Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/34352e3138362e39302e302f32332d3233203d3e20323639343137.roa
File:                     34352e3138362e39302e302f32332d3233203d3e20323639343137.roa (raw, json)
Hash identifier:          o7TjoWScSAfqitC35V7BzSoqHTeLkx4LGmDvE8ama5U=
Subject key identifier:   A9:98:FA:4B:66:E3:C4:70:53:C1:D5:50:C4:7C:C1:73:71:DE:25:D9
Certificate issuer:       /CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
Certificate serial:       4B62F5C712C6DD43A30C9608B8C9849412776575
Authority key identifier: 47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/34352e3138362e39302e302f32332d3233203d3e20323639343137.roa
Signing time:             Tue 02 May 2023 13:48:08 +0000
ROA not before:           Tue 02 May 2023 13:43:08 +0000
ROA not after:            Tue 30 Apr 2024 13:48:08 +0000
asID:                     269417
IP address blocks:        45.186.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:62:f5:c7:12:c6:dd:43:a3:0c:96:08:b8:c9:84:94:12:77:65:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735A88EEFB535E0AA8F960135D5345E83E1C78E
        Validity
            Not Before: May  2 13:43:08 2023 GMT
            Not After : Apr 30 13:48:08 2024 GMT
        Subject: CN=A998FA4B66E3C47053C1D550C47CC17371DE25D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:db:df:78:cb:d3:1a:4d:e5:52:d0:36:01:
                    36:86:6e:85:36:ad:0e:c2:61:17:72:15:66:1b:09:
                    64:28:a9:e8:8c:9d:12:3a:85:46:b8:6c:bb:46:4e:
                    12:fa:81:a8:83:05:57:53:45:b9:7f:07:d1:95:2a:
                    1e:57:ce:f7:62:5f:95:71:53:08:be:a7:8d:3c:7b:
                    f3:bd:fd:97:66:14:7b:38:a1:23:18:7b:a7:23:99:
                    95:78:8e:31:cd:53:53:6e:cd:d1:59:8b:26:8a:00:
                    60:80:58:7e:dc:80:ce:45:bf:f7:d8:6c:14:ce:b1:
                    6a:ae:14:ed:f0:ba:9e:a8:55:32:99:18:e1:2a:19:
                    5a:87:5e:78:76:1f:38:d0:6f:e9:8c:77:00:92:df:
                    4f:d2:77:84:1e:83:a1:d1:9f:f7:17:eb:f1:88:2b:
                    7f:7f:76:c3:93:b8:c8:df:6b:c5:f9:8d:c0:c6:b1:
                    07:88:82:e3:b4:e4:63:1f:d5:e3:da:50:13:f6:83:
                    06:0f:42:04:a2:6e:7f:b4:9e:7a:2a:26:e9:ad:56:
                    0b:a5:8e:a9:f4:8d:9e:1b:9b:59:72:88:d4:53:b7:
                    7f:cf:8c:18:a2:fb:96:0e:0b:51:df:ea:2d:5b:6a:
                    83:ab:dc:30:54:be:d8:15:61:15:c0:54:f9:1e:5a:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:98:FA:4B:66:E3:C4:70:53:C1:D5:50:C4:7C:C1:73:71:DE:25:D9
            X509v3 Authority Key Identifier:
                keyid:47:35:A8:8E:EF:B5:35:E0:AA:8F:96:01:35:D5:34:5E:83:E1:C7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4735A88EEFB535E0AA8F960135D5345E83E1C78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/0/34352e3138362e39302e302f32332d3233203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:e5:57:84:12:10:9d:34:06:1e:06:d8:b2:1c:69:4b:30:79:
         d9:6c:f3:bc:c1:8d:f4:17:19:06:19:07:74:2a:4f:85:85:ce:
         9d:8b:80:59:49:f9:9d:7f:b6:7e:67:b4:11:93:0e:b2:66:d0:
         5b:85:96:9e:c8:70:1d:b0:07:7d:26:fc:c2:ba:ba:84:d8:e1:
         17:47:6b:34:fb:3e:bf:9c:14:33:c0:63:20:29:e3:03:72:94:
         15:0f:47:84:d0:ff:47:fd:3f:7a:ce:e0:8c:6a:f4:27:d1:95:
         9a:ff:2c:75:e7:dd:03:4a:65:c1:c2:a5:cf:31:43:c8:14:7b:
         86:dc:b8:26:c1:81:ed:2b:98:c9:6e:17:3a:b0:8e:01:34:e7:
         70:64:7a:65:4b:61:26:37:88:38:22:2c:12:bc:eb:0d:31:fe:
         dd:61:c5:77:32:9d:2a:61:29:ac:eb:ea:c6:0a:79:12:e9:9a:
         ca:03:d7:be:03:07:ad:2c:a9:3a:59:51:d3:34:29:ff:fe:fa:
         29:91:fa:16:91:ff:65:22:8a:80:9e:61:7b:8e:fe:00:35:04:
         b6:3d:bb:87:d0:38:3e:ef:7d:74:2a:65:d1:e9:9e:4e:f8:bc:
         b7:dc:37:b1:64:83:c8:31:f1:f3:06:47:5e:e3:87:26:b0:f9:
         0f:b3:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org