Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3231302e302f32332d3233203d3e20323636303836.roa
File:                     34352e342e3231302e302f32332d3233203d3e20323636303836.roa (raw, json)
Hash identifier:          gHzp7gDA6e0nc1BUVVOZKcShiOIivd6X7BoIzkePqUM=
Subject key identifier:   71:B1:30:29:40:DD:27:13:00:2C:2D:C0:A0:C1:A4:81:7D:4E:BB:AB
Certificate issuer:       /CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
Certificate serial:       7E8D544B4A86625C87EB6272559F69D3820C8833
Authority key identifier: 49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3231302e302f32332d3233203d3e20323636303836.roa
Signing time:             Thu 21 Jul 2022 17:18:40 +0000
ROA not before:           Thu 21 Jul 2022 17:13:40 +0000
ROA not after:            Thu 20 Jul 2023 17:18:40 +0000
asID:                     266086
IP address blocks:        45.4.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8d:54:4b:4a:86:62:5c:87:eb:62:72:55:9f:69:d3:82:0c:88:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
        Validity
            Not Before: Jul 21 17:13:40 2022 GMT
            Not After : Jul 20 17:18:40 2023 GMT
        Subject: CN=71B1302940DD2713002C2DC0A0C1A4817D4EBBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:4a:96:a9:31:4f:2d:d6:05:ba:7d:30:13:ca:
                    f9:78:ed:36:4f:a2:89:75:f0:1d:ce:88:c0:9d:ef:
                    bd:7a:7a:bd:64:d6:82:4e:e3:6b:a9:2a:3e:5e:6d:
                    b9:e7:f4:9c:c6:ff:9b:d7:48:49:52:5a:11:9f:d5:
                    3c:0b:30:93:29:92:2d:72:9f:1f:fe:1a:eb:aa:ea:
                    58:11:22:b6:9e:25:5e:f6:33:90:7c:67:63:91:1e:
                    5e:48:4a:a9:31:0b:8e:61:fc:38:31:f0:3e:77:2f:
                    f0:b1:d6:37:4d:60:59:07:54:85:57:cb:c6:b2:e2:
                    f2:a9:5a:36:7b:26:0c:fa:38:4a:c3:5c:4d:d1:33:
                    98:1e:75:f3:c8:15:d5:c4:53:0e:aa:d2:b2:6e:bc:
                    ac:d0:9d:89:a3:26:bd:74:bd:0d:71:99:7e:fa:28:
                    fc:99:8c:b6:f2:ef:96:28:9d:9a:ac:d3:bd:69:9c:
                    f3:6e:43:db:88:73:ff:27:dc:d8:0a:d8:8e:7a:c0:
                    e0:4d:30:c8:4e:e5:f8:3f:ec:cb:3a:5d:dc:94:ed:
                    c1:b3:99:a8:63:67:8d:af:d4:8b:40:4f:02:d7:f4:
                    f3:95:32:96:64:32:83:c0:c3:5c:de:27:11:78:10:
                    59:da:99:74:eb:f3:72:19:1a:67:35:1e:3e:93:1f:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B1:30:29:40:DD:27:13:00:2C:2D:C0:A0:C1:A4:81:7D:4E:BB:AB
            X509v3 Authority Key Identifier:
                keyid:49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/34352e342e3231302e302f32332d3233203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:e1:47:4c:ea:17:a1:a3:d5:57:e9:f9:14:3e:79:d2:4a:6e:
         32:d2:a9:d9:7e:3b:d5:81:0e:71:94:87:31:a8:cd:a7:d5:b9:
         f4:a5:78:6c:29:66:03:62:96:3c:5d:b6:c8:9d:ba:06:92:d0:
         23:9a:4e:4d:77:0e:4c:23:93:c7:56:01:f9:db:2d:51:de:e5:
         ae:4f:ef:32:0b:59:82:f7:be:d6:0d:41:4d:73:87:e1:7b:a6:
         54:a8:e6:02:6a:1a:2b:e9:a6:a7:96:6d:00:50:bb:97:49:97:
         ce:d1:7b:03:14:94:32:6a:6e:21:5b:f5:aa:93:0a:16:b9:02:
         5b:e6:03:fd:fa:dc:50:52:ee:93:c2:0e:88:e4:70:ed:b7:37:
         88:70:b5:62:0d:23:5a:0b:3e:57:f6:ba:d6:ee:17:96:be:f9:
         e4:c7:69:1a:d2:4a:06:56:d9:51:8d:96:b4:24:7b:5d:f7:ee:
         e2:7a:2d:2f:a5:58:9d:20:aa:ce:58:d1:c6:2c:cf:1e:4d:5c:
         28:67:dd:8e:4b:db:2f:b4:cd:08:bc:44:96:f2:e1:c0:e0:ef:
         f7:4d:51:69:f7:ac:71:e8:9e:8f:17:12:48:44:d3:07:c7:46:
         4a:ec:0b:6e:54:bb:83:dd:45:78:9e:de:a0:c6:1e:b8:5f:36:
         17:7f:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org