Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa
File:                     34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa (raw, json)
Hash identifier:          ZHfOmX6P9KDcw1qNuuCb456/MY7HshfitichYD8+iyg=
Subject key identifier:   DF:7E:19:7E:E0:86:42:2C:2E:EB:34:22:B9:B3:76:D8:1F:B0:7D:A2
Certificate issuer:       /CN=FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F
Certificate serial:       025177CDC53B01815E9EFBA8887BA64FC11E7FD5
Authority key identifier: FA:14:32:20:D3:E1:BA:51:4C:D2:CB:C4:E5:78:6E:02:66:B8:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa
Signing time:             Thu 11 Apr 2024 20:40:35 +0000
ROA not before:           Thu 11 Apr 2024 20:35:35 +0000
ROA not after:            Thu 10 Apr 2025 20:40:35 +0000
asID:                     269497
IP address blocks:        45.187.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:51:77:cd:c5:3b:01:81:5e:9e:fb:a8:88:7b:a6:4f:c1:1e:7f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F
        Validity
            Not Before: Apr 11 20:35:35 2024 GMT
            Not After : Apr 10 20:40:35 2025 GMT
        Subject: CN=3082010A0282010100CC3149A20896858F373220A46702164498496B18100BECD2FE1B9A16F7926B800B26349E2DDCA653FD24DDAC52C852A14A645A1BE3B84246E61E427AAB4AAF68BE139D01B4E688A0C438CA12717305F1E849C0B24B938398638B9310F3FD01184E35B963D1C38350C786277CAACBC4A2BF58D160A831370BA13511E3BCB6B56CEF9FE2DB6E798A64026163FC4CE38B0DCF5838C77F47A6523E9307BFE2F7B51426329DBD2243EE418EB9234338EBD93EA0F5D92732218B420B301984C88B51F1F722603483B16704D3A34C98611ABB5BA6A7DEE6CF4199D211DB4382ADF371EF26336AFBF44213A52253BCF37BDC7223BC4AC559486FEAFDEE97ECACF1F45D5B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:49:a2:08:96:85:8f:37:32:20:a4:67:02:
                    16:44:98:49:6b:18:10:0b:ec:d2:fe:1b:9a:16:f7:
                    92:6b:80:0b:26:34:9e:2d:dc:a6:53:fd:24:dd:ac:
                    52:c8:52:a1:4a:64:5a:1b:e3:b8:42:46:e6:1e:42:
                    7a:ab:4a:af:68:be:13:9d:01:b4:e6:88:a0:c4:38:
                    ca:12:71:73:05:f1:e8:49:c0:b2:4b:93:83:98:63:
                    8b:93:10:f3:fd:01:18:4e:35:b9:63:d1:c3:83:50:
                    c7:86:27:7c:aa:cb:c4:a2:bf:58:d1:60:a8:31:37:
                    0b:a1:35:11:e3:bc:b6:b5:6c:ef:9f:e2:db:6e:79:
                    8a:64:02:61:63:fc:4c:e3:8b:0d:cf:58:38:c7:7f:
                    47:a6:52:3e:93:07:bf:e2:f7:b5:14:26:32:9d:bd:
                    22:43:ee:41:8e:b9:23:43:38:eb:d9:3e:a0:f5:d9:
                    27:32:21:8b:42:0b:30:19:84:c8:8b:51:f1:f7:22:
                    60:34:83:b1:67:04:d3:a3:4c:98:61:1a:bb:5b:a6:
                    a7:de:e6:cf:41:99:d2:11:db:43:82:ad:f3:71:ef:
                    26:33:6a:fb:f4:42:13:a5:22:53:bc:f3:7b:dc:72:
                    23:bc:4a:c5:59:48:6f:ea:fd:ee:97:ec:ac:f1:f4:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:19:7E:E0:86:42:2C:2E:EB:34:22:B9:B3:76:D8:1F:B0:7D:A2
            X509v3 Authority Key Identifier:
                keyid:FA:14:32:20:D3:E1:BA:51:4C:D2:CB:C4:E5:78:6E:02:66:B8:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA143220D3E1BA514CD2CBC4E5786E0266B8BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/1/34352e3138372e3230342e302f32322d3234203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:b7:c9:6b:66:60:5e:95:86:92:3e:60:e9:96:84:f5:b6:08:
         7b:80:20:93:60:7a:12:0a:5f:6c:b5:da:fd:1f:73:b9:20:9f:
         20:b6:73:39:24:59:97:20:42:55:58:26:93:01:bc:a3:53:e1:
         c2:11:0c:55:74:5e:d9:d2:a6:6d:8a:1b:d1:79:ad:33:b6:1f:
         16:70:b8:63:8c:92:2a:0f:48:5f:ce:d1:02:8c:8a:ee:29:ff:
         15:85:ab:de:e3:b1:0f:a7:68:0d:8b:98:91:01:1f:fd:91:e0:
         20:5f:91:68:bf:54:94:ef:f8:a6:be:32:a2:d2:7f:ae:a3:ad:
         bb:c7:50:00:0c:86:cd:fb:dc:45:3d:72:0a:3d:cd:a2:0a:14:
         d7:cc:ad:37:c5:03:d5:44:73:81:20:2b:4f:0a:e9:78:7a:e5:
         8c:f4:f8:4a:25:6c:4e:36:e0:f9:b1:63:4d:c5:5f:66:45:c8:
         00:f8:1a:bf:5a:f8:ce:d4:5f:8a:c0:05:cf:0c:b6:e8:89:e5:
         f9:fe:ad:03:ae:7c:6a:90:a8:5a:a1:91:13:89:f4:a1:c7:e3:
         53:ac:ac:3d:72:d4:5b:f7:bc:10:f4:30:e4:e8:72:b4:97:d1:
         79:15:02:10:b1:5d:8d:eb:1f:08:7a:61:8d:4b:a8:ea:cc:0e:
         56:1a:37:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org