Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/34352e3138392e302e302f32322d3234203d3e20323639363438.roa
File:                     34352e3138392e302e302f32322d3234203d3e20323639363438.roa (raw, json)
Hash identifier:          lNVoS4+B06l8PBQarb2dLEXXMG1xW9pN9TP7HicpFhw=
Subject key identifier:   12:1F:47:8B:B9:B7:B3:3B:63:6B:B2:62:85:D3:BD:B7:40:DC:49:97
Certificate issuer:       /CN=A154EA318C648A7DB42706A6CD66BA031E6E0176
Certificate serial:       2FBA621FE28988D25EF60E3B13CE01E6C2DE0B84
Authority key identifier: A1:54:EA:31:8C:64:8A:7D:B4:27:06:A6:CD:66:BA:03:1E:6E:01:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A154EA318C648A7DB42706A6CD66BA031E6E0176.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/34352e3138392e302e302f32322d3234203d3e20323639363438.roa
Signing time:             Thu 21 Jul 2022 14:29:39 +0000
ROA not before:           Thu 21 Jul 2022 14:24:39 +0000
ROA not after:            Thu 20 Jul 2023 14:29:39 +0000
asID:                     269648
IP address blocks:        45.189.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ba:62:1f:e2:89:88:d2:5e:f6:0e:3b:13:ce:01:e6:c2:de:0b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A154EA318C648A7DB42706A6CD66BA031E6E0176
        Validity
            Not Before: Jul 21 14:24:39 2022 GMT
            Not After : Jul 20 14:29:39 2023 GMT
        Subject: CN=121F478BB9B7B33B636BB26285D3BDB740DC4997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:16:83:61:15:4a:d0:19:49:8a:b9:fe:e4:
                    02:5f:c6:b9:9c:51:38:43:5c:b4:ec:02:da:c7:37:
                    22:1c:92:17:e4:7b:bc:86:e9:3a:1f:06:44:44:b6:
                    cb:c0:45:f2:33:58:5a:51:cf:83:ef:6e:d5:65:1f:
                    49:be:c1:8a:eb:0e:00:b9:e8:e9:10:e5:6b:b5:07:
                    a1:50:92:01:a2:22:b8:ec:fc:87:ed:1b:1e:44:73:
                    6d:14:1d:e1:e1:d4:c0:09:19:69:10:3e:37:43:a5:
                    0e:da:c5:e3:0f:e2:f9:a6:0f:82:b6:98:1c:06:85:
                    60:af:14:3a:d3:c2:42:7b:bf:c8:88:3b:98:d0:06:
                    e0:5f:9b:18:2d:e0:01:a2:05:bb:32:d2:f5:c1:18:
                    11:d8:1d:09:0a:76:c2:71:c2:a1:ac:86:c2:43:5b:
                    a1:c6:d5:b5:6b:b7:27:52:eb:ed:04:f3:47:59:97:
                    7d:af:05:30:a1:e2:04:79:8a:35:40:f5:73:2e:7e:
                    3c:d5:f3:83:2f:a6:86:df:2b:9c:16:d9:8e:fd:14:
                    6f:c0:a6:b8:3c:5f:29:00:7b:cc:3e:95:6b:09:dc:
                    57:64:76:71:be:fe:eb:3e:70:55:63:a5:9b:a9:64:
                    f0:08:da:0c:f3:f9:a6:86:e3:f8:87:c0:a2:72:86:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1F:47:8B:B9:B7:B3:3B:63:6B:B2:62:85:D3:BD:B7:40:DC:49:97
            X509v3 Authority Key Identifier:
                keyid:A1:54:EA:31:8C:64:8A:7D:B4:27:06:A6:CD:66:BA:03:1E:6E:01:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/A154EA318C648A7DB42706A6CD66BA031E6E0176.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A154EA318C648A7DB42706A6CD66BA031E6E0176.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/34352e3138392e302e302f32322d3234203d3e20323639363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:27:96:28:8a:cf:23:53:1f:16:ff:c1:3d:9e:30:64:74:dd:
         e8:fc:25:ac:85:a8:9a:8a:46:28:c5:47:28:bd:eb:ad:00:7a:
         a0:1c:be:69:25:04:4f:eb:7b:72:76:90:79:75:1d:a5:ac:c9:
         49:3f:c4:48:18:79:b5:9d:0f:22:d0:9b:76:23:89:66:24:15:
         8b:b6:e8:09:3f:50:69:48:d8:36:80:60:ee:aa:6d:e8:1b:1c:
         75:3f:c8:85:a5:43:0d:cf:7a:94:9a:43:79:f7:97:44:e1:f9:
         7c:4a:13:e3:1d:f7:cd:1f:bf:42:42:15:ff:2e:a2:43:dc:a0:
         8f:d4:3b:bf:3d:58:af:07:b8:d4:0f:7a:e0:92:d8:6c:99:e1:
         30:03:91:dd:28:be:c3:c2:10:a3:f4:c1:91:80:bd:0c:5f:d5:
         1e:9c:73:ba:21:05:5a:5a:7f:2d:8e:fb:66:8c:f4:5d:61:cf:
         8a:43:e9:e9:fa:5c:b5:cb:c9:5e:d2:bd:e9:81:4b:ac:50:be:
         70:ea:1f:4d:69:6d:a3:fe:1c:6c:15:d4:05:e3:35:02:b1:1f:
         77:e3:f3:fd:e4:41:f1:91:0e:b8:68:67:73:f1:b0:42:20:22:
         63:c4:c6:80:96:85:35:4d:4a:66:e5:cd:d4:d6:4c:d0:ed:99:
         6c:dc:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org