Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3131302e302f32332d3233203d3e20323639313836.roa
File:                     34352e3138302e3131302e302f32332d3233203d3e20323639313836.roa (raw, json)
Hash identifier:          GpqWY9VNZhLko4MXyXRtgYGiSNH9MiCnEmdsr9NXrlE=
Subject key identifier:   21:C5:8A:EF:D2:47:3B:2F:EC:5A:57:56:6D:EB:BA:4C:DB:8C:44:9C
Certificate issuer:       /CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
Certificate serial:       327E1C40A911477E48ADACE4355A2A1F67745353
Authority key identifier: D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3131302e302f32332d3233203d3e20323639313836.roa
Signing time:             Thu 20 Jul 2023 15:00:00 +0000
ROA not before:           Thu 20 Jul 2023 14:55:00 +0000
ROA not after:            Thu 18 Jul 2024 15:00:00 +0000
asID:                     269186
IP address blocks:        45.180.110.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7e:1c:40:a9:11:47:7e:48:ad:ac:e4:35:5a:2a:1f:67:74:53:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0998FAE469DED8160607801B7CD43BC61CB0B2E
        Validity
            Not Before: Jul 20 14:55:00 2023 GMT
            Not After : Jul 18 15:00:00 2024 GMT
        Subject: CN=21C58AEFD2473B2FEC5A57566DEBBA4CDB8C449C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:60:60:51:e0:79:f7:e5:40:e6:76:a7:a2:
                    aa:1d:36:f5:a5:14:39:08:6c:8a:12:8b:8a:05:18:
                    2b:63:25:92:db:8a:04:66:2f:aa:3d:eb:5a:bf:4e:
                    9c:06:b0:77:8f:aa:77:8b:0f:29:3f:58:8a:ce:b3:
                    f8:e8:ff:90:f8:62:a8:f4:2d:2f:69:2d:68:f6:f3:
                    cd:19:ed:0a:05:1d:b0:5d:d4:35:38:d0:56:bf:bb:
                    9e:cd:d4:71:84:f7:40:99:fa:b7:a5:6b:7a:d9:d9:
                    88:ae:ad:eb:73:ee:dc:12:a4:38:66:73:16:af:95:
                    67:ae:cb:68:ef:c2:a5:2b:77:e9:58:bc:8b:d4:42:
                    c0:2e:10:4e:eb:b1:9a:57:8a:db:8b:ac:70:92:7f:
                    07:dd:95:06:8e:c4:c8:31:b2:59:75:35:9d:a9:1d:
                    7a:8c:5e:68:9c:cf:68:24:3a:b1:00:76:72:dc:8c:
                    e3:38:6a:02:ff:dd:25:ba:d7:72:6c:3e:11:7f:37:
                    5b:18:66:01:3f:4f:c0:8e:69:22:d2:89:65:ae:df:
                    6b:3c:8e:63:c0:bf:b5:a4:33:86:d7:ab:f4:17:e6:
                    a9:47:ce:86:0c:02:2c:7f:25:e9:7a:94:08:56:46:
                    8b:4a:f9:06:a3:bf:48:c5:35:8c:b2:ee:e1:c3:aa:
                    1d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:8A:EF:D2:47:3B:2F:EC:5A:57:56:6D:EB:BA:4C:DB:8C:44:9C
            X509v3 Authority Key Identifier:
                keyid:D0:99:8F:AE:46:9D:ED:81:60:60:78:01:B7:CD:43:BC:61:CB:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0998FAE469DED8160607801B7CD43BC61CB0B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3131302e302f32332d3233203d3e20323639313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:ca:08:4a:ef:ba:69:7a:28:ed:f4:78:d8:e3:5a:07:6b:fd:
         5b:4f:d5:09:b2:e1:73:cd:35:86:89:c4:23:94:d0:5b:e9:b7:
         64:df:af:64:58:c9:99:1c:87:3a:df:f1:bc:c0:d5:36:31:c0:
         ff:4c:9f:18:58:9a:a0:83:f5:00:27:34:c2:aa:af:84:49:40:
         16:ff:01:a2:5e:9e:12:28:e3:33:5f:da:e3:8b:83:84:e5:c0:
         a8:de:ce:a0:af:5c:a0:41:31:5e:6c:38:a8:26:bf:df:9a:08:
         6f:b4:6f:ad:fc:bf:71:33:27:bb:52:ed:49:82:ce:d8:d2:43:
         fb:96:ff:a2:ce:41:a4:bb:95:e0:34:48:98:3d:8e:17:95:af:
         f6:c4:32:c7:19:99:41:52:5e:7e:d6:de:61:b9:3c:99:02:c6:
         ad:2f:3f:d6:22:b3:01:bc:0b:82:db:9e:00:6a:87:52:9a:f6:
         ca:d3:99:62:fd:84:8b:90:87:95:ca:b0:1f:af:e1:61:6e:a3:
         b0:de:0a:ad:19:0b:55:29:53:b9:b9:86:a4:08:0d:d3:7e:48:
         25:cb:67:5a:3d:9c:0a:1d:19:2f:a3:98:dd:98:2c:ee:34:44:
         52:a0:16:1b:24:47:b5:9f:66:85:72:35:17:36:82:85:23:68:
         d7:a7:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org