Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtB9kFVBNtkKhi8YKBUXzmBPUDbPGBMjNMX42ARNucyY/0/34352e3138362e3133322e302f32322d3234203d3e20323639343234.roa
File:                     34352e3138362e3133322e302f32322d3234203d3e20323639343234.roa (raw, json)
Hash identifier:          ZfYut9waYswbbBqFE8luf1KLGdnkaanDEgZUwLniv08=
Subject key identifier:   3A:C8:77:B1:46:37:17:0C:BF:0F:89:18:85:85:2D:37:CB:2C:65:65
Certificate issuer:       /CN=8B991B9DD86073A85B14C0D031D09390F841AA16
Certificate serial:       4038BD09BBF32BC79ED1B9D7D6755A5F4D536AB6
Authority key identifier: 8B:99:1B:9D:D8:60:73:A8:5B:14:C0:D0:31:D0:93:90:F8:41:AA:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B991B9DD86073A85B14C0D031D09390F841AA16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtB9kFVBNtkKhi8YKBUXzmBPUDbPGBMjNMX42ARNucyY/0/34352e3138362e3133322e302f32322d3234203d3e20323639343234.roa
Signing time:             Thu 24 Nov 2022 23:47:01 +0000
ROA not before:           Thu 24 Nov 2022 23:42:01 +0000
ROA not after:            Thu 23 Nov 2023 23:47:01 +0000
asID:                     269424
IP address blocks:        45.186.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:bd:09:bb:f3:2b:c7:9e:d1:b9:d7:d6:75:5a:5f:4d:53:6a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B991B9DD86073A85B14C0D031D09390F841AA16
        Validity
            Not Before: Nov 24 23:42:01 2022 GMT
            Not After : Nov 23 23:47:01 2023 GMT
        Subject: CN=3AC877B14637170CBF0F891885852D37CB2C6565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:78:46:f9:95:2a:e0:33:f1:9d:24:15:db:e3:
                    b6:19:a8:05:41:77:a3:08:87:b7:a7:6d:74:a3:56:
                    24:7e:bd:40:33:41:8b:d0:76:44:f2:62:d1:b3:23:
                    9b:7a:06:14:0d:fa:b0:a0:31:c5:fe:16:bc:1e:ef:
                    54:7a:c7:2f:c0:4d:54:d3:0e:3e:21:0e:e5:5b:84:
                    8f:74:d1:45:03:92:f9:5d:bb:7c:d7:2a:47:ea:95:
                    55:ca:e6:38:df:77:30:f1:23:14:a5:da:7d:f4:44:
                    3a:35:52:dd:f0:b2:f3:69:e7:0e:7c:da:49:35:97:
                    94:34:2e:38:2c:f9:7a:89:29:d2:b8:a7:a4:fc:7e:
                    eb:8a:57:6d:3c:ec:52:3d:9d:3d:b4:b4:46:03:dc:
                    28:5f:77:4c:36:b9:68:4a:77:dc:e1:b0:f1:b6:6b:
                    61:e8:39:e4:a9:d0:13:7a:21:8c:b0:4c:d6:07:bd:
                    da:49:99:9d:9e:a1:53:5d:62:73:68:a5:e3:25:88:
                    cd:c8:f0:50:2f:f1:5c:f3:f8:f8:8c:fd:47:1d:04:
                    39:43:86:12:8b:4e:a3:19:43:b4:f0:f9:29:b0:7d:
                    3c:53:0d:e3:fe:89:c1:f2:dd:a1:82:f4:9f:2c:89:
                    11:4e:cd:d4:27:0c:6a:0a:85:88:02:d3:72:cf:99:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C8:77:B1:46:37:17:0C:BF:0F:89:18:85:85:2D:37:CB:2C:65:65
            X509v3 Authority Key Identifier:
                keyid:8B:99:1B:9D:D8:60:73:A8:5B:14:C0:D0:31:D0:93:90:F8:41:AA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtB9kFVBNtkKhi8YKBUXzmBPUDbPGBMjNMX42ARNucyY/0/8B991B9DD86073A85B14C0D031D09390F841AA16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B991B9DD86073A85B14C0D031D09390F841AA16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtB9kFVBNtkKhi8YKBUXzmBPUDbPGBMjNMX42ARNucyY/0/34352e3138362e3133322e302f32322d3234203d3e20323639343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:b7:69:88:62:35:d2:a1:b7:26:10:dc:17:3f:fd:03:d5:31:
         03:6a:3b:87:ac:91:be:6d:a8:6f:b1:d6:c6:f5:9d:2f:ce:ca:
         2b:1d:e2:89:f2:2e:42:a8:57:5d:d5:fe:2f:ba:7c:77:71:9c:
         b6:76:a7:ab:be:b2:27:45:45:12:06:06:9f:07:7d:d3:75:af:
         1c:8b:9e:9b:dd:4b:ef:88:8a:ce:6a:7c:6e:9f:1b:88:10:90:
         42:90:74:33:36:5c:67:e6:e7:17:df:d0:cf:d1:8d:ba:ee:98:
         f2:76:35:54:1b:46:9e:76:ce:f6:e9:d7:55:bf:ea:a8:cf:2b:
         13:ca:7d:83:17:47:91:4e:52:43:62:80:19:74:79:3d:b0:89:
         34:cd:b3:19:34:db:23:df:00:31:86:5b:c6:38:1b:0a:3f:2b:
         37:90:92:21:fd:87:9a:34:90:48:a7:22:95:1e:13:0d:d1:60:
         a5:ed:3a:d5:70:57:50:d5:e7:d6:2c:1a:52:2f:86:42:08:10:
         91:2d:08:b5:47:42:89:a8:11:b5:e3:0c:8f:fb:7d:d3:52:6c:
         2f:86:fa:fa:60:1c:7f:b6:f9:65:78:02:7c:a1:94:c5:9e:76:
         8c:6e:06:54:4c:a6:d9:6a:df:52:99:bd:ba:b1:a8:6c:f0:a0:
         c4:49:40:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org