Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/1/34352e3138392e34342e302f32322d3234203d3e20323639353737.roa
File:                     34352e3138392e34342e302f32322d3234203d3e20323639353737.roa (raw, json)
Hash identifier:          0SdfmDNwXLvL2BYZPBRee7Yz+nV0GLUh4pEGF91zyJE=
Subject key identifier:   E3:61:B3:DF:59:FE:BF:52:79:E7:A8:34:D5:BA:C9:D0:A7:39:F3:8F
Certificate issuer:       /CN=2053E115997942246CCF12C116A7D7EAF3D64BCD
Certificate serial:       6E5473158DB7EB069BBF9E90C7353DECCDD8F96C
Authority key identifier: 20:53:E1:15:99:79:42:24:6C:CF:12:C1:16:A7:D7:EA:F3:D6:4B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2053E115997942246CCF12C116A7D7EAF3D64BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/1/34352e3138392e34342e302f32322d3234203d3e20323639353737.roa
Signing time:             Thu 04 Apr 2024 10:46:53 +0000
ROA not before:           Thu 04 Apr 2024 10:41:53 +0000
ROA not after:            Thu 03 Apr 2025 10:46:53 +0000
asID:                     269577
IP address blocks:        45.189.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:54:73:15:8d:b7:eb:06:9b:bf:9e:90:c7:35:3d:ec:cd:d8:f9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2053E115997942246CCF12C116A7D7EAF3D64BCD
        Validity
            Not Before: Apr  4 10:41:53 2024 GMT
            Not After : Apr  3 10:46:53 2025 GMT
        Subject: CN=E361B3DF59FEBF5279E7A834D5BAC9D0A739F38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0a:3b:ad:63:3d:5a:6c:9f:f1:8c:34:bf:a0:
                    58:86:a5:0f:3f:e5:77:36:2b:4d:72:35:07:68:2f:
                    cb:34:94:5d:a6:78:20:10:55:4d:76:aa:bd:88:a9:
                    81:ba:dd:0e:69:84:ef:39:94:49:ed:9a:25:a4:e9:
                    55:aa:59:ff:44:be:23:63:1b:bc:a6:44:48:cd:89:
                    cf:4c:4b:26:de:8e:ad:ba:78:5e:bf:55:2a:8a:f6:
                    d2:d8:cc:c4:eb:49:ce:cc:da:36:4f:31:1d:af:ed:
                    a5:74:5b:cb:38:a3:3f:47:9d:4f:00:bf:2d:68:94:
                    af:07:b6:c9:bd:de:41:bf:cf:27:5f:a8:fa:ad:94:
                    7e:0e:c0:21:05:bb:f3:28:ee:a5:44:a4:f3:b9:82:
                    d3:ce:8b:9e:24:18:b8:7d:c1:5b:40:b0:e2:94:8b:
                    32:a0:7b:c9:11:1a:b9:57:dc:f4:02:f2:2e:b3:55:
                    0b:be:d8:f0:5d:a1:16:ef:54:9b:bf:32:43:be:54:
                    80:a4:de:ce:8a:35:3a:06:37:96:4f:88:c0:c0:a4:
                    ce:4c:bd:db:c8:47:21:b4:26:40:f3:4b:da:38:c3:
                    53:d9:24:8f:c1:a7:49:01:1c:16:5a:28:34:e3:81:
                    22:1a:49:8a:c7:63:7b:06:cf:90:49:e8:12:89:53:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:61:B3:DF:59:FE:BF:52:79:E7:A8:34:D5:BA:C9:D0:A7:39:F3:8F
            X509v3 Authority Key Identifier:
                keyid:20:53:E1:15:99:79:42:24:6C:CF:12:C1:16:A7:D7:EA:F3:D6:4B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/1/2053E115997942246CCF12C116A7D7EAF3D64BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2053E115997942246CCF12C116A7D7EAF3D64BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJwaQCqwMQspc64Z6ndtiWMw6ieQ8pxSx86tQVXqRsU/1/34352e3138392e34342e302f32322d3234203d3e20323639353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:8b:a9:ba:e9:a8:ae:2b:01:b3:df:13:32:8b:ec:e9:64:75:
         cb:be:2d:74:ae:f8:6f:26:07:f4:fc:56:21:54:69:98:37:23:
         e3:ca:23:03:36:12:2b:b2:2e:e8:11:9a:2d:38:b6:6b:00:62:
         73:0f:0f:6d:86:41:f0:02:e6:8d:dd:04:47:1c:a4:aa:7d:10:
         63:1c:12:cc:de:b3:0f:c2:b6:d3:51:d9:4d:a7:43:90:45:6d:
         52:1e:b2:81:90:22:4d:73:a5:47:43:e6:d1:3b:02:15:1c:8b:
         aa:f9:3e:70:7d:e4:40:59:57:20:66:25:5f:ff:d2:44:4e:c0:
         cd:24:2d:a9:23:3a:71:31:a3:04:6a:75:91:f9:44:db:c8:d4:
         13:7f:d8:cb:2e:33:96:c7:86:34:f2:d0:f0:87:53:0d:f5:b9:
         77:44:ec:00:63:53:6d:dc:79:f8:27:57:c5:3a:f5:06:61:b5:
         dd:85:ed:5f:15:12:37:62:42:06:b9:07:48:3c:4d:bc:f3:dd:
         db:51:01:72:69:92:3c:4f:1a:6c:50:19:41:6e:1b:d0:61:7f:
         3f:be:42:46:65:3e:48:cb:3d:b1:55:cc:f3:a9:e7:41:76:0d:
         c5:8f:2c:a6:f1:24:94:9c:12:b2:7c:70:f7:a5:5d:a5:71:fe:
         cd:c0:e7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:31:44 2024 by rpki-client on console-ams.rpki-client.org