Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32332d3233203d3e20323639333931.roa
File:                     34352e3138352e3137322e302f32332d3233203d3e20323639333931.roa (raw, json)
Hash identifier:          qEITp3uib6912gCPIG3uCBgE3wIsTP9FaJ4MkvR13Qo=
Subject key identifier:   A4:34:4F:4D:0F:B2:28:30:DB:C9:7C:92:39:A2:C4:AB:56:A6:A9:42
Certificate issuer:       /CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
Certificate serial:       1920ECAED6B7FC73EFA43FC1CB0B678B8EA0399F
Authority key identifier: 5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32332d3233203d3e20323639333931.roa
Signing time:             Mon 15 May 2023 16:11:09 +0000
ROA not before:           Mon 15 May 2023 16:06:09 +0000
ROA not after:            Mon 13 May 2024 16:11:09 +0000
asID:                     269391
IP address blocks:        45.185.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:20:ec:ae:d6:b7:fc:73:ef:a4:3f:c1:cb:0b:67:8b:8e:a0:39:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
        Validity
            Not Before: May 15 16:06:09 2023 GMT
            Not After : May 13 16:11:09 2024 GMT
        Subject: CN=A4344F4D0FB22830DBC97C9239A2C4AB56A6A942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:a8:44:86:48:f1:4d:f3:5c:8f:02:af:62:
                    5a:73:02:25:02:d8:96:dd:dc:9e:c6:1d:f3:ed:22:
                    46:4f:aa:bb:9d:9f:b8:76:55:83:b0:f0:07:f3:22:
                    24:23:87:46:5c:a5:b3:2f:ea:9d:38:f9:4b:85:13:
                    81:02:0d:3c:39:1d:a9:c4:3f:70:f3:0d:62:33:85:
                    6b:76:6e:e1:c9:d1:03:97:57:1c:14:e1:50:0e:a2:
                    b5:a7:47:7c:67:06:82:7d:2f:9b:fe:91:27:64:95:
                    e7:b7:0f:fa:17:96:41:71:11:57:11:95:04:9f:17:
                    4a:b2:a0:5c:59:ba:ea:af:ed:c4:b0:c1:67:33:a7:
                    4d:8f:59:a9:3f:91:be:2b:64:3f:2d:eb:90:d3:d2:
                    e3:c0:35:d4:74:04:47:66:23:ef:24:2c:20:82:78:
                    86:ca:1b:6f:3f:9a:dd:2a:24:e1:d2:84:9e:73:9e:
                    07:1f:a2:bc:8b:dc:7a:ef:59:32:a5:ef:5a:50:c0:
                    a6:0a:79:26:c7:1f:db:be:62:15:90:cd:e1:a1:ea:
                    c7:56:2d:83:aa:0a:6e:c5:4e:a1:fc:67:4f:94:97:
                    e0:87:2c:7e:26:cc:fd:f0:40:6a:15:6f:5d:76:79:
                    09:d9:e6:07:0b:bc:5a:49:d4:f5:05:30:7f:a9:47:
                    71:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:4F:4D:0F:B2:28:30:DB:C9:7C:92:39:A2:C4:AB:56:A6:A9:42
            X509v3 Authority Key Identifier:
                keyid:5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32332d3233203d3e20323639333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:56:d8:e2:e1:78:31:4d:b5:b4:4a:78:6d:30:26:10:0e:
         63:4a:88:2e:79:7c:36:e4:72:01:67:89:be:e5:37:e0:c4:23:
         d9:1a:87:11:14:08:a8:00:6a:86:c4:7c:a8:0f:d8:17:eb:8b:
         0a:2f:89:d4:b3:02:69:bf:c9:92:ef:a3:ed:f1:ab:27:4c:90:
         1c:3f:bf:93:08:c2:4f:aa:12:f5:2f:9f:8e:84:8f:6d:67:19:
         30:9b:77:7c:e7:a0:55:f9:be:b4:21:1a:72:53:1b:38:8d:2b:
         f9:c6:78:e9:f6:18:70:70:38:50:aa:c8:5c:1f:61:93:a8:93:
         13:d3:bc:9d:ab:0a:ea:e7:eb:e0:ee:8f:a2:94:3b:34:01:7c:
         59:02:7e:a5:53:d9:2a:d4:4a:b5:1c:b7:eb:44:6d:da:85:b6:
         20:2c:30:4c:57:2f:46:f0:fe:d7:65:c6:9b:f2:2d:74:40:ce:
         e8:8a:61:7e:41:f3:ea:0d:8f:3c:16:fb:fd:86:90:17:f4:61:
         2a:3d:55:bd:dd:91:d4:b2:7c:83:2f:91:83:31:6c:a0:3d:c9:
         de:e7:85:12:b4:ed:fe:ae:76:54:57:91:46:c6:ca:f0:28:89:
         98:31:b0:02:95:49:f8:d4:18:76:bf:a1:b0:70:c4:ff:5b:b8:
         ca:fa:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org