Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134302e302f32322d3232203d3e20323639353332.roa
File:                     34352e3138382e3134302e302f32322d3232203d3e20323639353332.roa (raw, json)
Hash identifier:          avssI2A10MKNhSXOrqknTVhR7O01t0vB6KfAg7KAdGY=
Subject key identifier:   30:7F:AE:AC:00:EC:58:D6:D2:8D:90:42:52:E5:7A:99:48:1A:1E:3A
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       522A978DD26AE470FF46C807982CF041FD98697A
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134302e302f32322d3232203d3e20323639353332.roa
Signing time:             Sat 12 Aug 2023 21:00:00 +0000
ROA not before:           Sat 12 Aug 2023 20:55:00 +0000
ROA not after:            Sat 10 Aug 2024 21:00:00 +0000
asID:                     269532
IP address blocks:        45.188.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2a:97:8d:d2:6a:e4:70:ff:46:c8:07:98:2c:f0:41:fd:98:69:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Aug 12 20:55:00 2023 GMT
            Not After : Aug 10 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:9c:a5:ae:ca:ac:fb:3f:a4:02:b2:e9:91:
                    75:c4:f6:f0:34:71:26:91:6f:6d:a7:df:2d:41:9e:
                    ba:8f:59:e0:ea:34:4b:d8:66:0b:c2:79:65:1d:20:
                    10:eb:31:77:c3:30:df:52:24:c1:6b:69:82:c8:9b:
                    f3:89:96:75:73:5f:fd:ed:82:c7:ef:98:dd:e9:92:
                    f0:e7:c6:2e:a0:a7:06:60:16:2a:b3:24:c7:5e:8c:
                    02:6e:e4:dd:c1:52:e7:b2:b1:98:aa:ee:c3:c9:79:
                    c7:30:13:8c:59:b7:f5:df:bc:76:bc:02:dc:1a:79:
                    d8:f8:94:19:ef:35:97:fb:20:e1:bd:6c:9a:e1:e8:
                    6d:4f:ce:42:95:c3:c0:bf:b9:91:c0:4a:c0:3e:4b:
                    a2:dc:f9:35:34:21:50:f1:35:a6:ca:91:d4:3e:37:
                    2f:78:2b:52:9c:b0:50:45:be:43:cd:25:1a:3f:ad:
                    25:f9:72:59:cb:f2:e4:02:ef:2e:d7:5b:36:af:15:
                    0a:78:5f:d3:db:64:31:43:a6:0f:40:55:00:2c:f9:
                    4e:f3:70:9c:e2:6d:5f:35:ff:16:66:40:8c:f4:ff:
                    aa:00:fe:1b:d2:c2:6a:b2:81:92:46:12:2e:3f:1e:
                    c8:20:8b:a0:5b:ea:c2:8d:09:96:39:9d:36:de:b5:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7F:AE:AC:00:EC:58:D6:D2:8D:90:42:52:E5:7A:99:48:1A:1E:3A
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/34352e3138382e3134302e302f32322d3232203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:ce:16:b0:1d:9e:01:0a:b0:c4:45:9f:cc:3b:a7:1a:18:93:
         1c:83:87:f6:fc:0f:59:e8:88:f9:53:40:7d:b9:fe:50:94:86:
         79:10:14:fb:fb:23:e2:a8:27:9a:8b:da:a4:fd:d8:37:a3:89:
         fd:67:70:02:01:35:c8:5d:2f:2c:94:fb:d1:9e:e3:95:11:d1:
         f0:b2:6f:42:e5:cb:d8:8b:1c:b2:0e:ce:51:d9:0f:be:fd:1b:
         51:34:0d:e4:79:33:8a:27:ce:d0:1e:e6:67:b3:95:03:0c:ef:
         2e:e4:98:f1:77:7c:b6:8f:f8:00:8b:58:78:53:e1:00:63:44:
         22:71:e3:b1:18:05:7f:94:0d:8d:a4:38:c8:ee:1e:bc:1f:70:
         e8:a3:ab:44:5d:a5:0d:b1:77:5b:56:89:ef:2d:f5:05:8c:91:
         6e:ae:ed:72:8c:a6:ef:39:3e:b5:ab:80:56:ca:14:40:7f:c6:
         08:dc:22:c0:09:b8:48:20:8a:0b:61:05:05:de:ea:79:12:c9:
         59:c1:99:24:31:d5:16:ed:a0:97:af:f2:8e:2f:f8:1f:42:15:
         32:66:5b:11:63:40:58:d7:c4:bb:bc:55:95:73:3c:9e:51:b6:
         da:e5:41:05:75:7a:7c:1d:f6:9b:cf:b5:fd:26:2f:a2:37:2f:
         17:7c:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org