Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/34352e3232372e302e302f32322d3332203d3e2030.roa
File:                     34352e3232372e302e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          D/og2T7EhkuaMw6r/cXQshRh3DCYvq2Dcr62qgEcoCw=
Subject key identifier:   73:92:8F:93:94:2D:67:08:37:DE:59:08:1C:F9:3A:1F:C7:7D:23:F7
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       4AB9E7E0ABD76ADE6C893AF12AEEE61C1AC318FA
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/34352e3232372e302e302f32322d3332203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:56:01 +0000
ROA not before:           Sat 23 Sep 2023 16:51:01 +0000
ROA not after:            Sat 21 Sep 2024 16:56:01 +0000
asID:                     0
IP address blocks:        45.227.0.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b9:e7:e0:ab:d7:6a:de:6c:89:3a:f1:2a:ee:e6:1c:1a:c3:18:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:51:01 2023 GMT
            Not After : Sep 21 16:56:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:50:5c:8f:09:ec:f0:13:93:a1:cc:53:7e:
                    42:a9:c3:fd:52:1b:95:14:98:ed:bc:07:6b:be:55:
                    c9:47:a3:81:a1:54:84:8b:a2:fd:8b:b8:20:b6:3e:
                    f5:d0:cf:1a:3d:94:81:58:f9:fe:ff:1d:cd:60:7c:
                    1f:c7:68:27:2c:ed:90:3d:72:d5:85:f2:8d:a3:de:
                    5d:19:2d:47:d6:d2:d7:13:cd:29:d1:f6:25:49:5f:
                    90:a1:41:29:60:2d:46:ce:91:27:37:48:6c:db:6c:
                    d9:7b:fe:70:96:3d:06:f6:6c:ee:65:5e:64:ed:4e:
                    89:d0:07:5c:3e:45:6a:ed:31:cb:a2:a8:b0:da:7d:
                    0a:7b:bb:6b:e6:18:c7:cb:40:db:e1:70:25:47:17:
                    8a:4e:70:f8:2e:b6:ee:98:49:42:2c:d5:d7:81:0a:
                    5e:b9:3b:63:0c:b4:ea:08:42:b3:87:87:c2:80:f2:
                    7d:2c:2e:d8:db:3c:dc:6e:cb:30:81:ee:79:f7:95:
                    4b:58:f2:8f:a6:2f:cd:47:5f:a4:f2:e3:cc:f4:b9:
                    29:b6:a5:cf:71:a2:d5:04:8b:3e:f0:4e:83:1e:3a:
                    53:1c:c2:f9:25:4b:71:07:bf:b3:18:ae:62:28:04:
                    b7:7c:b2:32:1c:42:da:1c:bf:2f:cd:ff:b2:c5:51:
                    7c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:92:8F:93:94:2D:67:08:37:DE:59:08:1C:F9:3A:1F:C7:7D:23:F7
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/34352e3232372e302e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:7b:1f:e7:a0:39:1f:8b:fd:31:54:b0:a4:e7:4d:71:16:
         6a:ba:96:7b:74:ac:e1:67:af:87:ba:97:49:06:db:26:47:5e:
         42:7a:30:05:c7:b1:55:1e:5e:ec:73:de:8f:b0:27:00:dc:0f:
         29:51:57:31:5c:5f:e4:1b:92:b0:53:1c:c5:f5:ad:54:4a:f9:
         3a:eb:7a:b1:1c:e0:60:e8:39:57:d6:d4:c7:d6:4a:a3:cc:ee:
         08:e0:7f:71:2c:da:7a:c6:77:28:c7:3d:b5:e2:c3:2f:b7:a0:
         79:11:15:13:b3:d7:ad:77:2a:85:cc:82:f7:0b:5f:b8:b4:2e:
         04:a2:2e:0b:3c:f0:cd:9f:8e:93:41:dc:4d:f0:04:f7:5e:0b:
         2c:76:4d:f6:9b:04:e6:e8:7e:ef:cb:c3:1a:92:8e:52:9a:cc:
         9e:94:e6:61:f9:fe:7d:e1:56:22:e9:cc:5e:f5:ba:ea:ff:3f:
         f4:88:8f:26:0a:44:f3:ef:80:4e:06:7a:26:88:de:ee:47:b0:
         9d:84:74:13:a1:28:c3:d8:89:77:91:9d:1e:b3:70:cf:0d:93:
         cd:d2:4f:56:4e:7f:44:3f:12:67:a0:24:0f:88:0d:93:07:f6:
         43:fe:aa:8f:5b:6d:66:16:0b:a4:fe:00:61:21:8b:f4:b9:db:
         f8:42:4d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org