Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/34352e3138372e34302e302f32322d3234203d3e20323639343834.roa
File:                     34352e3138372e34302e302f32322d3234203d3e20323639343834.roa (raw, json)
Hash identifier:          Z0OUOOKB7EQz9KswXEYyRgBDUb4NnVkN5jm4rJta1bw=
Subject key identifier:   AF:6A:30:6E:CE:1D:A2:AF:65:F6:97:4F:1C:1C:66:87:F7:B8:C7:9F
Certificate issuer:       /CN=91CB9D27C1D3481EA1B3ACA968F6AD328F745A99
Certificate serial:       0F1AFBCA98E0ECF55F6E77A7C71ACC6BD4B60262
Authority key identifier: 91:CB:9D:27:C1:D3:48:1E:A1:B3:AC:A9:68:F6:AD:32:8F:74:5A:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/34352e3138372e34302e302f32322d3234203d3e20323639343834.roa
Signing time:             Thu 01 Dec 2022 19:38:31 +0000
ROA not before:           Thu 01 Dec 2022 19:33:31 +0000
ROA not after:            Thu 30 Nov 2023 19:38:31 +0000
asID:                     269484
IP address blocks:        45.187.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1a:fb:ca:98:e0:ec:f5:5f:6e:77:a7:c7:1a:cc:6b:d4:b6:02:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CB9D27C1D3481EA1B3ACA968F6AD328F745A99
        Validity
            Not Before: Dec  1 19:33:31 2022 GMT
            Not After : Nov 30 19:38:31 2023 GMT
        Subject: CN=AF6A306ECE1DA2AF65F6974F1C1C6687F7B8C79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:e3:e5:5a:36:42:e4:15:3d:e3:d5:48:cc:
                    f3:06:81:42:75:45:f6:89:33:df:29:53:68:db:91:
                    b5:da:15:23:b8:27:e0:ca:bb:bb:7e:e3:31:78:93:
                    2e:d7:79:d2:4a:8a:fe:10:d2:26:dc:73:9d:a8:34:
                    e5:e7:1a:29:19:e9:bb:45:d2:49:7d:0d:05:fa:f1:
                    bf:6c:2f:43:bb:38:35:bd:4d:2c:84:7e:14:9a:a2:
                    25:ba:5a:6f:88:4c:a0:61:b8:82:0f:ab:1b:d9:94:
                    06:11:8f:2b:eb:e3:5e:92:ea:c0:a7:f4:19:93:6a:
                    f1:89:53:c5:35:43:c4:34:a6:c2:d7:23:94:17:58:
                    db:b0:d4:c7:88:5d:cc:41:94:2b:c4:e1:3b:36:4e:
                    56:05:f3:ea:cf:a7:f4:b5:e7:21:9c:1e:4f:42:1d:
                    a1:77:72:b9:40:80:49:53:48:f3:5b:78:7a:f7:8b:
                    d0:c5:97:d7:5f:38:a6:f4:c3:60:64:08:9d:7f:a6:
                    b1:12:d4:de:39:89:0b:40:70:b2:3d:19:ea:27:06:
                    5a:f2:11:a1:bc:14:6f:e0:63:98:d9:ce:f4:d5:41:
                    6e:49:c2:54:10:df:ce:7f:f6:fc:8a:0f:4f:c0:8a:
                    67:cd:b2:1a:7f:32:92:d8:a2:da:0f:d6:d4:39:96:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6A:30:6E:CE:1D:A2:AF:65:F6:97:4F:1C:1C:66:87:F7:B8:C7:9F
            X509v3 Authority Key Identifier:
                keyid:91:CB:9D:27:C1:D3:48:1E:A1:B3:AC:A9:68:F6:AD:32:8F:74:5A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91CB9D27C1D3481EA1B3ACA968F6AD328F745A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek5Qv82ABkvd8ZDM8uMYitkghMn8JA1HCjGsQ9x656Ub/0/34352e3138372e34302e302f32322d3234203d3e20323639343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:9b:dc:69:e1:f7:4a:62:a3:37:3c:51:92:ee:7a:54:1f:
         b7:3a:d0:20:e6:b7:e8:e2:9a:71:2a:46:07:bf:5b:41:c8:a3:
         2a:f5:ce:16:6c:f4:cc:bc:ce:e0:ae:1f:cd:60:94:f7:c8:4c:
         92:9a:43:ee:3c:3b:9b:74:16:25:8f:39:f9:04:23:88:c0:0c:
         62:de:6e:0f:b1:22:26:5d:74:71:45:a1:2d:b7:cd:b4:ca:53:
         85:94:14:21:56:4c:f7:5d:e1:bc:20:3e:8b:74:dc:12:91:fd:
         c4:8f:cf:a3:a5:d9:59:e7:69:5c:78:ea:ec:0f:68:09:03:b9:
         cd:57:3c:0b:59:35:25:fd:5c:d3:c6:7d:9c:7f:49:bf:aa:98:
         20:5d:4c:b2:97:bf:e5:5f:0a:d4:69:8f:06:49:1b:54:d8:85:
         38:f6:3b:7c:65:ac:c3:db:84:b5:4d:9d:e3:8a:39:72:b1:e6:
         bd:39:6c:ac:65:21:fa:b6:55:af:10:d1:c0:ce:49:17:f3:05:
         7a:a2:ed:88:eb:0d:16:ce:9f:63:bb:6a:5f:e5:2d:01:17:18:
         cd:39:3b:d3:26:60:d8:6f:13:79:8b:ac:61:9b:86:b5:e1:fc:
         22:70:c8:50:72:cd:16:d1:77:e9:75:86:e1:e0:bb:6c:3b:ab:
         00:eb:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org