Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa
File:                     34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (raw, json)
Hash identifier:          Rg+m6oHb/u5x0j410AC52RVhYp+c92TMTeB5OmYW194=
Subject key identifier:   5A:F9:98:30:BD:F3:85:57:F7:E3:C6:9D:A4:EF:99:56:E5:E9:51:0D
Certificate issuer:       /CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
Certificate serial:       2FAEC08034A7C6ACEFA96687508CCA745B2A8642
Authority key identifier: B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa
Signing time:             Tue 13 Feb 2024 23:58:00 +0000
ROA not before:           Tue 13 Feb 2024 23:53:00 +0000
ROA not after:            Tue 11 Feb 2025 23:58:00 +0000
asID:                     267546
IP address blocks:        45.166.212.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ae:c0:80:34:a7:c6:ac:ef:a9:66:87:50:8c:ca:74:5b:2a:86:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
        Validity
            Not Before: Feb 13 23:53:00 2024 GMT
            Not After : Feb 11 23:58:00 2025 GMT
        Subject: CN=5AF99830BDF38557F7E3C69DA4EF9956E5E9510D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:a4:cc:bd:5f:93:12:37:82:f6:95:36:f2:
                    37:26:54:28:8b:56:f7:73:17:10:48:a6:86:27:c5:
                    ab:b8:67:aa:e5:55:ce:fd:14:6c:f8:29:49:b4:c0:
                    23:1f:cb:c9:b4:cf:5b:9a:be:50:b9:6d:5d:04:28:
                    9c:0c:34:a1:c1:1d:14:af:13:b0:77:56:aa:89:86:
                    bd:db:c2:78:58:56:7a:c0:11:41:d2:52:72:e0:61:
                    4c:05:57:70:df:74:f6:7a:23:9e:b0:d1:85:72:62:
                    4c:98:54:36:ee:cd:b7:33:5a:81:d3:dc:15:0e:2f:
                    5f:da:44:83:da:e4:83:98:e4:89:80:4a:6b:6a:e0:
                    d9:4d:9a:c4:69:59:b7:b9:c9:97:bd:fa:75:a5:ba:
                    fe:bb:0b:fa:33:78:9a:87:53:53:20:e7:87:5b:16:
                    a5:f5:6d:24:a8:52:00:a1:72:e8:5f:98:d6:3a:16:
                    69:77:1c:32:cf:3d:68:9a:a6:af:42:54:a1:ac:4c:
                    87:44:cb:41:c3:47:7b:68:c2:4d:d0:3c:d1:46:99:
                    09:5d:54:30:86:7e:ce:99:c9:d5:73:6d:07:03:ce:
                    e9:dc:a6:dc:05:79:ea:ee:e4:db:30:a5:99:f7:cb:
                    57:df:f2:76:ee:76:14:77:f6:3a:a7:c1:5a:d4:98:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:98:30:BD:F3:85:57:F7:E3:C6:9D:A4:EF:99:56:E5:E9:51:0D
            X509v3 Authority Key Identifier:
                keyid:B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:0b:70:47:78:c8:c6:55:10:49:71:8b:7c:bd:09:22:38:
         54:4b:cf:57:ae:f6:c8:d1:33:b0:e4:c2:88:c3:27:b6:aa:b0:
         dc:b1:ea:6f:c9:1e:4b:09:8a:b9:16:d5:9d:28:d6:4d:26:d2:
         3f:bc:49:0f:f3:36:e3:de:cc:43:b9:57:d0:ff:f9:5d:bf:12:
         b4:0f:92:a0:b9:14:71:b1:b2:0c:c7:07:ea:20:98:d4:75:a4:
         84:1d:33:49:8a:86:78:0c:52:02:21:22:fe:9b:a2:81:1a:0a:
         f6:1d:5e:92:73:08:fe:a4:90:19:e2:49:69:ed:9b:55:e7:e7:
         c6:52:a9:10:9e:39:8c:92:9c:72:8f:b5:3a:3f:17:55:16:0a:
         7b:2a:8a:0a:79:f8:7f:b1:6e:db:a9:dc:65:eb:64:58:82:33:
         de:6c:cd:c0:59:8f:2c:14:46:0c:8f:99:73:45:b3:76:52:d3:
         cd:c1:b5:89:b9:9b:35:b1:ba:95:a6:dc:fc:e6:40:91:80:2c:
         4a:75:e0:72:37:44:a3:aa:35:cc:89:94:ad:c8:60:0e:b1:0d:
         7a:15:f9:ae:79:e3:f9:09:66:f1:6c:11:68:7c:8d:ef:03:80:
         3a:21:90:b6:64:ed:04:6a:d5:60:2f:c3:ce:8e:77:d7:49:6b:
         f7:c0:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org