Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa
File:                     34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa (raw, json)
Hash identifier:          ed1Mb5vyclnx7VO/1RuxgBbBbHsUv0XzhVEfKW92K+8=
Subject key identifier:   4C:0E:BD:94:C3:B1:1F:6C:ED:4A:90:FD:6A:06:8D:73:C9:52:89:12
Certificate issuer:       /CN=8E28A4D0B90179F6DE269A6493B5A059256E12BF
Certificate serial:       30587FBC86062D157773F32363B04E33B02F2E49
Authority key identifier: 8E:28:A4:D0:B9:01:79:F6:DE:26:9A:64:93:B5:A0:59:25:6E:12:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa
Signing time:             Sun 30 Jul 2023 01:40:50 +0000
ROA not before:           Sun 30 Jul 2023 01:35:50 +0000
ROA not after:            Sun 28 Jul 2024 01:40:50 +0000
asID:                     269650
IP address blocks:        45.190.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:58:7f:bc:86:06:2d:15:77:73:f3:23:63:b0:4e:33:b0:2f:2e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E28A4D0B90179F6DE269A6493B5A059256E12BF
        Validity
            Not Before: Jul 30 01:35:50 2023 GMT
            Not After : Jul 28 01:40:50 2024 GMT
        Subject: CN=4C0EBD94C3B11F6CED4A90FD6A068D73C9528912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:57:3c:8a:60:4e:a7:4c:43:19:50:dd:75:
                    0c:03:cc:e1:2f:1d:02:a6:06:9e:56:26:ce:18:de:
                    7a:b7:9c:de:f5:e4:d5:db:57:55:d6:f7:63:d7:e2:
                    7a:e7:23:ba:f9:e4:ca:c8:d9:d4:91:ef:55:f3:35:
                    90:01:46:1d:d0:5b:46:46:c3:8a:9d:fe:c6:29:a5:
                    09:fa:85:81:ac:5c:b0:af:f5:8d:b6:56:99:0f:00:
                    4b:df:77:ea:19:06:81:0d:00:51:c9:2c:0b:9b:de:
                    42:d5:b4:0e:7c:5d:9b:ca:4e:38:f3:9c:bd:cd:7b:
                    99:49:6d:8b:f5:ed:b8:28:dc:ce:d8:31:60:c9:32:
                    44:36:5f:2f:2d:1f:89:df:aa:af:d1:63:e9:15:2e:
                    33:f9:c0:6c:f7:74:54:96:5b:e8:de:88:3c:f8:57:
                    dc:f5:e3:1b:9d:6e:d2:9c:23:a9:32:fb:dc:68:1c:
                    e2:2f:75:f3:21:89:e0:1b:f2:75:de:05:b2:6e:16:
                    fd:bd:40:ff:f3:d6:51:1f:03:24:35:f4:86:b2:e5:
                    87:6c:fa:31:52:af:86:d2:dd:4e:14:06:77:9e:ea:
                    f0:f1:87:c8:ad:82:dd:c1:73:0f:e8:50:5a:79:56:
                    e0:20:19:1c:0b:ca:ab:d2:6e:72:c0:56:6f:0a:82:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0E:BD:94:C3:B1:1F:6C:ED:4A:90:FD:6A:06:8D:73:C9:52:89:12
            X509v3 Authority Key Identifier:
                keyid:8E:28:A4:D0:B9:01:79:F6:DE:26:9A:64:93:B5:A0:59:25:6E:12:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/34352e3139302e3230302e302f32322d3234203d3e20323639363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:e8:9a:0f:b2:86:63:00:10:c4:7c:e1:eb:ec:6d:57:f8:
         8b:bc:89:fa:8c:77:57:ef:d6:4e:5b:96:2e:7f:90:39:e9:b5:
         df:fb:e1:30:17:e9:76:54:9f:71:2a:0e:c5:74:03:05:60:05:
         18:2d:b1:15:75:8b:49:49:30:8e:13:32:aa:ff:5e:3b:1a:ca:
         dd:fa:cf:4e:ba:5c:b6:b1:97:ec:d0:ad:72:ff:56:32:77:13:
         a9:59:5e:8e:82:49:cd:c9:9b:96:01:c6:d7:e1:23:6f:42:e3:
         ed:79:4c:40:b7:72:c7:89:3b:86:10:dc:a0:bb:b4:7b:f1:16:
         12:33:2d:82:6f:2a:95:95:c3:6c:d8:33:58:56:bc:c0:d4:ae:
         d1:5e:db:28:1e:54:9a:e0:55:c0:d6:ce:95:31:32:db:7d:07:
         f0:e4:ba:fb:1b:da:f3:47:fc:43:3c:34:f4:96:ce:df:9e:56:
         34:c8:35:92:99:5d:cb:4c:e4:fa:2e:a6:bb:a7:b8:37:85:7d:
         dc:d6:ad:6b:44:0d:92:76:16:8a:02:b4:0a:00:51:cf:a5:94:
         ee:fa:2b:eb:bc:b3:ee:11:33:fd:fb:4b:02:a7:4c:29:92:1b:
         ab:90:f5:da:55:35:90:a6:c9:04:5b:5a:c2:a9:a0:f3:e5:7a:
         58:c4:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org