Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/0/34352e3233302e3135362e302f32322d3234203d3e20323637313634.roa
File:                     34352e3233302e3135362e302f32322d3234203d3e20323637313634.roa (raw, json)
Hash identifier:          m57ul8nMj5rdkam78XlRvbeikSN91o7mqLmUmZoKtgw=
Subject key identifier:   BD:85:7E:C7:21:AC:D1:CB:7E:02:E2:66:26:17:D6:4F:54:76:F1:03
Certificate issuer:       /CN=0EBDAB27D6E11B1CFA885FC77E1DDB193D619748
Certificate serial:       11C39B7723A4FD6C2A044394B547FB62B3E874E8
Authority key identifier: 0E:BD:AB:27:D6:E1:1B:1C:FA:88:5F:C7:7E:1D:DB:19:3D:61:97:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/0/34352e3233302e3135362e302f32322d3234203d3e20323637313634.roa
Signing time:             Mon 30 Oct 2023 14:43:23 +0000
ROA not before:           Mon 30 Oct 2023 14:38:23 +0000
ROA not after:            Mon 28 Oct 2024 14:43:23 +0000
asID:                     267164
IP address blocks:        45.230.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c3:9b:77:23:a4:fd:6c:2a:04:43:94:b5:47:fb:62:b3:e8:74:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EBDAB27D6E11B1CFA885FC77E1DDB193D619748
        Validity
            Not Before: Oct 30 14:38:23 2023 GMT
            Not After : Oct 28 14:43:23 2024 GMT
        Subject: CN=BD857EC721ACD1CB7E02E2662617D64F5476F103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:18:f0:ad:1b:f1:56:ad:0b:3a:cd:e6:1c:
                    15:dd:73:91:a6:ac:87:07:fa:01:fd:5d:5b:39:96:
                    12:09:5c:57:16:6d:0c:c7:4b:39:d7:58:8a:ee:18:
                    6e:a5:21:e1:96:5d:9a:ec:c3:bb:a8:65:b3:f9:8b:
                    0f:43:b1:8c:ee:a4:e2:6b:a4:5a:1b:c3:d1:15:b1:
                    2d:c8:f4:82:05:a0:ac:d7:b9:0f:c1:82:a0:25:00:
                    d2:87:fe:57:d3:5c:2e:31:6f:79:d8:56:24:b2:3e:
                    91:9c:43:58:3e:2c:59:b0:55:35:98:34:c6:e8:95:
                    37:11:d6:ce:e1:3f:b6:4d:1b:c4:71:66:af:44:36:
                    cb:1e:27:25:7a:15:4f:e3:26:c0:a7:ca:58:e1:b4:
                    17:3a:8c:f1:28:17:49:5e:ac:02:86:76:17:d4:3c:
                    3c:68:50:4c:ed:c4:af:a5:e7:c5:a4:26:83:a0:93:
                    cb:e2:15:4d:70:50:ff:ee:a0:c4:81:0a:46:38:a1:
                    2b:e7:8b:20:38:63:eb:62:64:04:92:10:66:65:88:
                    f6:bf:5c:ed:37:b3:c8:1a:0a:09:75:72:3e:fe:91:
                    b5:9f:67:3a:a5:7c:15:3a:44:f5:6b:25:8e:7d:cd:
                    48:48:83:10:b6:a2:22:0e:75:b5:93:e5:c4:d8:72:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:85:7E:C7:21:AC:D1:CB:7E:02:E2:66:26:17:D6:4F:54:76:F1:03
            X509v3 Authority Key Identifier:
                keyid:0E:BD:AB:27:D6:E1:1B:1C:FA:88:5F:C7:7E:1D:DB:19:3D:61:97:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/0/0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0EBDAB27D6E11B1CFA885FC77E1DDB193D619748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/0/34352e3233302e3135362e302f32322d3234203d3e20323637313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:ab:d0:4d:21:5a:a6:9d:dd:43:c6:3a:0f:6d:87:bc:42:
         73:9a:23:a7:c8:4b:6a:b8:2f:f1:cb:db:de:06:42:8a:df:ad:
         bc:08:e3:47:1a:70:0c:a6:50:01:b0:09:55:b9:80:e5:2d:c3:
         88:40:ce:1e:43:e2:54:17:6f:61:87:0d:4b:16:70:63:11:4a:
         03:3b:5d:7a:7f:37:c1:01:ac:0b:5a:6e:93:3b:dc:ac:d4:3c:
         d0:87:87:52:35:92:57:8c:6a:06:d4:d1:df:1a:91:c8:92:9b:
         89:e6:04:38:b1:0f:2c:78:aa:50:e7:fe:1f:8f:5b:56:3d:4f:
         62:ae:2a:2f:85:04:fb:7f:4b:fe:2a:69:0d:ab:58:f1:73:e3:
         b1:82:61:8e:19:f0:5f:61:e8:9b:97:52:26:c4:10:d9:c1:83:
         b8:22:a0:da:53:bc:e0:a2:a7:24:4d:ae:fa:4e:5e:93:83:5a:
         c4:27:dc:06:dc:63:06:91:d2:c5:22:de:6c:d8:81:1b:bf:ed:
         27:48:cf:3e:2d:1f:96:a3:f0:00:12:c3:43:29:f5:7b:06:a3:
         92:9d:29:47:53:0e:5c:dc:eb:b3:d2:30:a4:5c:21:62:e1:99:
         f3:3a:17:ee:45:4a:1b:cf:6e:96:19:81:a5:41:04:be:83:0b:
         49:2b:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org