Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3234203d3e20323639353137.roa
File:                     34352e3138382e37322e302f32322d3234203d3e20323639353137.roa (raw, json)
Hash identifier:          dOTg3h7YMV6XbY2F+nIrVW1PEdvsxrTSAaqjJfSOmfE=
Subject key identifier:   A0:9E:37:16:A7:77:97:13:18:C6:97:4A:D2:8F:55:5E:91:36:1F:D3
Certificate issuer:       /CN=FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80
Certificate serial:       254076E90A0C3380C5B638118B88C0A1BB64D01F
Authority key identifier: FD:BD:40:EA:6B:F7:E4:B7:1F:F0:96:07:FE:B4:C4:05:3D:2F:CB:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3234203d3e20323639353137.roa
Signing time:             Sun 02 Apr 2023 06:34:50 +0000
ROA not before:           Sun 02 Apr 2023 06:29:50 +0000
ROA not after:            Sun 31 Mar 2024 06:34:50 +0000
asID:                     269517
IP address blocks:        45.188.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:40:76:e9:0a:0c:33:80:c5:b6:38:11:8b:88:c0:a1:bb:64:d0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80
        Validity
            Not Before: Apr  2 06:29:50 2023 GMT
            Not After : Mar 31 06:34:50 2024 GMT
        Subject: CN=A09E3716A777971318C6974AD28F555E91361FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:a6:28:45:47:5e:71:9b:cb:16:78:4b:35:
                    19:c3:ef:99:22:1f:47:c6:73:7d:c9:e7:b6:eb:5f:
                    99:63:e9:da:7d:60:e2:1d:3a:38:e9:0c:11:ef:2f:
                    60:3d:34:62:07:3f:9e:77:81:4a:95:1c:6c:35:35:
                    75:37:b3:54:84:cf:c0:68:b6:9e:c0:c1:d7:2d:8f:
                    c4:b0:46:37:af:6f:56:90:bc:df:a0:b4:7e:c2:2c:
                    3a:82:c5:8e:d6:f3:b5:66:67:ad:a1:23:dd:a0:01:
                    dc:c4:f3:6f:65:82:b9:93:82:f1:1a:e0:5a:16:b7:
                    88:0b:ca:d9:f4:0b:20:77:c7:a1:f0:92:c9:2b:8e:
                    42:40:9b:f3:12:fc:cd:2d:f2:05:bd:62:9c:15:48:
                    20:d7:e7:5f:db:02:8b:cc:92:f8:5a:c9:59:0e:d8:
                    45:d6:07:07:15:30:91:f1:38:e7:b2:39:a6:e0:49:
                    dc:92:15:b8:b0:fb:6a:df:92:a2:9a:09:cd:c9:f1:
                    1b:35:3c:09:07:27:fe:e0:c7:ac:bb:18:e1:98:c2:
                    6f:49:1c:03:3b:14:dc:dd:a4:3f:50:75:27:bf:6f:
                    ad:e2:9c:65:ac:75:b3:bf:02:70:5d:0e:fb:d0:a0:
                    12:aa:41:4c:95:fe:8e:9c:9d:fa:bf:ab:04:d7:1f:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9E:37:16:A7:77:97:13:18:C6:97:4A:D2:8F:55:5E:91:36:1F:D3
            X509v3 Authority Key Identifier:
                keyid:FD:BD:40:EA:6B:F7:E4:B7:1F:F0:96:07:FE:B4:C4:05:3D:2F:CB:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDBD40EA6BF7E4B71FF09607FEB4C4053D2FCB80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37322e302f32322d3234203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:d4:91:b9:6c:98:52:85:54:62:38:a6:af:c0:3f:76:7b:
         1d:02:8e:e2:13:47:ee:28:c2:6e:54:6d:59:c4:86:02:4a:64:
         11:aa:ad:99:ad:a7:90:e6:2a:a2:cc:0c:1f:6f:3e:a0:f2:54:
         d5:04:c8:b3:da:4f:23:dd:a1:bb:f9:f1:d0:ed:78:08:7d:f9:
         ca:1b:92:1f:9d:8b:fc:96:36:cc:5d:fe:b3:a4:5a:ae:42:97:
         2b:3c:2b:64:c4:9f:3e:8c:12:bc:7d:0e:37:f0:25:b5:89:19:
         cb:c0:1f:fc:c4:38:d4:17:24:e5:14:0d:22:89:36:0b:67:e6:
         4c:2c:7c:13:c3:82:7d:74:c5:16:18:6f:4e:00:5e:82:a7:b0:
         5b:20:99:d6:96:84:46:2c:97:dc:74:e0:61:63:8e:85:cc:94:
         be:65:b8:22:a3:2b:4d:ec:47:e1:d2:68:69:f9:0f:a1:37:c4:
         d5:8e:c9:f9:36:5b:15:ae:d3:a6:8f:b6:5c:a9:8a:33:2a:9e:
         ad:17:02:97:43:dd:e6:49:4c:93:9b:68:bc:76:ab:7c:96:3a:
         0a:79:b8:a4:83:0d:88:9b:68:90:7a:5b:f7:14:86:ad:e2:d5:
         de:0b:08:da:58:70:74:5a:0f:ee:f7:76:49:19:cf:74:74:55:
         b7:97:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org