Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/34352e3138352e34342e302f32322d3234203d3e20323639333537.roa
File:                     34352e3138352e34342e302f32322d3234203d3e20323639333537.roa (raw, json)
Hash identifier:          5A5G0Yyfy0YVyn+/O9bdcKSGbpxvlX8JDTXzgOnNH/Q=
Subject key identifier:   17:35:78:70:88:93:51:51:1B:2B:37:CC:28:AB:1B:1F:AF:8F:FA:2B
Certificate issuer:       /CN=196626D2321B52D68BEAF929C0A983718B9738C5
Certificate serial:       6AE34E9E0349D7E6B14B6B4C40D22745F3190B02
Authority key identifier: 19:66:26:D2:32:1B:52:D6:8B:EA:F9:29:C0:A9:83:71:8B:97:38:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/196626D2321B52D68BEAF929C0A983718B9738C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/34352e3138352e34342e302f32322d3234203d3e20323639333537.roa
Signing time:             Fri 22 Sep 2023 18:05:21 +0000
ROA not before:           Fri 22 Sep 2023 18:00:21 +0000
ROA not after:            Fri 20 Sep 2024 18:05:21 +0000
asID:                     269357
IP address blocks:        45.185.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e3:4e:9e:03:49:d7:e6:b1:4b:6b:4c:40:d2:27:45:f3:19:0b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196626D2321B52D68BEAF929C0A983718B9738C5
        Validity
            Not Before: Sep 22 18:00:21 2023 GMT
            Not After : Sep 20 18:05:21 2024 GMT
        Subject: CN=17357870889351511B2B37CC28AB1B1FAF8FFA2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:e5:90:ff:3f:9d:c6:f6:f6:4a:44:4a:c5:
                    04:c4:e4:39:8b:12:ba:f4:f0:11:1f:ea:aa:b4:88:
                    f7:52:e0:c4:47:eb:4f:4c:bd:bd:05:91:eb:a3:3c:
                    70:d7:e8:cd:47:3d:86:4b:20:06:d6:77:45:fa:ee:
                    c4:71:76:de:2e:cd:ff:44:39:29:dc:b9:0f:83:e4:
                    fa:98:c7:06:cb:cb:db:b1:d3:cc:2d:fc:01:f0:b1:
                    4c:83:99:a6:a8:2c:12:76:26:a2:9e:9d:97:34:30:
                    96:53:6b:82:f3:2e:7a:de:26:a5:ff:b5:fc:fe:2b:
                    0e:6d:fc:da:34:aa:29:1b:68:21:63:76:2e:d5:ea:
                    f2:86:17:47:56:71:a8:6c:ac:92:ae:8f:be:cf:89:
                    73:b6:12:57:b1:92:03:34:fc:5e:04:21:92:8c:e0:
                    4c:bb:45:13:65:cc:53:c6:13:6a:7a:76:2f:04:86:
                    56:c8:ec:7a:13:de:ef:a2:ab:3c:97:89:25:04:50:
                    4c:43:85:f2:6a:ad:00:0f:d4:62:c3:42:8c:e6:3d:
                    30:0b:34:27:45:b5:7e:97:f7:58:bd:b7:6d:c8:86:
                    1a:3b:ea:b9:92:fd:a8:96:27:f9:00:e5:90:2f:1e:
                    7d:f1:89:b6:46:89:e5:e6:b1:b0:99:f5:2e:6e:c3:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:35:78:70:88:93:51:51:1B:2B:37:CC:28:AB:1B:1F:AF:8F:FA:2B
            X509v3 Authority Key Identifier:
                keyid:19:66:26:D2:32:1B:52:D6:8B:EA:F9:29:C0:A9:83:71:8B:97:38:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/196626D2321B52D68BEAF929C0A983718B9738C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/196626D2321B52D68BEAF929C0A983718B9738C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/34352e3138352e34342e302f32322d3234203d3e20323639333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:ce:30:0c:90:9b:bf:6d:7b:e0:49:24:35:a9:90:48:12:b0:
         e0:da:8a:29:79:b0:97:d1:1c:21:fc:e0:23:86:07:be:2e:b1:
         ce:4b:fa:be:ac:c3:da:00:ba:fd:f4:78:28:19:1b:ef:41:05:
         27:5a:d7:66:12:e4:20:00:bf:c5:3f:0a:b1:b7:65:36:b6:dc:
         59:56:8a:1d:02:ec:3a:b6:3c:d1:3f:11:70:11:29:53:4f:72:
         28:b7:69:4a:8a:e7:8c:7d:ad:7e:37:16:28:70:4b:a0:42:94:
         74:54:af:d8:5e:3f:63:43:b1:da:0f:83:4e:69:00:1a:0d:ce:
         7d:d9:1c:5d:8c:c5:2f:0f:87:93:75:f2:a5:6e:55:5d:3d:6e:
         02:9f:d4:74:5d:2b:78:21:16:57:9e:9b:9a:b0:81:6e:47:36:
         ba:79:48:7c:4c:ba:e1:7f:5c:26:a2:b5:9e:d7:9b:18:9b:dc:
         3f:8c:09:2d:04:b5:97:01:22:05:53:60:71:52:3a:0b:1e:7e:
         65:cb:6a:a3:c3:0b:ce:d2:50:dd:c5:21:30:0d:a7:32:8d:89:
         33:d9:da:dd:86:ff:eb:e3:1a:82:5b:87:fd:0b:37:6d:cb:48:
         1b:3a:fa:4a:20:3c:32:1b:28:f7:a8:bc:d1:5f:85:57:53:8c:
         c1:52:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org