Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32332d3233203d3e20323639313836.roa
File:                     34352e3138302e3130382e302f32332d3233203d3e20323639313836.roa (raw, json)
Hash identifier:          XyQD9L2AKVSs8tM/QmOuahBCY7G6ozAOmB5D/j2DS/E=
Subject key identifier:   4C:F4:6A:15:2E:4A:90:28:83:47:28:AD:28:E6:11:80:C6:32:0E:DA
Certificate issuer:       /CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
Certificate serial:       7DEFAC522D670653110913ED968726FABD78DAE0
Authority key identifier: D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32332d3233203d3e20323639313836.roa
Signing time:             Thu 20 Jul 2023 15:00:00 +0000
ROA not before:           Thu 20 Jul 2023 14:55:00 +0000
ROA not after:            Thu 18 Jul 2024 15:00:00 +0000
asID:                     269186
IP address blocks:        45.180.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ef:ac:52:2d:67:06:53:11:09:13:ed:96:87:26:fa:bd:78:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
        Validity
            Not Before: Jul 20 14:55:00 2023 GMT
            Not After : Jul 18 15:00:00 2024 GMT
        Subject: CN=4CF46A152E4A9028834728AD28E61180C6320EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:d6:b0:2f:c3:b4:82:d5:32:62:26:b9:2d:
                    50:a0:70:6b:7f:6c:e1:0e:7b:03:08:49:e0:bb:9a:
                    7e:11:93:7d:7f:5e:d1:1c:f5:b3:ea:1d:dd:67:e9:
                    5f:fd:81:cb:13:0a:9e:1e:c1:b2:3c:51:2c:a3:01:
                    f3:d0:0e:00:b4:cb:62:14:8d:04:55:0b:8e:4e:be:
                    13:a6:57:be:c4:46:18:52:60:1c:ad:ea:96:b4:aa:
                    a2:b1:8f:82:8d:e1:53:27:ca:61:0a:7e:67:9c:ab:
                    39:bd:4e:f2:e0:15:c0:ec:f3:f8:a5:d5:35:b1:ef:
                    67:9d:dd:ec:75:bb:0e:d3:8e:95:1d:fd:d0:8b:d1:
                    63:f1:ab:de:ec:e1:79:58:cb:85:11:52:b7:9b:bf:
                    48:2c:12:51:9e:e1:51:0a:ca:bc:eb:aa:3e:96:ce:
                    42:f3:9d:e3:87:53:fa:2e:8e:7f:bd:3e:6b:bb:0e:
                    dc:12:0a:9d:8c:1d:92:1b:07:5d:5a:8b:18:5c:7c:
                    7e:48:e6:f2:5f:91:f0:97:03:0b:a9:db:e5:b4:dd:
                    dd:af:18:b0:5c:62:73:1c:a3:06:d2:9d:a6:ea:10:
                    78:ae:55:2d:52:70:8a:c8:9b:bd:1b:36:7d:02:4f:
                    4f:f2:a3:f8:6f:62:96:ed:f5:06:db:c8:ba:71:01:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F4:6A:15:2E:4A:90:28:83:47:28:AD:28:E6:11:80:C6:32:0E:DA
            X509v3 Authority Key Identifier:
                keyid:D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32332d3233203d3e20323639313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:47:10:94:4d:9e:c0:3a:e2:94:ab:f6:04:47:74:35:fd:31:
         f5:ad:17:71:4a:f0:37:be:9d:21:35:3e:27:8f:e5:0e:0e:29:
         ea:54:94:c8:45:b0:ac:94:19:a8:38:4c:37:b9:ea:ac:b1:1e:
         4a:93:26:ea:5a:ff:af:61:2b:c0:99:95:f0:da:41:54:f1:be:
         8e:6f:0f:00:57:6b:10:db:c1:bc:e0:45:02:5e:f9:6e:68:01:
         18:ae:40:ad:e2:99:4c:93:e7:4f:ba:5f:7b:12:7a:9e:22:50:
         95:1f:a4:4e:ff:57:88:a9:9f:a8:92:1f:6d:a8:93:d3:d2:f8:
         6d:d1:6a:80:b4:c4:56:6f:d1:5e:e8:0d:ca:93:bc:b0:e5:fc:
         f6:4b:6b:c5:3a:ac:30:f7:93:46:c8:52:80:f4:81:58:5f:bd:
         1f:06:4b:f7:09:bc:af:3f:ee:c3:ed:e2:bf:e9:a0:1a:3f:11:
         4a:a3:0b:c6:d9:39:94:9f:d0:ef:a5:3e:ad:25:66:43:1a:5e:
         b5:76:d5:b9:5c:b6:32:8f:cd:03:62:d5:92:18:77:64:d2:7d:
         2a:8e:92:31:81:e0:60:08:a6:aa:28:87:77:45:40:11:4e:7e:
         d3:1c:32:cc:fb:31:de:81:83:81:11:95:6d:7a:b8:be:ec:ee:
         2e:34:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org