Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230362e302f32342d3234203d3e20323639343937.roa
File:                     34352e3138372e3230362e302f32342d3234203d3e20323639343937.roa (raw, json)
Hash identifier:          3E++ZBzNTMKFntmh3HKamymIWq+TC0TlEm1I0N4FlGs=
Subject key identifier:   B0:3A:87:24:F9:20:C7:BF:C3:EA:13:35:97:95:5D:59:27:99:78:1B
Certificate issuer:       /CN=E691ADC5AA4866BEF7E3D323CE21480B3D814BD2
Certificate serial:       073B1F85B6CAB47BC2BA06C962686FC758B6A038
Authority key identifier: E6:91:AD:C5:AA:48:66:BE:F7:E3:D3:23:CE:21:48:0B:3D:81:4B:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E691ADC5AA4866BEF7E3D323CE21480B3D814BD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230362e302f32342d3234203d3e20323639343937.roa
Signing time:             Wed 23 Aug 2023 14:05:59 +0000
ROA not before:           Wed 23 Aug 2023 14:00:59 +0000
ROA not after:            Fri 23 Aug 2024 14:05:59 +0000
asID:                     269497
IP address blocks:        45.187.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3b:1f:85:b6:ca:b4:7b:c2:ba:06:c9:62:68:6f:c7:58:b6:a0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E691ADC5AA4866BEF7E3D323CE21480B3D814BD2
        Validity
            Not Before: Aug 23 14:00:59 2023 GMT
            Not After : Aug 23 14:05:59 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:f2:eb:3e:48:f0:84:ab:72:9c:31:38:7d:
                    db:dd:53:00:88:3e:d4:54:e4:a8:72:8a:49:16:fd:
                    86:6b:5d:98:52:75:a4:64:b1:ca:b1:e3:f6:c8:c9:
                    a4:45:f9:ff:77:21:30:db:94:30:16:c7:a9:34:d2:
                    6c:57:20:a0:7b:33:07:7c:57:ca:4e:59:24:09:16:
                    4c:59:84:25:27:21:9c:42:7b:91:d8:9e:b7:5b:44:
                    ce:72:e6:ec:0c:e9:9e:f5:a2:09:36:3b:37:87:fb:
                    4f:e0:4c:d1:98:b1:86:22:f7:11:db:65:a9:ec:f2:
                    d9:90:db:77:10:6b:21:0c:33:23:6a:7f:b1:7f:05:
                    04:32:02:c9:42:69:59:d5:49:89:b9:8c:75:91:18:
                    46:ea:80:db:80:19:04:3d:3e:27:e0:86:0d:4f:2e:
                    b8:0f:e4:6f:6b:67:3a:c1:20:43:8b:56:2d:de:4a:
                    db:90:f9:51:05:7c:80:4f:fe:45:56:5c:8b:36:2c:
                    73:fe:88:f2:a1:10:28:56:cd:52:2a:52:87:f3:55:
                    2c:05:1b:b5:e0:53:1d:b6:87:4d:2f:ff:6d:8c:89:
                    eb:c9:a9:82:d8:fe:30:9d:ef:e7:fd:67:d0:24:a7:
                    77:82:9a:36:9f:08:85:51:9d:a5:e6:cd:56:bd:30:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3A:87:24:F9:20:C7:BF:C3:EA:13:35:97:95:5D:59:27:99:78:1B
            X509v3 Authority Key Identifier:
                keyid:E6:91:AD:C5:AA:48:66:BE:F7:E3:D3:23:CE:21:48:0B:3D:81:4B:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/E691ADC5AA4866BEF7E3D323CE21480B3D814BD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E691ADC5AA4866BEF7E3D323CE21480B3D814BD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230362e302f32342d3234203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:58:69:20:b7:4b:9c:18:94:06:9f:0a:a5:17:5b:0e:cf:f8:
         a9:13:ef:86:7d:a2:d4:fa:fd:65:70:7a:45:f1:91:a5:2e:8f:
         5d:14:99:ea:96:40:ae:03:13:75:c3:f6:72:d2:c6:26:b1:0a:
         3e:23:d0:3f:39:99:c4:bc:b8:15:90:cd:4c:4c:ea:6d:18:4f:
         05:7e:26:b7:ac:99:44:ba:da:a1:f9:15:b0:7f:92:3a:fd:28:
         6e:45:cc:ef:e3:a7:cb:f2:2e:a2:6e:46:ff:ff:33:d7:24:7c:
         a9:23:bf:bb:b5:f5:9c:d8:34:e5:89:23:f3:d4:df:c5:78:1f:
         3a:ef:12:d5:53:f7:a9:be:ee:ad:f5:ac:39:1e:bc:cd:8c:c7:
         d3:5a:01:4d:da:2b:8b:c1:12:5b:05:21:c2:15:2e:9c:0c:19:
         96:6b:d6:93:68:c0:d0:47:a6:bd:8e:82:40:65:6a:21:a5:d3:
         33:76:74:36:5e:37:13:98:7e:f6:0b:09:02:5a:ac:79:2f:c3:
         06:d8:d6:5a:1d:af:f6:a6:c3:ec:e4:fc:8d:39:98:1c:03:00:
         94:80:a4:89:87:55:23:9b:5f:28:43:fa:c0:6d:e7:d5:11:6d:
         b0:aa:b8:4c:7b:f6:2e:e5:2b:8c:45:72:40:50:b2:7a:0a:13:
         de:99:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org