Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/34352e3138352e39322e302f32322d3234203d3e20323639333830.roa
File:                     34352e3138352e39322e302f32322d3234203d3e20323639333830.roa (raw, json)
Hash identifier:          WI+ee9VviafJABW7CKOriunZf+rHdtLALoAeb6JeXC4=
Subject key identifier:   8A:56:69:AB:B7:DD:B5:0E:54:BA:DA:F1:56:FA:58:C9:A8:D0:19:31
Certificate issuer:       /CN=AE2616710A04D19943FCBDA2F29AC92D9E964998
Certificate serial:       511618A3649B26F4EEB7C08D34871FEED86A7A84
Authority key identifier: AE:26:16:71:0A:04:D1:99:43:FC:BD:A2:F2:9A:C9:2D:9E:96:49:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/34352e3138352e39322e302f32322d3234203d3e20323639333830.roa
Signing time:             Fri 17 Nov 2023 19:15:03 +0000
ROA not before:           Fri 17 Nov 2023 19:10:03 +0000
ROA not after:            Fri 15 Nov 2024 19:15:03 +0000
asID:                     269380
IP address blocks:        45.185.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:16:18:a3:64:9b:26:f4:ee:b7:c0:8d:34:87:1f:ee:d8:6a:7a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2616710A04D19943FCBDA2F29AC92D9E964998
        Validity
            Not Before: Nov 17 19:10:03 2023 GMT
            Not After : Nov 15 19:15:03 2024 GMT
        Subject: CN=8A5669ABB7DDB50E54BADAF156FA58C9A8D01931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:d0:14:2c:a7:ae:20:b4:8d:1f:2c:aa:ed:
                    f3:f2:98:8e:6e:41:36:7c:6b:02:16:13:3c:70:75:
                    d4:a9:b0:63:aa:36:5e:3c:0a:fd:45:4d:e5:02:62:
                    d9:d1:85:07:75:40:f3:b4:62:60:ea:d4:93:f8:ca:
                    46:66:50:b2:78:8a:7b:25:bf:91:e1:5d:7a:a6:87:
                    87:d3:6d:81:99:09:c6:a6:c0:ab:8d:87:15:90:f4:
                    f4:e6:ce:7f:1f:94:a1:89:fd:2b:53:f4:1e:20:7f:
                    8e:8d:86:ae:fa:83:6b:e8:74:ac:4c:2e:bd:40:3f:
                    be:25:b8:78:d2:c6:c1:9d:6f:62:75:40:e8:e1:4e:
                    fb:bb:fe:f9:6e:85:e3:1e:be:e3:6b:12:e6:90:f3:
                    e3:5a:7f:67:b5:b7:f3:15:b6:30:db:58:f3:66:bc:
                    e3:29:07:0a:32:6e:4b:e1:30:53:80:f9:fd:9e:2b:
                    c0:11:56:74:de:fe:fb:90:82:90:42:8c:f7:cf:f6:
                    ed:a0:17:7a:09:56:8f:74:f9:65:9f:ea:30:ab:02:
                    6a:77:65:c4:85:51:e0:1f:3a:f1:c6:be:4d:21:0d:
                    d6:ea:de:66:1e:a0:1e:a6:6d:4b:31:4c:74:62:1d:
                    e1:b6:f6:9e:12:d1:18:c4:53:23:18:b1:8e:74:6d:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:56:69:AB:B7:DD:B5:0E:54:BA:DA:F1:56:FA:58:C9:A8:D0:19:31
            X509v3 Authority Key Identifier:
                keyid:AE:26:16:71:0A:04:D1:99:43:FC:BD:A2:F2:9A:C9:2D:9E:96:49:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE2616710A04D19943FCBDA2F29AC92D9E964998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPsUMmxBKBhNNKFiSxcrEcZEm8LqgPJypNSwFSfopUKT/0/34352e3138352e39322e302f32322d3234203d3e20323639333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:96:d5:7b:15:6f:e0:94:8c:b8:1c:bb:e5:c4:1e:e2:47:e5:
         50:18:4c:b6:19:21:36:df:37:d8:80:e3:ce:25:45:18:11:d9:
         82:08:e8:60:d6:95:96:34:04:24:41:f2:0e:47:e7:03:a5:f6:
         37:ae:00:10:47:ca:6e:09:2d:2e:43:7b:37:15:9e:af:2c:a0:
         d9:44:d2:8e:57:5a:d5:35:45:e0:a1:da:5b:e8:46:fe:4d:3e:
         2e:73:51:3b:68:4f:a7:33:1a:f2:77:88:71:52:f7:1f:04:dd:
         6e:e7:00:10:01:7b:14:d9:3a:70:2c:c5:f2:23:a8:9f:17:91:
         b2:a1:15:fb:67:b7:3f:0f:b1:2f:ce:81:64:f7:9b:53:4f:d4:
         dd:be:09:d9:e2:d6:8b:6d:54:a8:29:80:ba:1e:9d:3d:fe:69:
         2a:09:7b:b9:44:13:2c:f8:4f:f1:21:8d:a6:b2:63:16:ff:6c:
         ad:be:75:3b:cb:bd:f9:89:40:00:b6:2e:de:28:73:b6:48:36:
         e7:2b:2a:dc:4b:14:41:5a:16:db:23:71:7a:b8:0b:c8:45:cc:
         c8:8e:1c:59:92:54:98:6f:a6:c6:93:94:6a:cc:97:69:32:5f:
         08:b3:98:f0:9b:b3:cc:e7:cc:7f:55:39:94:1c:75:b6:e1:bd:
         14:e4:0b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org