Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/34352e3138312e39362e302f32322d3332203d3e20323639313739.roa
File:                     34352e3138312e39362e302f32322d3332203d3e20323639313739.roa (raw, json)
Hash identifier:          VQNoINtL18sW1AqK75ZSCOGANus3PKvk+DnIgGuP14o=
Subject key identifier:   11:06:12:61:8D:16:86:54:20:DC:EA:AB:2F:EF:72:45:09:A1:9D:99
Certificate issuer:       /CN=C25D54891EA6F0D39D38CB43F32502E47F952DA3
Certificate serial:       0D3F9E34A2507B4B14D42A882EAE839DBFD0291E
Authority key identifier: C2:5D:54:89:1E:A6:F0:D3:9D:38:CB:43:F3:25:02:E4:7F:95:2D:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C25D54891EA6F0D39D38CB43F32502E47F952DA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/34352e3138312e39362e302f32322d3332203d3e20323639313739.roa
Signing time:             Tue 29 Aug 2023 19:02:48 +0000
ROA not before:           Tue 29 Aug 2023 18:57:48 +0000
ROA not after:            Tue 27 Aug 2024 19:02:48 +0000
asID:                     269179
IP address blocks:        45.181.96.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3f:9e:34:a2:50:7b:4b:14:d4:2a:88:2e:ae:83:9d:bf:d0:29:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C25D54891EA6F0D39D38CB43F32502E47F952DA3
        Validity
            Not Before: Aug 29 18:57:48 2023 GMT
            Not After : Aug 27 19:02:48 2024 GMT
        Subject: CN=110612618D16865420DCEAAB2FEF724509A19D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:80:cf:be:85:11:ee:08:fe:5d:56:76:89:
                    e1:f1:93:6d:88:6b:15:68:58:23:f4:9a:12:06:0d:
                    d1:ac:da:13:b4:2c:c7:bb:9a:0c:49:c3:c4:81:48:
                    8e:c8:81:28:dd:d4:64:53:90:41:3d:c3:66:7d:47:
                    ed:cb:7b:e0:e1:b6:b0:75:8d:b6:7b:c7:dd:a4:3f:
                    f9:20:58:cf:27:e4:99:45:44:f2:4c:73:01:57:8e:
                    93:76:29:44:53:c9:59:c6:73:97:c7:5a:76:a2:95:
                    31:9d:c0:23:86:a8:3d:e7:1a:53:01:56:67:35:b4:
                    8a:25:1c:b4:60:92:c3:76:b7:7c:a2:48:25:0a:8f:
                    a2:26:41:41:12:b0:27:88:49:30:b6:c1:33:7f:ea:
                    6c:3b:e8:dc:3d:50:fa:9b:f9:60:fa:da:49:e3:ad:
                    3d:aa:48:4e:aa:99:a4:8c:ba:95:3a:6c:6e:28:95:
                    00:87:7b:0b:89:9c:71:0c:10:0d:24:9c:f5:08:75:
                    15:af:48:f0:34:99:0a:63:5b:4f:f6:e0:86:00:18:
                    32:77:4a:2c:6f:c7:fe:56:bb:77:e9:f9:1d:4a:9b:
                    b8:33:f6:22:e2:c6:c9:2d:61:61:ba:ed:78:0d:1b:
                    19:f2:53:f9:12:a8:b9:d5:41:00:02:c9:3c:5d:6a:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:06:12:61:8D:16:86:54:20:DC:EA:AB:2F:EF:72:45:09:A1:9D:99
            X509v3 Authority Key Identifier:
                keyid:C2:5D:54:89:1E:A6:F0:D3:9D:38:CB:43:F3:25:02:E4:7F:95:2D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/C25D54891EA6F0D39D38CB43F32502E47F952DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C25D54891EA6F0D39D38CB43F32502E47F952DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCCVFNhPGT8NnqsFHAVP93Cw5pessgHnLCGCLmVj3cwL/0/34352e3138312e39362e302f32322d3332203d3e20323639313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:27:c8:18:19:cd:ad:a8:01:eb:52:83:84:46:2b:13:96:32:
         eb:b2:98:e7:5c:c2:4d:b2:52:94:96:d1:22:fd:6b:df:45:3f:
         3d:f7:ef:aa:1b:0d:7a:d4:f2:b8:42:6b:97:84:af:89:19:9f:
         5b:bd:94:b7:fd:5a:f2:be:df:78:09:36:0e:8e:b0:71:f5:59:
         3e:bc:09:1a:19:bd:94:fc:74:d9:ed:23:52:bd:be:ec:e4:35:
         57:ca:f0:3a:d5:cd:be:37:48:18:eb:69:1e:69:cd:43:70:8b:
         4b:12:c5:03:cb:d5:02:df:db:41:b5:b6:72:1b:c4:a7:81:02:
         21:85:e9:b4:05:b9:c0:d7:85:2f:c2:f9:ef:89:c5:0e:b5:1d:
         92:35:b2:02:62:47:2c:be:85:d8:da:cc:a2:28:03:4c:ba:76:
         50:a7:b3:63:c3:58:16:15:b3:f0:32:ac:97:e1:5a:5b:08:46:
         ac:8d:93:52:52:87:56:09:94:3a:cf:e8:9f:38:1c:63:66:a4:
         3d:89:a9:ab:49:06:39:df:4d:e0:c6:7d:45:c5:1e:9e:9e:a9:
         f5:14:cb:ee:a9:99:12:fa:9a:33:2f:f9:5e:82:a1:6a:db:9e:
         f2:64:0e:e4:da:d5:3d:31:78:a1:7b:49:be:4e:1c:43:fe:04:
         e3:0f:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org