Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/34352e3138382e36382e302f32322d3234203d3e20323639353233.roa
File:                     34352e3138382e36382e302f32322d3234203d3e20323639353233.roa (raw, json)
Hash identifier:          gJ++ThSKgBhva4bsl9J4UFQ4ve1eT9IIx8vszn3X/6s=
Subject key identifier:   A0:9B:05:34:C5:B5:F1:44:AE:27:94:B0:95:AB:88:B4:08:FB:C7:F7
Certificate issuer:       /CN=870C2AD8E67C6E1CC63AAB945280201586BAC84A
Certificate serial:       433102C16CF9233B71FC10E1624D9AF303E3966D
Authority key identifier: 87:0C:2A:D8:E6:7C:6E:1C:C6:3A:AB:94:52:80:20:15:86:BA:C8:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/34352e3138382e36382e302f32322d3234203d3e20323639353233.roa
Signing time:             Thu 28 Mar 2024 19:01:31 +0000
ROA not before:           Thu 28 Mar 2024 18:56:31 +0000
ROA not after:            Thu 27 Mar 2025 19:01:31 +0000
asID:                     269523
IP address blocks:        45.188.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:31:02:c1:6c:f9:23:3b:71:fc:10:e1:62:4d:9a:f3:03:e3:96:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870C2AD8E67C6E1CC63AAB945280201586BAC84A
        Validity
            Not Before: Mar 28 18:56:31 2024 GMT
            Not After : Mar 27 19:01:31 2025 GMT
        Subject: CN=A09B0534C5B5F144AE2794B095AB88B408FBC7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:1a:40:22:91:fe:3b:da:51:ed:4c:c7:0f:
                    67:81:27:cc:97:91:2e:7b:9c:58:b3:d2:b0:79:d7:
                    8a:65:e4:9d:4e:c5:33:8c:84:be:82:ae:e4:18:59:
                    fa:18:ed:d5:54:d3:fe:5c:35:c5:40:ee:89:5c:71:
                    4e:dd:6b:5d:70:b2:73:02:95:28:6d:82:46:3b:b0:
                    a0:0e:b1:55:92:b3:f0:0e:3a:44:61:24:0c:46:a9:
                    0f:db:26:21:f4:78:37:32:6b:da:82:18:f2:b5:c6:
                    33:e8:a4:d2:a7:e4:fe:d6:99:62:50:f1:de:7d:f8:
                    d4:27:42:9b:ed:ed:3e:1e:59:f4:86:8a:0a:c7:6d:
                    61:b8:a1:74:43:82:50:48:ab:0b:b6:02:46:0e:cf:
                    ba:d1:d8:93:86:71:12:17:eb:c0:92:6c:4e:c3:65:
                    39:a4:b4:b0:98:59:c9:75:20:5b:62:6d:88:2a:ea:
                    c7:5e:25:12:8d:3b:46:ca:eb:bb:9e:52:f1:00:b2:
                    b4:7d:b6:4c:c7:c4:47:03:73:61:3a:fc:0c:9e:4b:
                    c9:c0:0f:bb:52:7d:4c:c6:17:0d:58:a4:75:73:b7:
                    db:b4:02:a3:c1:43:0b:69:83:c5:b9:61:dd:eb:40:
                    b5:7a:2b:f7:3c:4a:79:d5:7a:c9:b5:5f:fc:05:f7:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:05:34:C5:B5:F1:44:AE:27:94:B0:95:AB:88:B4:08:FB:C7:F7
            X509v3 Authority Key Identifier:
                keyid:87:0C:2A:D8:E6:7C:6E:1C:C6:3A:AB:94:52:80:20:15:86:BA:C8:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/870C2AD8E67C6E1CC63AAB945280201586BAC84A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/0/34352e3138382e36382e302f32322d3234203d3e20323639353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:ec:48:2e:bd:75:cc:64:81:49:4d:1a:5d:88:4c:e5:57:4b:
         be:7b:ab:84:60:68:1a:ff:fc:9c:ea:9d:89:bd:eb:9e:3c:21:
         e4:94:5a:df:02:87:d2:49:e9:26:cf:bb:f5:4b:d3:b8:90:eb:
         28:9a:fd:b2:97:47:b0:12:c9:ca:23:56:34:9a:c7:04:5c:6b:
         16:2b:15:5a:3a:9b:ad:82:3e:84:d6:53:87:aa:5b:5f:f5:52:
         a2:e8:b6:f6:a4:16:9a:98:e3:c2:c6:6e:ec:3b:bf:4f:85:00:
         bf:6a:8a:ae:68:f5:fe:c0:3c:69:a2:be:59:ee:b6:04:b8:67:
         97:28:04:e5:4c:c0:c8:fe:2c:9a:62:6f:6f:e7:6f:02:28:06:
         45:f4:7f:9d:07:77:bb:38:9d:09:d0:12:48:b7:47:1e:5b:88:
         fa:64:34:a8:06:c8:10:52:92:dc:31:01:67:08:d2:22:93:7e:
         ef:7f:29:ca:e9:3a:9b:ac:ba:6f:f9:b9:a5:d9:a9:2c:a5:6a:
         35:81:6c:4b:08:03:a2:2f:5c:14:c1:2c:c3:f5:74:11:37:62:
         b9:db:7c:2b:f1:51:b4:08:7d:b0:e7:ce:10:57:32:b2:46:e2:
         26:b9:bf:f6:22:5f:2b:74:0c:da:c2:f4:18:89:2d:ef:1b:a0:
         f4:26:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org