Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32332d3233203d3e20323636303836.roa
File:                     34352e342e3230382e302f32332d3233203d3e20323636303836.roa (raw, json)
Hash identifier:          QmP8F1rDHRLpjKbG7f2UVOAk/2uGUlxTVNawE/qTRnk=
Subject key identifier:   60:3E:60:80:DA:FC:ED:04:C6:A5:86:74:81:F3:96:5E:B8:E1:2A:CC
Certificate issuer:       /CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
Certificate serial:       68D953926404C8B2C44CABA4E45EEF338FDB1952
Authority key identifier: 49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32332d3233203d3e20323636303836.roa
Signing time:             Thu 21 Jul 2022 17:18:36 +0000
ROA not before:           Thu 21 Jul 2022 17:13:36 +0000
ROA not after:            Thu 20 Jul 2023 17:18:36 +0000
asID:                     266086
IP address blocks:        45.4.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d9:53:92:64:04:c8:b2:c4:4c:ab:a4:e4:5e:ef:33:8f:db:19:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
        Validity
            Not Before: Jul 21 17:13:36 2022 GMT
            Not After : Jul 20 17:18:36 2023 GMT
        Subject: CN=603E6080DAFCED04C6A5867481F3965EB8E12ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:93:9f:30:32:57:4a:9a:fa:21:85:55:34:
                    86:fc:4a:42:77:ef:8e:81:7f:33:88:4d:d8:5a:94:
                    aa:7d:8c:db:9a:c7:72:0f:57:91:7a:ae:f5:6d:5d:
                    a9:30:32:4e:6d:43:fc:c4:da:2f:f1:ab:31:a8:de:
                    3d:ec:30:0d:77:9c:d7:89:06:ce:9f:53:f7:9f:46:
                    d3:56:02:fb:2a:07:cb:1b:14:98:58:19:70:7b:22:
                    28:43:5f:b8:2c:e5:28:71:80:ee:7c:a5:a5:21:8c:
                    1e:32:03:4d:f7:21:fd:eb:89:69:b8:08:e8:6d:a9:
                    2e:96:ed:2c:33:9f:07:f2:ba:c0:73:0e:e3:cd:4a:
                    97:60:33:dd:4c:7e:7f:30:66:42:8e:5b:e1:79:fd:
                    52:43:d1:74:94:37:8e:09:06:97:ac:e1:79:0f:60:
                    1f:26:c2:6a:54:8c:5e:0a:ef:36:2e:54:ee:1d:bf:
                    21:b5:e3:74:9a:61:df:2c:ea:72:ae:81:4f:77:58:
                    e3:04:71:dc:83:02:ac:97:f9:a0:97:48:32:94:1a:
                    e3:94:4e:7b:60:3c:47:d2:01:4d:ea:b4:08:d5:3b:
                    ce:3b:92:7f:bc:2e:d9:88:a1:98:20:48:f6:91:28:
                    79:6e:8e:0c:ae:9c:fa:20:fc:71:18:4f:0b:1d:77:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3E:60:80:DA:FC:ED:04:C6:A5:86:74:81:F3:96:5E:B8:E1:2A:CC
            X509v3 Authority Key Identifier:
                keyid:49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3230382e302f32332d3233203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:8c:1d:fb:89:29:12:c7:c0:c3:39:71:3b:76:a2:c0:05:aa:
         40:e3:49:a3:78:02:1b:94:48:11:7f:7e:8b:c3:5a:8c:7a:71:
         7c:65:b8:da:3f:47:11:4e:b6:89:30:80:0c:ba:0b:7f:39:fb:
         ae:8d:aa:41:17:de:c3:66:8a:dd:1c:92:e2:00:8f:30:e1:71:
         c8:96:0b:78:83:53:9d:9d:b6:e1:90:fd:a8:2b:f5:19:07:bf:
         ab:1b:b7:1e:b5:09:53:07:cc:cd:65:f3:96:c3:d8:2d:16:b7:
         2e:be:b2:53:25:87:aa:fc:5e:f8:d4:2a:82:15:0e:51:87:8d:
         cb:e7:ed:cd:cf:4d:05:eb:ed:d1:7f:54:71:3c:1d:3c:99:e0:
         5f:87:24:d1:10:9a:92:06:0d:c8:2a:c8:cc:46:ce:af:22:fd:
         8e:26:1c:5b:0e:8e:a7:87:9d:02:9e:81:62:fe:18:0f:0f:0a:
         71:87:51:f0:b4:57:6a:42:e4:81:b3:6e:81:e8:12:f4:d4:a7:
         38:c1:e3:74:97:69:83:7c:f2:dc:8b:86:25:80:ec:a8:d5:90:
         cc:c5:2e:6e:fb:72:e2:67:45:02:f5:a1:1f:e8:c7:eb:57:2d:
         01:81:5e:5b:51:f6:34:72:3a:f7:3c:b8:ed:6f:db:cf:ed:3b:
         b9:b5:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org