Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/0/34352e3138342e34382e302f32322d3234203d3e20323639333134.roa
File:                     34352e3138342e34382e302f32322d3234203d3e20323639333134.roa (raw, json)
Hash identifier:          1zybXNbxQ62DC/Cr1EZutEefgXAyCjHpJeDQmA8z3iI=
Subject key identifier:   90:5E:F3:57:AE:2B:6B:4C:03:A0:9B:A5:2A:A7:6C:45:D7:E8:29:0A
Certificate issuer:       /CN=197C5905D5D615C8C6E19730FE6BE6543AD3D727
Certificate serial:       0D270E1B2F27952A99C7D6F1D86A17CBF021AF5E
Authority key identifier: 19:7C:59:05:D5:D6:15:C8:C6:E1:97:30:FE:6B:E6:54:3A:D3:D7:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/197C5905D5D615C8C6E19730FE6BE6543AD3D727.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/0/34352e3138342e34382e302f32322d3234203d3e20323639333134.roa
Signing time:             Thu 07 Dec 2023 21:31:06 +0000
ROA not before:           Thu 07 Dec 2023 21:26:06 +0000
ROA not after:            Thu 05 Dec 2024 21:31:06 +0000
asID:                     269314
IP address blocks:        45.184.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:27:0e:1b:2f:27:95:2a:99:c7:d6:f1:d8:6a:17:cb:f0:21:af:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197C5905D5D615C8C6E19730FE6BE6543AD3D727
        Validity
            Not Before: Dec  7 21:26:06 2023 GMT
            Not After : Dec  5 21:31:06 2024 GMT
        Subject: CN=905EF357AE2B6B4C03A09BA52AA76C45D7E8290A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:b2:19:01:92:df:ec:c9:f7:d1:eb:85:89:
                    6a:58:70:d7:df:bb:a9:52:85:8b:c7:0d:74:aa:0a:
                    16:aa:c6:17:11:82:cf:61:aa:7f:c9:0e:99:90:93:
                    da:1b:8b:c8:de:40:82:74:02:76:ac:d5:32:70:a2:
                    fe:62:b2:a3:53:dc:c6:e4:c3:40:fa:52:39:ea:ea:
                    57:07:f5:36:5d:38:88:16:f1:b9:83:f2:8b:f7:74:
                    6f:49:eb:8a:93:62:6b:ec:fc:cd:67:d6:d8:d5:ce:
                    a3:9b:56:18:18:11:e8:30:af:53:ee:b2:c8:be:0b:
                    d5:6c:35:0c:f6:ca:a7:01:3b:9b:17:12:f8:27:49:
                    af:4d:8e:e1:ec:d6:21:b9:03:57:f5:ce:eb:b9:3c:
                    1d:98:0e:10:c5:d4:9a:67:41:d5:9d:38:c7:2c:92:
                    c2:ad:b2:5b:0c:68:d1:16:6f:58:da:06:43:12:f9:
                    d1:ff:5b:65:fa:e6:9f:5a:ee:cc:06:df:ff:b9:79:
                    2f:74:7d:80:df:47:04:ac:81:7e:58:d7:5d:ca:91:
                    b3:4b:cc:bc:8a:b7:b4:90:20:fe:d1:d9:47:a9:53:
                    8d:57:be:74:de:d9:cf:b6:71:d0:e7:70:38:b5:42:
                    af:c3:0f:f8:53:2e:5c:07:46:b7:81:c5:a4:9e:cd:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5E:F3:57:AE:2B:6B:4C:03:A0:9B:A5:2A:A7:6C:45:D7:E8:29:0A
            X509v3 Authority Key Identifier:
                keyid:19:7C:59:05:D5:D6:15:C8:C6:E1:97:30:FE:6B:E6:54:3A:D3:D7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/0/197C5905D5D615C8C6E19730FE6BE6543AD3D727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/197C5905D5D615C8C6E19730FE6BE6543AD3D727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjtUdPGHvprAC8oCjUuLqiMfB3PnHDzXS5ZiJ8gFW4D6/0/34352e3138342e34382e302f32322d3234203d3e20323639333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:02:8a:cf:a1:d0:80:4f:69:44:84:3c:64:e2:34:56:df:
         49:f8:7a:dc:ad:e3:82:59:57:d9:fe:63:da:fe:55:e6:28:0f:
         13:3d:26:09:ef:12:e2:c5:8c:c1:6c:f1:86:9c:24:3c:60:53:
         08:a3:a4:d7:bf:df:81:58:24:dd:32:aa:cb:2a:ce:b6:51:15:
         ee:9e:9c:ce:9b:3d:99:29:28:97:b4:dc:a5:e5:46:46:5c:cb:
         09:9a:ff:95:12:08:5d:84:94:c3:3b:99:ec:c8:a8:ea:7e:3d:
         a5:16:d1:da:82:32:f9:f4:9a:0b:3e:65:bc:49:0e:ad:ae:31:
         a0:aa:06:70:45:05:ad:7d:4f:15:3f:97:6d:c4:ae:9a:3e:4d:
         bf:c9:1f:9b:e0:7b:9e:b5:1e:7d:ac:a4:0d:1b:9a:a0:21:23:
         50:fe:91:a7:ce:8c:e0:06:f9:76:28:21:ed:f5:1a:dd:46:42:
         0b:4d:66:31:11:3a:23:81:34:5f:f8:8c:4f:a3:29:0b:57:20:
         64:bf:79:6a:f9:e2:ac:46:f4:20:b4:ec:69:59:0c:9d:a4:9c:
         f5:77:85:be:8a:9c:bb:39:e6:bf:12:87:08:d5:9c:a3:ee:8e:
         20:94:74:d6:f5:20:62:98:58:96:53:e3:9e:7a:cd:a4:12:ad:
         80:de:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org