Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa
File:                     34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa (raw, json)
Hash identifier:          QBS17TpH1uRU1WmRoSUaAR4wYuQi+aCk2t04c+xckBk=
Subject key identifier:   CE:CC:0C:8A:75:C9:3B:CC:73:B8:68:CD:2A:70:38:56:3F:18:A8:8A
Certificate issuer:       /CN=DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432
Certificate serial:       028C4D74D6DFFA05D32E7F54D80950279CA2317E
Authority key identifier: DC:B1:AF:2C:54:63:8B:5C:BA:A6:E2:21:C6:2D:B3:A5:EE:43:C4:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa
Signing time:             Wed 06 Sep 2023 21:00:00 +0000
ROA not before:           Wed 06 Sep 2023 20:55:00 +0000
ROA not after:            Wed 04 Sep 2024 21:00:00 +0000
asID:                     269478
IP address blocks:        45.187.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8c:4d:74:d6:df:fa:05:d3:2e:7f:54:d8:09:50:27:9c:a2:31:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432
        Validity
            Not Before: Sep  6 20:55:00 2023 GMT
            Not After : Sep  4 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:88:54:ee:0c:25:b9:02:60:be:d8:25:23:
                    81:2f:11:5b:79:60:c4:06:f1:48:e5:5b:3c:1c:c5:
                    19:c3:a8:6b:b0:56:ff:1f:be:0c:db:58:45:f6:16:
                    20:22:c6:1b:8b:d1:ce:8f:f9:60:14:83:5c:7b:6a:
                    fd:67:a3:e4:22:32:f3:c5:cb:6b:86:03:e3:f9:25:
                    d9:74:e0:73:c4:0b:5f:3f:aa:3d:58:da:0f:59:c8:
                    8c:01:09:5e:3e:40:f2:c4:ab:05:db:75:00:12:84:
                    fe:b8:07:a1:e4:53:68:5b:9c:ea:e4:5d:81:22:0c:
                    2a:9e:32:9e:8f:31:74:93:7c:ee:70:a8:f5:bf:44:
                    ec:f9:dd:49:2d:5c:ad:f2:6b:77:f2:8e:f7:41:15:
                    9f:47:43:a0:ce:0d:20:40:f3:22:08:e4:9a:90:4e:
                    5d:65:50:58:14:fb:8f:67:ea:c9:3c:72:87:e6:1e:
                    40:f2:36:a7:e5:60:a2:0a:6c:93:3b:fe:f7:23:79:
                    06:c1:08:df:f9:62:0b:99:75:c1:e6:f8:0e:6b:b2:
                    da:29:16:75:e9:ed:58:67:b7:93:e0:f1:bc:28:89:
                    f9:cf:68:fd:67:80:2f:bc:95:59:48:2f:43:df:64:
                    15:d9:7f:21:03:4c:14:08:87:f7:c5:ae:9b:67:a6:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CC:0C:8A:75:C9:3B:CC:73:B8:68:CD:2A:70:38:56:3F:18:A8:8A
            X509v3 Authority Key Identifier:
                keyid:DC:B1:AF:2C:54:63:8B:5C:BA:A6:E2:21:C6:2D:B3:A5:EE:43:C4:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCB1AF2C54638B5CBAA6E221C62DB3A5EE43C432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/0/34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:1f:44:54:da:5d:18:c6:f3:fe:e3:41:02:c2:7c:4b:03:
         82:36:ff:e4:6f:70:4a:e3:7a:56:d0:7b:48:ee:7f:b0:d0:50:
         f2:81:54:02:08:bf:a3:d9:66:62:fe:3d:0d:14:92:b3:7d:6a:
         a5:0f:8a:3f:27:ba:35:15:b4:07:c0:b5:71:3a:6b:13:eb:40:
         f8:a2:83:b2:ca:87:c9:89:aa:b2:c4:69:3b:e9:10:c2:04:00:
         c5:c3:56:c9:41:8f:a1:ae:fd:e6:bb:cc:1f:94:be:63:e2:49:
         f7:b4:96:15:0c:aa:5a:91:94:7d:61:c6:2a:a9:ff:fa:3e:88:
         eb:bf:5d:ce:95:af:7b:8a:db:8d:9a:7d:12:8e:4d:9c:f2:51:
         c1:69:9e:18:50:01:0b:50:11:da:fa:14:1a:2b:f6:2c:1e:84:
         c5:44:9f:72:05:55:13:28:65:ac:58:3d:a7:17:01:00:28:68:
         b6:d9:f2:25:87:c9:49:0b:83:42:5f:5e:ed:9e:93:ed:5b:5e:
         fd:1a:b8:5e:6a:54:35:69:96:cf:78:6d:2d:c4:f3:6e:55:60:
         29:ce:30:eb:e4:f6:b2:ef:ac:c3:3a:b7:b0:54:19:ee:00:d8:
         f5:7e:4a:f5:88:5b:23:b5:53:94:9a:84:d5:08:1d:5f:f4:18:
         78:15:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org