Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (raw, json)
Hash identifier:          Mthjf0yvugNq0hIZW743oa/K3f4308nT9ERPbP7XMiw=
Subject key identifier:   42:B4:48:3B:11:65:9B:96:8A:7A:91:54:AD:62:75:DC:70:7F:CE:87
Certificate issuer:       /CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
Certificate serial:       76A9F2EF5BADD0D63ADB286CDEA4E7AF24C9447E
Authority key identifier: 1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
Signing time:             Tue 29 Aug 2023 17:00:00 +0000
ROA not before:           Tue 29 Aug 2023 16:55:00 +0000
ROA not after:            Tue 27 Aug 2024 17:00:00 +0000
asID:                     269014
IP address blocks:        45.176.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a9:f2:ef:5b:ad:d0:d6:3a:db:28:6c:de:a4:e7:af:24:c9:44:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2CEEB680E392B06B20C8DFE93E9B59950D8B02
        Validity
            Not Before: Aug 29 16:55:00 2023 GMT
            Not After : Aug 27 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:36:ef:8f:06:85:4c:d4:f1:d7:68:db:71:
                    f1:68:db:04:97:e2:39:82:f8:a1:36:66:2e:96:86:
                    8f:9c:df:58:fa:07:b8:7e:32:14:d5:46:7b:4b:a9:
                    16:03:5e:4e:e6:1e:04:8a:5b:02:d9:87:cb:49:d7:
                    66:70:73:78:54:de:f9:e5:bb:06:d0:8e:a3:4e:cf:
                    84:7b:08:b8:ec:b9:cc:b5:e3:58:70:b3:9d:aa:30:
                    c9:69:02:0b:bc:1a:9e:98:e9:3e:21:0a:39:40:ff:
                    0e:60:e8:03:eb:56:08:3e:fe:b8:a4:27:55:c5:01:
                    bc:95:35:1e:83:45:b4:76:99:a7:bc:98:a3:fc:3e:
                    47:8b:76:a8:c9:80:e4:eb:a0:69:ad:98:58:62:d7:
                    c3:a5:ed:0b:35:4c:07:14:ea:0d:c4:dc:35:9a:be:
                    c9:4d:94:d9:3c:2e:6e:5c:c5:8b:da:15:55:ce:5a:
                    28:69:75:62:de:4c:de:cc:2e:c6:5f:6d:86:97:3d:
                    13:16:df:69:95:87:74:ff:96:f2:3b:0c:aa:3e:67:
                    4a:08:4f:cc:84:09:90:4c:07:33:57:6a:b2:02:88:
                    3c:fb:bc:75:e3:00:17:91:18:9d:07:d6:58:d5:02:
                    3e:4f:0a:c7:73:6d:52:54:49:0b:a2:8a:0a:d6:b1:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B4:48:3B:11:65:9B:96:8A:7A:91:54:AD:62:75:DC:70:7F:CE:87
            X509v3 Authority Key Identifier:
                keyid:1E:2C:EE:B6:80:E3:92:B0:6B:20:C8:DF:E9:3E:9B:59:95:0D:8B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1E2CEEB680E392B06B20C8DFE93E9B59950D8B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:5b:21:58:b7:25:c6:a6:c1:49:b9:b7:e1:f5:cb:bc:44:1e:
         1a:2d:04:50:ce:0f:d1:08:15:02:8e:27:f6:7e:f2:d6:ac:13:
         61:9f:3c:db:32:68:10:2c:b3:bd:18:2b:ef:a1:d9:c8:03:8a:
         c5:c7:99:3b:07:ec:3e:79:30:7a:d2:09:f3:3b:e0:0e:3f:89:
         ad:20:fb:02:ac:2f:28:05:dc:7b:6a:a2:47:52:e8:33:f8:db:
         57:19:8d:d6:8d:47:80:3a:7b:62:db:d3:e3:1b:54:04:44:68:
         37:b6:2c:db:db:75:0d:c3:cd:7c:f4:f3:98:04:38:e8:07:47:
         65:83:f6:1b:63:f0:34:6b:0d:3b:bd:43:04:8d:9b:91:56:75:
         19:f2:6a:43:b3:87:ee:9f:3d:44:cf:99:c5:80:bc:cd:6a:80:
         d4:85:4c:04:96:f5:99:a8:25:aa:43:be:c2:ac:8c:9f:2a:3a:
         65:11:5b:c0:ab:db:d3:ce:93:8d:65:ba:6f:4f:eb:62:43:42:
         e3:4b:c1:58:23:01:36:f4:3a:22:c1:09:83:52:c7:35:26:66:
         1f:be:ff:fa:e3:ac:a6:8b:fb:fd:36:3e:14:49:3b:3e:7b:b6:
         e2:4a:9c:71:d3:e3:0f:86:e3:79:ba:d2:0f:bb:14:3d:1a:29:
         14:3a:f8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org