Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa
File:                     34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          YCtCHWnriGEf0OXZxeOlPHc/IIPX3W0f4X76UBjjzHI=
Subject key identifier:   B8:D3:5A:E8:AB:8B:3B:F9:C0:A2:D5:7E:EB:39:6F:23:1A:91:E5:31
Certificate issuer:       /CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
Certificate serial:       5DC9C90A339D57C23B74571AC449F3CB9B08EA44
Authority key identifier: 42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa
Signing time:             Thu 30 Nov 2023 20:00:00 +0000
ROA not before:           Thu 30 Nov 2023 19:55:00 +0000
ROA not after:            Thu 28 Nov 2024 20:00:00 +0000
asID:                     262595
IP address blocks:        45.162.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c9:c9:0a:33:9d:57:c2:3b:74:57:1a:c4:49:f3:cb:9b:08:ea:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42B9BBC60F089218DEF0C11B325A7ECE8F034BAE
        Validity
            Not Before: Nov 30 19:55:00 2023 GMT
            Not After : Nov 28 20:00:00 2024 GMT
        Subject: CN=B8D35AE8AB8B3BF9C0A2D57EEB396F231A91E531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:cf:e6:b5:be:7e:60:68:ea:d1:c4:c2:67:
                    5a:93:64:c4:fd:ae:49:30:fc:dc:8a:cc:a2:71:c5:
                    22:04:fa:62:61:39:43:4a:06:f7:91:a7:b7:c2:e9:
                    f3:81:b1:b5:14:53:45:90:ae:88:5b:6d:5b:ae:9b:
                    85:5c:36:57:e3:d9:9c:3f:71:57:c1:cf:be:86:37:
                    5c:4b:a4:4a:51:f7:6d:9e:1b:8d:46:97:13:1a:d4:
                    f2:87:b6:36:f2:c2:de:21:8d:3a:39:fe:bf:70:40:
                    57:dd:7a:c5:d8:cc:7a:23:e5:2c:8f:f1:a6:ae:3c:
                    0b:b3:0b:86:51:18:ea:80:bf:57:6d:b1:08:a2:ed:
                    d8:7a:bd:2e:05:2e:80:95:f9:77:b7:90:3b:a9:13:
                    ee:65:71:9d:bd:a8:11:a1:f4:20:d6:41:80:ff:d7:
                    3b:36:10:2f:60:bc:b7:98:54:6b:16:ae:00:a6:88:
                    48:1b:a9:51:eb:c3:23:03:60:ef:83:2a:c8:7a:be:
                    3e:d6:5d:03:4b:db:de:27:f4:7b:55:36:4e:7b:28:
                    bc:01:6a:f2:86:67:ad:e4:6b:15:56:0a:45:3a:bc:
                    2d:7b:d4:16:3a:00:8d:da:85:35:79:a3:c0:a1:64:
                    17:a3:0d:bb:bf:8d:24:d4:cf:e5:54:1e:49:f0:62:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D3:5A:E8:AB:8B:3B:F9:C0:A2:D5:7E:EB:39:6F:23:1A:91:E5:31
            X509v3 Authority Key Identifier:
                keyid:42:B9:BB:C6:0F:08:92:18:DE:F0:C1:1B:32:5A:7E:CE:8F:03:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42B9BBC60F089218DEF0C11B325A7ECE8F034BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/0/34352e3136322e3138382e302f32322d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:7b:ff:5e:05:d7:43:25:1e:fe:72:c8:40:04:41:0f:27:
         f1:98:5a:c9:ef:1b:89:3f:e5:d9:d2:94:f4:38:02:6c:ba:ab:
         5e:98:3a:49:44:a1:e9:4c:a9:44:f9:36:72:9f:28:98:81:da:
         ad:bf:34:32:a3:75:a2:fb:35:60:2a:7b:6d:f3:96:bc:d3:4a:
         b6:78:5b:dd:c2:e2:f6:61:1f:dc:3b:80:27:76:5b:7d:7c:eb:
         cc:16:1d:ea:e1:ba:b0:77:b2:f4:70:44:be:0c:6b:15:16:3f:
         7e:13:88:d2:9c:0c:6e:40:da:e8:6d:38:6e:d0:8d:61:96:7e:
         e3:dd:4a:9b:3e:0b:56:a3:0d:f9:a7:91:03:6f:e8:e0:8a:18:
         2b:c3:7f:cc:68:94:42:65:d0:83:fa:06:f5:9b:49:ab:38:43:
         8d:11:d0:ab:fa:fb:4b:50:2a:d2:02:80:7c:6e:96:1d:4f:76:
         69:de:1d:06:e8:be:5c:5a:50:cc:af:c5:e7:04:0f:e8:ec:ee:
         32:ea:a4:30:50:4a:f0:3b:9b:56:4f:80:c5:86:6b:14:2f:27:
         34:a0:e7:50:72:99:f0:f4:70:7f:f4:e2:01:d7:3f:2c:e4:81:
         53:84:9f:b1:f5:53:e5:26:e2:59:f6:fd:7d:95:6d:62:64:71:
         71:1e:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org