Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34382e302f32322d3232203d3e20323639333139.roa
File:                     34352e3138332e34382e302f32322d3232203d3e20323639333139.roa (raw, json)
Hash identifier:          Py/OJxHFs+P0o9U8oXdvLJPYM3vQ+BKSWuPHu71ugA0=
Subject key identifier:   13:25:04:27:98:B0:69:5F:71:18:A3:90:3C:B2:1D:C6:55:32:B4:EE
Certificate issuer:       /CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
Certificate serial:       71EE4E92BB5C953D407360AD992D4C786409D57F
Authority key identifier: C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34382e302f32322d3232203d3e20323639333139.roa
Signing time:             Tue 18 Jul 2023 13:00:01 +0000
ROA not before:           Tue 18 Jul 2023 12:55:01 +0000
ROA not after:            Tue 16 Jul 2024 13:00:01 +0000
asID:                     269319
IP address blocks:        45.183.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ee:4e:92:bb:5c:95:3d:40:73:60:ad:99:2d:4c:78:64:09:d5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
        Validity
            Not Before: Jul 18 12:55:01 2023 GMT
            Not After : Jul 16 13:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:6b:c8:78:10:11:70:cc:13:e4:7c:67:7a:
                    d6:aa:0f:d5:27:4d:a7:14:77:53:87:45:6b:49:52:
                    79:50:31:bc:67:fe:64:da:5a:88:8f:40:9b:e8:e6:
                    1f:94:23:7c:2c:1e:80:39:0f:ff:fb:1f:61:c7:2a:
                    61:2c:7c:f0:e3:76:c3:65:17:32:82:2d:b5:86:9e:
                    18:6d:0c:14:b8:c5:52:73:82:9f:a8:40:ef:73:8a:
                    27:7a:53:9a:b7:18:86:82:b6:45:f9:61:20:98:af:
                    d3:cc:d6:5b:cd:da:65:09:eb:96:3d:2d:89:78:7e:
                    2f:2e:4c:99:13:16:72:51:34:bd:eb:5b:3a:c0:5b:
                    a9:1f:e1:e0:7a:c7:f2:4d:7a:c6:96:b7:aa:85:a7:
                    8b:5e:59:3a:92:3e:85:b6:0a:89:ae:7a:2e:59:fb:
                    74:0a:5e:57:99:4c:af:ea:ee:3b:5b:2a:76:92:7d:
                    94:b4:49:12:a1:ac:ed:95:f6:ac:10:30:90:4a:88:
                    78:8c:d1:b0:6e:e2:08:79:0e:0c:8a:ee:54:54:66:
                    89:0f:df:3f:77:f1:18:5c:34:35:cc:7f:b6:41:2b:
                    a4:a9:db:62:e0:65:68:7d:2d:4e:62:9e:7a:a3:ff:
                    b1:3b:f1:57:8d:ce:55:17:fb:03:d6:82:35:b3:e9:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:25:04:27:98:B0:69:5F:71:18:A3:90:3C:B2:1D:C6:55:32:B4:EE
            X509v3 Authority Key Identifier:
                keyid:C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e34382e302f32322d3232203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:20:8e:cb:1a:52:4f:47:dc:e2:81:07:ab:53:c4:a0:6b:a9:
         cd:10:44:53:c5:44:34:ee:fc:ad:4f:47:58:35:a8:aa:b1:a8:
         ca:8f:7e:83:8e:ef:6d:8b:30:54:0f:97:6f:d9:74:cf:41:15:
         cb:a9:42:bb:41:b4:5f:57:3e:b7:5f:ea:20:2b:05:d4:72:69:
         2b:04:67:4b:ad:6c:ec:dc:ee:96:0b:6b:5c:af:9e:e7:2b:12:
         2e:e0:b1:a1:68:ee:18:4f:c4:f6:43:ae:0b:49:12:6f:1f:47:
         62:53:f2:17:0d:fe:de:26:af:62:36:45:92:b3:35:c4:3d:17:
         e4:b2:1e:5e:c9:cf:7c:f1:9b:81:99:04:5c:14:d5:1b:cd:94:
         4b:90:b9:e5:2d:45:24:0e:62:cd:99:8f:dc:91:59:3d:e9:5a:
         31:e3:b7:03:d4:fc:fe:fc:55:d8:7d:6c:70:87:84:c1:e6:90:
         02:8e:ed:fe:0e:87:02:d6:ef:db:74:3d:c0:f1:a0:09:83:10:
         48:0d:fa:59:2d:f7:16:34:a8:eb:3b:6d:a0:9d:2c:0c:56:a5:
         b7:d1:14:88:db:71:f4:33:2f:2d:a7:d9:c3:b5:8c:06:31:d7:
         18:cc:85:7b:1b:7f:9f:8d:55:33:e5:44:65:98:fb:61:5f:c4:
         5f:5f:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org