Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e35302e302f32342d3234203d3e20323639333139.roa
File:                     34352e3138332e35302e302f32342d3234203d3e20323639333139.roa (raw, json)
Hash identifier:          QN2elDzxjDRlPFhkPF7OihbG28qrQjrNKW2vIGiHGkA=
Subject key identifier:   AD:A5:BF:B3:08:BF:15:EE:AD:39:30:B5:2B:82:34:5F:93:1F:EC:59
Certificate issuer:       /CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
Certificate serial:       512C5E0C3B743A82A3F558281CE4C79F778E8251
Authority key identifier: C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e35302e302f32342d3234203d3e20323639333139.roa
Signing time:             Tue 18 Jul 2023 13:00:03 +0000
ROA not before:           Tue 18 Jul 2023 12:55:03 +0000
ROA not after:            Tue 16 Jul 2024 13:00:03 +0000
asID:                     269319
IP address blocks:        45.183.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2c:5e:0c:3b:74:3a:82:a3:f5:58:28:1c:e4:c7:9f:77:8e:82:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C41D2BFB228D4832AB8ECF61DD7DA611412621CF
        Validity
            Not Before: Jul 18 12:55:03 2023 GMT
            Not After : Jul 16 13:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1c:69:a9:61:d0:60:cb:7d:32:b7:5c:36:56:
                    b6:81:88:e9:b9:ff:d3:c5:0b:c8:00:3c:ea:96:c0:
                    57:6b:5c:b3:a6:f7:ac:f0:b4:93:3a:90:11:ef:f2:
                    ce:9a:7c:31:72:03:09:dc:1d:6f:ec:47:33:4b:e3:
                    c1:ac:0c:f5:cc:79:72:e6:fc:fe:ca:a0:c6:10:4d:
                    cf:51:f1:b9:4d:8f:0a:d1:c6:39:31:81:be:7e:65:
                    e7:56:bf:4e:9c:09:83:b7:3b:1c:e4:d1:31:a0:8a:
                    68:25:e0:67:ae:48:7a:d9:7b:97:56:b2:f1:f0:57:
                    70:27:ee:bb:14:95:13:cc:b1:5e:51:07:b1:e8:dd:
                    0e:49:6f:f1:70:ae:1c:bc:ae:23:a8:9a:05:90:5d:
                    a7:eb:7d:50:14:5e:24:dd:40:35:80:05:55:60:34:
                    74:7d:fd:0c:b1:89:c2:54:03:0a:8d:c3:4d:f0:49:
                    d1:c1:65:42:d1:cf:07:4c:19:b9:9f:57:47:c2:58:
                    97:3d:7d:c2:7a:86:72:72:6f:0b:e7:75:65:0f:0f:
                    5c:23:e5:b5:d7:58:a7:dd:7f:c2:e5:e6:10:35:8c:
                    a0:d3:ce:f2:c8:e1:fe:8a:64:9e:d8:98:ca:97:2e:
                    4e:fc:0b:e7:1a:0b:26:20:b7:4b:88:ea:c5:13:81:
                    fc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A5:BF:B3:08:BF:15:EE:AD:39:30:B5:2B:82:34:5F:93:1F:EC:59
            X509v3 Authority Key Identifier:
                keyid:C4:1D:2B:FB:22:8D:48:32:AB:8E:CF:61:DD:7D:A6:11:41:26:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C41D2BFB228D4832AB8ECF61DD7DA611412621CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fgp6LvvyYrLUf4iBfuJjZHQctDKprS7HMya3SuGNByEN/0/34352e3138332e35302e302f32342d3234203d3e20323639333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:af:6e:bf:4c:9e:b9:17:f4:e0:1c:89:4f:54:31:dc:1c:
         7d:33:12:a9:d6:e0:3c:99:7b:bf:89:83:b7:20:b2:57:c1:a9:
         c8:a1:21:79:f6:37:54:fc:69:53:65:cb:52:b8:fc:f7:4a:94:
         86:89:a4:88:f1:43:9b:0a:db:5b:89:5e:92:c0:79:d5:4e:aa:
         a7:ae:c6:f1:b4:38:d1:b8:1b:ae:2e:b5:42:a2:d8:d1:9d:56:
         ff:2d:e1:8c:89:28:77:02:b7:6b:7e:5b:2b:e5:8b:1b:16:bf:
         84:bb:a5:a7:1c:57:f1:fc:52:b0:5d:08:67:ba:20:dc:f0:8c:
         3f:29:49:3a:28:34:08:3d:66:aa:16:b6:0e:8b:ed:06:20:d6:
         39:f9:06:01:bc:fc:81:6d:37:9b:01:70:82:d4:ff:1f:f6:3a:
         c3:24:36:87:8c:68:71:e2:c4:11:95:7b:cd:92:18:3b:ec:b4:
         2c:3f:00:1c:7a:c8:9e:12:10:23:fa:a2:79:2d:ff:7b:1e:1d:
         ac:86:2c:47:b5:20:12:e4:72:8c:a2:c8:d7:13:e7:34:18:8e:
         8f:0f:55:b4:2e:0d:90:7c:09:e7:ad:83:83:5c:74:67:ec:54:
         32:46:10:43:af:ef:d3:96:9f:ea:57:c5:5e:5d:aa:25:45:c6:
         64:1b:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org