Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32302e302f32322d3232203d3e203631383434.roa
File:                     34352e3137392e32302e302f32322d3232203d3e203631383434.roa (raw, json)
Hash identifier:          HdO7R1VFUJwwra5+a/iAzKRP/PJWMLPy63+lldDc92M=
Subject key identifier:   FD:32:08:60:51:5A:DF:A0:BA:8F:15:EB:2C:2E:FE:96:15:39:74:3A
Certificate issuer:       /CN=BCD88303CE2E897D34FC20773375908050FB299E
Certificate serial:       255B9FF66701CD68A7FB5400ABA66E2018631E5E
Authority key identifier: BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32302e302f32322d3232203d3e203631383434.roa
Signing time:             Tue 22 Aug 2023 18:26:25 +0000
ROA not before:           Tue 22 Aug 2023 18:21:25 +0000
ROA not after:            Tue 20 Aug 2024 18:26:25 +0000
asID:                     61844
IP address blocks:        45.179.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5b:9f:f6:67:01:cd:68:a7:fb:54:00:ab:a6:6e:20:18:63:1e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD88303CE2E897D34FC20773375908050FB299E
        Validity
            Not Before: Aug 22 18:21:25 2023 GMT
            Not After : Aug 20 18:26:25 2024 GMT
        Subject: CN=3082010A028201010098B8DBEDE502CA72A3DF9DC9875021814929ABB70CF66C2FC382D6B8183B64A3189C2DD08E3CE7A309790A838BA1C47F8DE0C41E5D00A13A47E58E0340743FF3C80FFC8410D382E32BD22B842CE216D476BED201E6BD103C0A99FA959E0B160CE15B7BEBDA64178ABD9A49C46139B100EA4E63F45999588B3ED25D3567032AB2EE4429339C550D21F9F748BE3C1A9659D5B9F53180B61395F361EDB651746B7694C5671ECD4C6FFE73158838D3E758728F504DF93ACDC36E265E53BBFC518573BADB6CCD64BBBE98598DA69F1F7C2E25B33378A8C97EE98D4EEEA293B57C2D03C5E30A482A1F51CD878CF0B88E03672A3136AE8349140DEA7A444C40B120CB0B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:db:ed:e5:02:ca:72:a3:df:9d:c9:87:50:
                    21:81:49:29:ab:b7:0c:f6:6c:2f:c3:82:d6:b8:18:
                    3b:64:a3:18:9c:2d:d0:8e:3c:e7:a3:09:79:0a:83:
                    8b:a1:c4:7f:8d:e0:c4:1e:5d:00:a1:3a:47:e5:8e:
                    03:40:74:3f:f3:c8:0f:fc:84:10:d3:82:e3:2b:d2:
                    2b:84:2c:e2:16:d4:76:be:d2:01:e6:bd:10:3c:0a:
                    99:fa:95:9e:0b:16:0c:e1:5b:7b:eb:da:64:17:8a:
                    bd:9a:49:c4:61:39:b1:00:ea:4e:63:f4:59:99:58:
                    8b:3e:d2:5d:35:67:03:2a:b2:ee:44:29:33:9c:55:
                    0d:21:f9:f7:48:be:3c:1a:96:59:d5:b9:f5:31:80:
                    b6:13:95:f3:61:ed:b6:51:74:6b:76:94:c5:67:1e:
                    cd:4c:6f:fe:73:15:88:38:d3:e7:58:72:8f:50:4d:
                    f9:3a:cd:c3:6e:26:5e:53:bb:fc:51:85:73:ba:db:
                    6c:cd:64:bb:be:98:59:8d:a6:9f:1f:7c:2e:25:b3:
                    33:78:a8:c9:7e:e9:8d:4e:ee:a2:93:b5:7c:2d:03:
                    c5:e3:0a:48:2a:1f:51:cd:87:8c:f0:b8:8e:03:67:
                    2a:31:36:ae:83:49:14:0d:ea:7a:44:4c:40:b1:20:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:32:08:60:51:5A:DF:A0:BA:8F:15:EB:2C:2E:FE:96:15:39:74:3A
            X509v3 Authority Key Identifier:
                keyid:BC:D8:83:03:CE:2E:89:7D:34:FC:20:77:33:75:90:80:50:FB:29:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/BCD88303CE2E897D34FC20773375908050FB299E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCD88303CE2E897D34FC20773375908050FB299E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/34352e3137392e32302e302f32322d3232203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:c7:15:2b:d4:8e:55:8e:b9:8e:ff:ce:1a:3c:b5:03:ba:
         f9:3b:7a:bc:2a:61:f5:6b:fe:de:b8:d1:02:fb:d0:c6:6b:08:
         d2:d3:18:bc:1c:b5:70:bf:8b:94:c1:79:8f:63:58:29:e4:29:
         0d:a8:bc:45:bf:de:01:98:05:53:29:63:22:15:13:9f:4a:f2:
         59:11:a1:66:2e:11:cb:54:07:c5:83:3f:fe:81:63:fc:be:a0:
         b8:b7:2f:9c:91:48:f7:9f:0b:41:f6:5e:28:67:c6:89:39:2b:
         c5:ca:7c:aa:b3:72:b7:f3:dc:c7:6d:20:18:a4:5b:64:4a:a8:
         db:57:a5:b6:2a:05:31:b2:07:b5:2d:b9:70:b9:22:26:b8:8f:
         7c:8e:ff:63:8f:1c:d8:4e:32:9e:78:a0:4f:45:1a:35:20:b0:
         f4:53:15:1c:aa:73:c9:94:17:8e:7f:6c:51:c8:92:e8:4a:16:
         3e:5f:31:58:b1:c8:8f:74:e7:eb:59:3d:6b:1e:be:32:98:1e:
         f7:91:63:6d:c1:3b:c1:a5:05:af:c5:98:88:aa:52:0b:e9:ce:
         cd:5c:77:af:34:e5:6d:f3:34:95:b0:89:3b:f9:4c:a5:97:58:
         69:cf:fa:3a:c7:da:d4:dd:ed:36:10:e9:5c:ba:a6:b9:da:3b:
         65:58:de:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org