Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235322e302f32322d3232203d3e203631383434.roa
File:                     34352e3137372e3235322e302f32322d3232203d3e203631383434.roa (raw, json)
Hash identifier:          Yie9XC5n5vsxNe+irds8ntAmjc0y8o0IM4M/UwlVNy0=
Subject key identifier:   66:03:6B:24:54:43:8B:86:7E:AF:A2:8E:77:2C:99:93:63:96:23:2F
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       05F9C4937415F652E9AF3D09A1F17A79AA3661B8
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235322e302f32322d3232203d3e203631383434.roa
Signing time:             Thu 28 Sep 2023 00:42:00 +0000
ROA not before:           Thu 28 Sep 2023 00:37:00 +0000
ROA not after:            Thu 26 Sep 2024 00:42:00 +0000
asID:                     61844
IP address blocks:        45.177.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f9:c4:93:74:15:f6:52:e9:af:3d:09:a1:f1:7a:79:aa:36:61:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Sep 28 00:37:00 2023 GMT
            Not After : Sep 26 00:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:c9:d5:c3:75:9a:f7:59:70:0c:8c:e6:58:
                    5e:bd:96:8b:48:89:ee:79:3e:96:b5:f2:e8:00:21:
                    d9:af:20:16:53:4a:fa:a7:71:e0:41:4d:4c:4e:fe:
                    5a:42:5c:69:67:ba:95:ac:e8:19:2d:cf:9f:46:c3:
                    28:6e:25:c7:f3:65:67:95:be:7a:4e:52:b9:5c:c9:
                    ee:23:5f:a3:85:7a:b4:3f:ef:ea:7d:00:ea:51:7b:
                    32:b9:73:37:93:24:fa:61:14:f4:64:1d:2e:3e:e0:
                    ae:67:a3:ea:71:70:fd:bf:8c:b9:fa:36:c8:1a:e1:
                    29:6d:b8:a0:2f:36:45:60:bc:ed:4c:97:80:f4:33:
                    e0:3d:e3:e5:da:e4:ad:55:7c:9a:e0:f8:f9:3b:2d:
                    5b:7e:46:13:aa:2f:93:e0:7d:91:6e:84:bd:bb:90:
                    4e:0c:3e:5f:1c:ba:05:e3:1c:d3:7b:05:31:05:e1:
                    c3:30:19:9c:91:2b:e7:2f:10:ab:92:1e:19:bf:0c:
                    64:bf:7a:9a:c0:62:b0:f2:10:04:1a:1a:8d:2b:76:
                    24:ad:b1:f9:4f:50:c9:80:a6:71:b1:46:e5:c6:cb:
                    fd:03:e6:d6:f3:f6:7a:8a:c1:71:61:77:14:3a:1b:
                    0f:69:83:ad:0b:01:c6:b8:42:c1:b5:78:d0:d4:f7:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:6B:24:54:43:8B:86:7E:AF:A2:8E:77:2C:99:93:63:96:23:2F
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137372e3235322e302f32322d3232203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:28:f0:d6:4f:70:83:b3:95:79:e4:be:98:ca:65:9d:3a:cb:
         38:8d:3a:d3:49:18:2d:df:9b:ff:49:4a:1d:5b:48:25:d7:17:
         e2:d4:6a:b1:eb:82:2f:64:4a:7b:e0:f8:e4:70:2b:1a:bd:d0:
         85:59:30:25:a4:7e:30:fb:57:33:be:c0:b6:1a:dc:45:10:c1:
         c5:e9:39:af:b6:48:a9:3c:53:fc:99:05:1c:30:8c:11:68:2d:
         c7:8e:34:b9:7c:b3:db:6d:e1:8c:e1:3b:33:13:48:70:f0:55:
         2a:40:90:7c:11:7e:9c:5a:ec:7f:b4:48:7d:6c:a2:eb:22:fa:
         2f:7c:94:da:6c:ad:8e:31:df:3b:6b:ca:f4:d3:0c:2d:21:74:
         c3:03:b7:31:7f:c2:5e:30:c8:4f:42:f7:ad:2a:52:cd:9c:5b:
         05:07:c3:da:d1:1c:c1:e6:ae:15:09:28:b2:f4:05:d8:58:06:
         89:0c:d6:2c:82:62:9e:c2:e2:53:5b:56:d4:d2:97:73:f4:14:
         4e:07:45:eb:6f:e5:66:35:b4:a0:19:24:21:6e:b1:26:8e:78:
         b1:97:64:63:c5:17:31:42:fa:90:ce:3f:82:0f:fc:4e:7c:33:
         81:37:15:30:70:41:68:ab:90:70:54:07:a0:f6:67:e4:4f:ed:
         70:82:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org