Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3135302e302f32332d3233203d3e20323639313932.roa
File:                     34352e3138312e3135302e302f32332d3233203d3e20323639313932.roa (raw, json)
Hash identifier:          R+u2Klgw0rKg/8ov5BQoiucxWbp0uzYpC0Zdq14MYsY=
Subject key identifier:   9E:8B:DD:AD:31:15:FC:9C:43:4B:BA:4C:39:29:A7:FF:1E:81:B1:48
Certificate issuer:       /CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
Certificate serial:       02203D08A415F79F6DD8561ACD7A8AD5BEE11EF6
Authority key identifier: A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3135302e302f32332d3233203d3e20323639313932.roa
Signing time:             Mon 29 Jan 2024 20:00:01 +0000
ROA not before:           Mon 29 Jan 2024 19:55:01 +0000
ROA not after:            Mon 27 Jan 2025 20:00:01 +0000
asID:                     269192
IP address blocks:        45.181.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:20:3d:08:a4:15:f7:9f:6d:d8:56:1a:cd:7a:8a:d5:be:e1:1e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9019D0A5557DBD77DD42CDCED37B55CC0A2087C
        Validity
            Not Before: Jan 29 19:55:01 2024 GMT
            Not After : Jan 27 20:00:01 2025 GMT
        Subject: CN=9E8BDDAD3115FC9C434BBA4C3929A7FF1E81B148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:bb:49:20:37:40:fa:0b:b3:b9:a5:5b:f3:05:
                    78:5a:0c:24:9d:e2:de:40:da:2a:d7:84:a9:64:e9:
                    27:c5:a9:37:6b:10:93:0d:0e:a9:6d:10:64:50:7d:
                    53:25:9a:50:ac:bd:d5:42:1b:cb:72:b0:d7:df:93:
                    e2:96:26:ce:c6:c4:18:74:9b:f2:07:50:bb:bf:a7:
                    38:f5:ca:7b:c4:b6:58:36:f4:b9:a3:32:1d:f0:d8:
                    28:a1:2d:e6:c5:0e:3d:63:87:f4:92:df:46:9a:52:
                    f9:bd:05:ab:8b:bf:2c:7a:65:4f:db:98:b5:9d:fe:
                    fa:b5:58:59:f9:24:99:4c:9d:20:ed:ca:a6:10:2d:
                    0e:f0:32:eb:50:48:28:94:a6:3a:0f:97:96:68:76:
                    c6:a9:98:32:7e:d5:ef:cc:b2:07:a7:de:bd:d9:fe:
                    9a:e2:9b:fe:2b:32:a2:55:81:78:c0:26:35:30:19:
                    a7:a8:95:d8:4c:df:a3:f8:bb:e2:8a:06:29:e3:d8:
                    20:28:af:fa:81:97:f8:c0:1e:98:56:75:0a:8a:ff:
                    56:73:cc:4f:d2:07:f2:e2:d8:3a:d5:46:d6:c1:7c:
                    80:59:db:d5:64:68:bb:28:31:1a:99:3f:18:61:e8:
                    11:9a:74:f0:62:d5:60:d9:a1:43:84:2d:aa:b8:57:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8B:DD:AD:31:15:FC:9C:43:4B:BA:4C:39:29:A7:FF:1E:81:B1:48
            X509v3 Authority Key Identifier:
                keyid:A9:01:9D:0A:55:57:DB:D7:7D:D4:2C:DC:ED:37:B5:5C:C0:A2:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9019D0A5557DBD77DD42CDCED37B55CC0A2087C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/0/34352e3138312e3135302e302f32332d3233203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:dc:fa:4c:b0:06:14:91:2c:d5:a9:49:53:30:d6:35:1e:73:
         7a:5d:b7:22:23:38:88:d2:1e:1d:3f:06:0e:11:61:d5:ed:f3:
         fc:f0:8b:7c:de:d9:72:09:52:0a:83:55:aa:07:69:98:be:9e:
         a1:42:95:b5:9a:b6:98:65:41:db:3e:4f:4d:6c:68:cc:46:34:
         41:68:c0:18:92:d7:44:43:5e:0d:ad:de:f6:dc:84:0e:32:44:
         f8:d9:f9:50:90:4d:3b:d2:60:70:8e:b0:bf:c9:7d:69:ec:02:
         fa:a5:13:82:88:70:cd:b1:0d:c0:30:5d:ea:b8:72:96:a6:a5:
         cd:bb:d9:e7:28:b6:e9:c0:73:bb:10:6a:7f:11:f3:e6:e5:0a:
         ce:ee:3b:67:fc:1e:03:65:b2:63:96:69:72:a3:bc:a7:fc:7e:
         e6:de:4b:27:31:d1:a9:db:59:04:c7:e7:93:ad:35:a9:c1:67:
         5b:c2:f8:3d:d2:23:08:75:86:07:b6:ea:47:26:25:f2:bb:79:
         b9:33:7b:cf:58:a4:10:c1:c5:22:78:b9:63:61:ab:d8:b5:43:
         30:ad:87:d6:a0:12:fd:ac:23:dd:41:98:f4:66:05:7d:31:88:
         0c:11:0d:ac:b2:70:38:80:b9:e3:53:54:76:78:02:44:29:fb:
         9a:26:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org