Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/34352e3138312e3134302e302f32332d3233203d3e20323639313837.roa
File:                     34352e3138312e3134302e302f32332d3233203d3e20323639313837.roa (raw, json)
Hash identifier:          8/bZwVFRdpB2IeCMIU4fwwjVQrBBDgBm69UooOZI0h8=
Subject key identifier:   34:9E:49:DD:A7:07:51:E9:BF:DB:04:BC:1D:F1:94:9B:EA:44:EE:59
Certificate issuer:       /CN=0FDB72B67FE4DF33626D853A654F9E3393BEEF54
Certificate serial:       5313AC915B864CE1F910C59F60B39A83F1002F79
Authority key identifier: 0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/34352e3138312e3134302e302f32332d3233203d3e20323639313837.roa
Signing time:             Wed 10 Jan 2024 15:08:58 +0000
ROA not before:           Wed 10 Jan 2024 15:03:58 +0000
ROA not after:            Wed 08 Jan 2025 15:08:58 +0000
asID:                     269187
IP address blocks:        45.181.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:13:ac:91:5b:86:4c:e1:f9:10:c5:9f:60:b3:9a:83:f1:00:2f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FDB72B67FE4DF33626D853A654F9E3393BEEF54
        Validity
            Not Before: Jan 10 15:03:58 2024 GMT
            Not After : Jan  8 15:08:58 2025 GMT
        Subject: CN=349E49DDA70751E9BFDB04BC1DF1949BEA44EE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:15:c2:d8:07:eb:a9:ce:23:5c:c1:fb:8d:
                    38:09:9b:b3:fe:a3:96:3d:11:8a:9d:ae:da:5b:ea:
                    0c:9d:ea:02:9f:5b:35:3b:61:56:50:cb:e2:77:8e:
                    ba:04:12:30:93:80:1b:cf:b5:6d:85:8b:5b:ab:53:
                    89:6e:b9:a8:bb:8a:78:d6:1d:94:d5:21:26:0f:a8:
                    0c:26:06:70:f9:e8:68:29:00:8d:ce:fd:d5:96:d3:
                    d7:56:6e:15:b1:cc:86:bd:61:db:ee:f2:ba:5f:ba:
                    ef:57:b8:69:d1:b0:2e:4a:57:e6:68:6b:f9:88:f7:
                    9b:e9:07:cd:ff:6a:41:52:0b:b6:39:0c:e5:10:4a:
                    2c:08:b7:b9:96:b2:5b:75:eb:b0:c9:77:c3:08:58:
                    30:61:b9:8c:65:30:66:9f:21:c5:02:ba:43:5c:19:
                    58:32:b5:73:0d:89:8f:7f:b3:95:17:9e:2e:53:c1:
                    17:f4:7f:c8:1e:36:d1:1c:5b:8c:1a:0c:75:ba:95:
                    cd:ba:99:b3:5d:45:63:61:2c:6b:e8:78:70:bc:dd:
                    65:5e:de:60:ef:82:2e:48:1e:0a:cd:24:f0:6a:1a:
                    a8:ed:d4:70:56:1a:01:44:2f:f1:12:27:8e:55:8e:
                    2b:1b:86:43:b9:3b:7c:f0:1e:e0:92:50:62:6f:b4:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9E:49:DD:A7:07:51:E9:BF:DB:04:BC:1D:F1:94:9B:EA:44:EE:59
            X509v3 Authority Key Identifier:
                keyid:0F:DB:72:B6:7F:E4:DF:33:62:6D:85:3A:65:4F:9E:33:93:BE:EF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FDB72B67FE4DF33626D853A654F9E3393BEEF54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVmmP1zJWMspCJaL4aACFUFqMe1NTLiWaKe2gjKL7TQv/0/34352e3138312e3134302e302f32332d3233203d3e20323639313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:8f:9b:15:3a:0b:3f:28:3d:fe:04:5f:97:b1:b5:ca:27:
         70:06:9a:69:70:af:8d:a1:44:0d:dd:e3:f3:e3:0f:71:d0:ae:
         f9:85:db:25:c0:db:45:10:ad:e1:8d:55:46:25:3c:83:36:66:
         63:b3:0b:f0:00:0d:8e:e6:2e:95:53:ae:3f:d5:46:53:ad:63:
         3a:8c:b6:0a:f3:6e:f8:eb:f5:4f:b8:dc:36:9c:70:f9:c0:e8:
         32:ba:d4:d8:bd:86:ff:3e:3d:0e:7e:03:65:24:91:ba:95:73:
         df:25:87:d6:e0:b8:73:d5:df:19:20:6a:bc:8c:3a:00:bd:a9:
         ec:02:ef:b3:94:b9:f4:55:43:e6:f3:f4:b2:8c:17:08:e3:9b:
         fa:7d:08:a0:e1:99:a2:f2:a8:68:20:15:84:2a:1a:06:5b:35:
         62:c6:3c:5a:e4:41:bc:26:be:15:ca:37:e0:19:d9:31:3d:fb:
         52:9e:4c:46:0c:1c:84:13:cf:65:f6:07:45:35:0e:1f:38:f3:
         7d:a3:f6:d0:6b:0a:23:20:39:9a:ed:8a:d3:26:76:c3:48:00:
         81:28:38:f0:a2:84:98:b2:ff:de:7f:d6:8a:05:31:db:ab:cb:
         30:03:49:78:ce:91:9f:11:7a:bd:cc:91:03:65:80:c4:01:e5:
         6b:c3:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org