Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32322d3232203d3e20323639343131.roa
File:                     34352e3138362e35322e302f32322d3232203d3e20323639343131.roa (raw, json)
Hash identifier:          Qgi/c/H0ltlOwcbP/3t5pppAs0Y5q2BHWUrVRZCNqK8=
Subject key identifier:   D2:B8:74:5E:F1:49:D5:6B:D8:95:08:2B:1E:D3:36:C3:17:B6:04:D9
Certificate issuer:       /CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
Certificate serial:       7D419394DEF3218EF312654F6F43D84ADC4BDA20
Authority key identifier: 10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32322d3232203d3e20323639343131.roa
Signing time:             Wed 28 Feb 2024 01:14:27 +0000
ROA not before:           Wed 28 Feb 2024 01:09:27 +0000
ROA not after:            Wed 26 Feb 2025 01:14:27 +0000
asID:                     269411
IP address blocks:        45.186.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:41:93:94:de:f3:21:8e:f3:12:65:4f:6f:43:d8:4a:dc:4b:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
        Validity
            Not Before: Feb 28 01:09:27 2024 GMT
            Not After : Feb 26 01:14:27 2025 GMT
        Subject: CN=D2B8745EF149D56BD895082B1ED336C317B604D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:99:81:90:3f:6b:63:4c:81:a4:bc:18:d0:
                    7a:67:69:ac:4e:b1:6c:80:b9:a4:e0:3d:ab:a7:57:
                    e2:07:31:cf:85:91:75:c1:21:a1:7a:ff:ad:9a:ee:
                    3d:c7:fa:8c:b5:f2:dd:3a:5c:50:ad:74:4d:55:ca:
                    2a:f3:3f:be:77:f7:41:ee:6b:5f:76:cb:fa:ab:f6:
                    b0:53:94:3e:30:4b:0d:cc:e3:2b:5b:36:f3:5d:df:
                    94:83:ec:ef:74:e1:ad:77:71:fb:1c:21:a0:ba:3d:
                    e8:a3:11:49:ae:58:d4:5a:a2:57:82:43:c5:4c:93:
                    53:16:2c:f8:46:f8:ca:1c:c5:7c:f7:63:a5:e6:2a:
                    fb:d6:d9:57:b5:c9:f7:55:f5:99:90:5b:66:bb:0a:
                    f0:e2:95:af:e6:a8:3b:4c:37:2d:f6:e0:bb:e3:33:
                    fe:0d:7f:ca:87:a1:f0:10:29:fc:bd:72:44:66:2e:
                    2f:b0:2b:43:35:f0:2c:1c:6c:a1:8d:2d:ca:a6:4b:
                    20:1d:f4:7d:82:97:2a:d6:da:94:9b:fd:82:87:66:
                    bd:c7:ff:a0:5f:41:bd:df:ba:73:5d:ab:4e:e5:63:
                    e6:c2:a4:74:f7:a2:95:03:a2:b9:53:90:47:ba:92:
                    6f:48:43:67:cd:2d:a1:3a:86:f1:d3:6c:ba:0f:db:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:74:5E:F1:49:D5:6B:D8:95:08:2B:1E:D3:36:C3:17:B6:04:D9
            X509v3 Authority Key Identifier:
                keyid:10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32322d3232203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:f9:10:dc:70:de:4e:27:b4:e9:ba:c0:2c:53:f8:bd:da:3b:
         84:6c:4a:8b:45:a2:9f:73:7d:1a:0a:38:f7:be:c0:69:a8:65:
         6c:b4:ed:c0:8b:81:e0:1d:c3:44:cd:f8:8d:b6:2d:22:28:f7:
         9e:79:7b:16:7f:8c:be:b2:99:8e:84:6f:28:f8:eb:a7:2a:25:
         a1:17:6f:6f:6b:89:14:d9:8a:62:87:7a:01:8b:c5:11:47:26:
         51:e0:b9:ca:af:df:00:f2:6c:d4:3a:a9:10:7e:15:02:d4:be:
         ba:8b:01:e3:c9:3a:4f:a0:56:08:0c:81:d1:52:cf:88:2d:47:
         0d:58:c3:c9:53:0d:af:cb:17:b4:b6:c4:11:8c:0f:bf:63:53:
         a8:72:17:cf:d2:9e:92:6e:d7:aa:7e:1f:75:b9:f1:ee:cc:39:
         b1:7b:a6:42:0c:19:72:a5:1e:fb:9c:9e:4c:21:95:b8:52:65:
         b9:7e:be:9d:fb:ab:89:67:ea:78:55:bb:4b:a9:c3:44:df:2c:
         0d:8d:b0:88:73:bf:32:bc:88:59:00:f0:6e:25:89:b7:1f:77:
         4b:41:31:43:28:7a:2e:0b:37:67:38:87:e3:85:c5:04:0e:67:
         93:d2:47:04:f7:4d:50:52:8b:88:9f:7d:9b:b7:0f:3e:e6:0e:
         e2:47:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org