Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/34352e372e3139322e302f32322d3234203d3e20323636363037.roa
File:                     34352e372e3139322e302f32322d3234203d3e20323636363037.roa (raw, json)
Hash identifier:          fD31ZQZ/fMr5vseY1iGn0/lH+mRi/J5W1NZ9NRIvY30=
Subject key identifier:   D4:E0:B4:BF:60:3F:60:0A:79:42:95:C5:79:62:3D:C4:30:3D:1D:3A
Certificate issuer:       /CN=4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96
Certificate serial:       6BAE888B9584004A354BE6B57FDE37B426D342A8
Authority key identifier: 4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/34352e372e3139322e302f32322d3234203d3e20323636363037.roa
Signing time:             Mon 22 Aug 2022 13:15:46 +0000
ROA not before:           Mon 22 Aug 2022 13:10:46 +0000
ROA not after:            Mon 21 Aug 2023 13:15:46 +0000
asID:                     266607
IP address blocks:        45.7.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ae:88:8b:95:84:00:4a:35:4b:e6:b5:7f:de:37:b4:26:d3:42:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96
        Validity
            Not Before: Aug 22 13:10:46 2022 GMT
            Not After : Aug 21 13:15:46 2023 GMT
        Subject: CN=D4E0B4BF603F600A794295C579623DC4303D1D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:4c:a1:37:89:b0:1a:f4:12:de:8b:4f:1e:
                    0e:f1:39:f4:f2:7d:03:2f:0e:e3:90:bf:c0:07:25:
                    b6:53:17:f6:d6:28:e4:18:9a:ee:eb:34:b1:4a:df:
                    f5:b6:8c:d4:77:0a:01:5f:2f:23:2a:9f:02:10:00:
                    ac:ee:36:b3:7b:ea:dc:f3:e2:7a:9f:2d:d5:47:21:
                    5e:0c:5c:1b:ec:8e:a0:af:5e:eb:2c:64:8f:23:cb:
                    bf:68:13:c8:79:d2:f9:f0:0d:1b:cf:49:a7:7e:2e:
                    5b:80:cd:17:55:ad:1a:63:b6:85:e2:db:95:91:96:
                    00:fe:4f:62:de:f4:bb:00:f1:bd:ec:9a:33:bc:fb:
                    67:7b:32:ba:f1:10:63:0c:f4:be:44:66:de:bd:d0:
                    55:2d:c0:63:ac:c6:01:ab:63:31:fb:5c:b2:ac:d7:
                    d1:9f:a1:2e:f5:84:5d:3d:00:cf:f9:06:da:29:de:
                    04:c3:13:f7:4d:55:99:72:7c:cb:44:99:39:ce:db:
                    51:f9:32:df:5b:6f:71:d7:41:24:92:d2:93:61:40:
                    0b:0e:2c:c3:7f:65:57:0d:2c:90:e3:22:5c:8c:14:
                    06:f4:f5:6e:b3:64:0c:f7:74:37:14:ca:ae:e1:4c:
                    aa:42:54:c3:9c:5d:c1:ca:a2:a1:ed:de:e8:cc:31:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:B4:BF:60:3F:60:0A:79:42:95:C5:79:62:3D:C4:30:3D:1D:3A
            X509v3 Authority Key Identifier:
                keyid:4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/34352e372e3139322e302f32322d3234203d3e20323636363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:03:af:63:f7:01:52:e9:c1:2b:ca:8d:83:d0:38:0c:52:0b:
         df:81:d5:87:9c:b3:ee:a0:4f:b6:da:96:c3:5f:2c:d2:27:0a:
         d0:11:ea:d1:2c:0b:8d:06:69:56:95:14:20:71:b8:8e:4d:0c:
         94:b3:a4:44:ac:0e:48:30:5e:73:df:77:88:5c:c3:69:4e:ff:
         13:3f:3c:b6:1b:98:b8:75:d6:55:1f:80:01:c5:f9:52:51:68:
         23:d5:08:6c:25:9f:0a:67:5c:2f:7f:08:41:3f:29:42:ec:c3:
         7e:a6:1f:23:f9:f1:c5:52:d1:83:2f:f4:e8:84:0e:bd:95:33:
         cc:d1:7d:d7:ee:1a:71:ed:75:11:36:29:09:38:ee:90:e2:6a:
         0c:5c:2e:0f:62:0d:aa:e1:f6:8f:6b:91:c6:dc:1a:ff:7e:59:
         b7:ef:a8:4c:f7:82:f4:8e:d6:3b:4c:38:a6:5c:ed:30:05:da:
         59:56:ec:df:23:ba:74:f2:0a:e6:28:b6:c8:6a:c5:cf:0a:34:
         8a:0f:16:08:75:b1:02:88:8a:50:18:14:f7:d6:72:08:1b:c6:
         bb:0b:25:85:44:9e:cb:4d:82:a2:a8:8c:cd:c1:c0:d9:d2:e7:
         64:35:39:72:ea:b8:86:54:0f:34:fc:65:f2:a9:07:6f:95:0c:
         9f:f4:da:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:10 2023 by rpki-client on console-fra.rpki-client.org