Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/34352e3138392e32302e302f32322d3332203d3e20323639363439.roa
File:                     34352e3138392e32302e302f32322d3332203d3e20323639363439.roa (raw, json)
Hash identifier:          rFe1jhBH1dzy7s1+k5zDU0QhmmckbCoFe+4XzLNYaTQ=
Subject key identifier:   7F:41:92:C5:8E:5C:71:39:82:20:E1:76:9D:A2:49:8D:4A:7F:38:A7
Certificate issuer:       /CN=8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072
Certificate serial:       08739A26A017870772BEF4097C63F1E0702A6503
Authority key identifier: 8D:86:DE:FA:AD:82:E3:F5:FE:08:D6:8C:CC:6E:A2:0E:CF:88:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/34352e3138392e32302e302f32322d3332203d3e20323639363439.roa
Signing time:             Fri 03 Nov 2023 01:03:31 +0000
ROA not before:           Fri 03 Nov 2023 00:58:31 +0000
ROA not after:            Fri 01 Nov 2024 01:03:31 +0000
asID:                     269649
IP address blocks:        45.189.20.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:73:9a:26:a0:17:87:07:72:be:f4:09:7c:63:f1:e0:70:2a:65:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072
        Validity
            Not Before: Nov  3 00:58:31 2023 GMT
            Not After : Nov  1 01:03:31 2024 GMT
        Subject: CN=7F4192C58E5C71398220E1769DA2498D4A7F38A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:88:39:f1:6c:89:07:d1:46:59:f4:c1:0d:
                    d5:43:93:ec:40:87:dd:27:58:df:ef:48:3e:5c:4c:
                    36:97:1c:d4:20:b1:d5:ce:1a:ca:32:b5:fd:6e:2f:
                    4f:c6:e3:52:7d:21:dd:44:73:00:56:62:f8:4a:b6:
                    79:ef:ad:71:6c:eb:b3:bc:b5:df:a0:a9:c5:82:60:
                    a0:2a:e6:71:7b:de:82:08:e2:15:17:ea:d2:39:e7:
                    da:72:ef:5f:86:db:56:c4:26:13:54:9d:92:15:30:
                    a1:c6:5c:59:41:3c:e1:66:05:fb:92:11:60:27:fd:
                    bb:39:ca:74:4d:10:4e:2c:97:06:e7:9d:0e:24:b8:
                    cd:5a:ca:3b:30:35:88:41:5f:06:75:bb:ed:d6:37:
                    cc:4b:2e:45:f9:a6:33:36:c3:27:d5:fa:81:ba:3a:
                    b9:89:c0:8f:97:f0:e2:93:06:4e:6f:66:4c:e4:68:
                    63:64:e8:2d:20:4a:08:ae:94:5b:52:64:ab:7a:ea:
                    47:20:c7:bd:22:d7:67:c6:8c:b2:6e:77:04:71:a6:
                    88:78:6a:a7:8c:64:c9:70:cb:64:8d:42:f4:fa:4c:
                    ef:58:f4:58:9e:e6:af:24:c6:56:cf:44:79:63:5f:
                    26:0a:21:c7:30:0c:77:18:6c:6f:b7:a3:3a:89:ae:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:41:92:C5:8E:5C:71:39:82:20:E1:76:9D:A2:49:8D:4A:7F:38:A7
            X509v3 Authority Key Identifier:
                keyid:8D:86:DE:FA:AD:82:E3:F5:FE:08:D6:8C:CC:6E:A2:0E:CF:88:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/34352e3138392e32302e302f32322d3332203d3e20323639363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:77:b6:f3:92:15:48:0d:5e:ab:01:45:54:11:e7:f1:60:
         ab:f2:7d:28:94:81:03:95:8b:4d:81:52:56:3f:30:de:16:07:
         db:6f:73:95:58:f5:b7:ae:d9:d7:0e:ce:62:e1:05:9c:49:23:
         3e:cb:61:e8:a1:a6:bc:1c:b4:c2:44:0b:26:98:0b:f6:7b:2a:
         fb:54:1c:15:9a:9f:7a:54:21:b6:60:e4:dc:9a:aa:8b:29:9c:
         8e:54:09:2c:e2:24:97:1d:69:0d:e7:cb:13:4c:96:4b:f5:4d:
         18:11:56:f2:c6:30:b2:3f:86:06:8c:db:53:70:d5:bf:eb:bc:
         25:de:8a:7c:d0:de:b1:e0:78:9b:60:16:6b:83:5c:74:66:2f:
         c3:ab:4c:1a:ca:4f:09:ac:47:26:1c:b6:a1:36:f0:b7:e0:d8:
         b1:85:b8:8a:71:34:fc:26:48:d2:40:d4:f8:5f:f9:c2:5f:8e:
         4c:8b:8b:fe:21:c0:78:6c:b3:95:8f:2e:f5:5b:a7:6b:5b:e4:
         24:a3:f2:2c:bc:c2:2e:23:57:62:d1:87:11:92:ac:7d:20:34:
         ec:a8:5b:bb:c9:17:21:35:ee:cd:5d:73:f3:36:b2:26:ce:a9:
         eb:27:9f:cb:43:30:b7:6c:67:86:33:42:7a:10:bf:c5:cc:50:
         dc:97:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org