:
         a1:5f:ec:d4:cb:ec:67:b7:9a:96:bd:49:c4:52:8e:93:c5:bb:
         9e:40:7c:48:89:b7:e4:d0:d2:82:46:7b:12:93:d9:f6:18:5c:
         23:fb:5d:ce:5b:1c:27:57:94:89:e7:60:6d:72:b4:0d:40:0a:
         68:8f:62:33:65:0a:1f:d7:08:2f:ef:25:fc:14:f0:42:d5:0e:
         0c:20:6a:51:0c:1d:8b:fa:78:a3:23:e5:30:f4:8c:59:80:4c:
         0d:9f:7f:46:e2:bd:80:3e:99:25:7a:60:06:7d:a8:5e:dc:3c:
         7d:3a:23:e2:6f:ec:25:23:12:f4:6e:73:66:36:ba:d1:b9:18:
         3c:bd:87:c3:ab:97:5d:81:05:dc:14:84:57:7d:8f:5d:29:b0:
         80:f7:a2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org