Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32322d3232203d3e20323639323534.roa
File:                     34352e3138332e31362e302f32322d3232203d3e20323639323534.roa (raw, json)
Hash identifier:          7GkpREjCLkguVZ6m+Ma1yCBvZyYqidZdD858+7/W4Ok=
Subject key identifier:   C3:17:A9:BA:56:27:1E:D5:03:91:6A:44:AD:74:F6:30:8A:08:7E:12
Certificate issuer:       /CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
Certificate serial:       42E4BEAA568BD4FDB3FA4B5049021503E902DFC8
Authority key identifier: 47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32322d3232203d3e20323639323534.roa
Signing time:             Tue 15 Aug 2023 14:31:19 +0000
ROA not before:           Tue 15 Aug 2023 14:26:19 +0000
ROA not after:            Tue 13 Aug 2024 14:31:19 +0000
asID:                     269254
IP address blocks:        45.183.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:be:aa:56:8b:d4:fd:b3:fa:4b:50:49:02:15:03:e9:02:df:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
        Validity
            Not Before: Aug 15 14:26:19 2023 GMT
            Not After : Aug 13 14:31:19 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:2f:01:35:c1:cb:ca:2d:d0:5e:71:e2:77:
                    88:ae:91:40:9c:32:23:51:0d:7d:35:14:b1:55:a7:
                    d1:f0:90:c8:59:be:f8:ed:74:c0:83:e2:8d:09:6f:
                    49:5c:30:28:23:a0:64:50:d3:48:25:86:3f:fa:ab:
                    01:b3:3a:be:e9:f3:f3:61:e7:91:b0:a5:d4:3d:db:
                    87:01:9e:f0:42:aa:e4:8d:fe:58:bb:be:0c:0f:2f:
                    c0:67:e5:ed:f0:bb:a5:82:7a:66:a6:b2:dd:54:1e:
                    32:f5:39:3d:ee:54:0e:30:1a:c0:f9:ee:74:6d:f7:
                    f8:49:20:f1:04:56:b7:29:66:82:a4:34:9e:f3:0b:
                    94:c7:81:b4:54:3c:f9:1c:a9:bf:7e:5c:9f:99:cb:
                    89:35:0f:16:48:b3:bf:73:89:3f:0e:f3:70:ae:5a:
                    f2:a6:68:66:a1:c6:55:ac:17:2e:9d:ea:d4:2a:8f:
                    18:b8:cf:05:47:db:5f:98:7e:83:94:52:aa:83:55:
                    66:01:4a:2a:f1:53:c8:e9:df:34:47:49:13:10:30:
                    3a:70:fa:b1:80:09:bc:c3:e8:f1:25:01:c5:d7:8d:
                    52:a6:73:41:37:ad:f6:cf:ed:c5:ff:d6:a1:a1:22:
                    36:82:27:e6:21:46:0d:94:cf:2e:a3:66:d7:f1:e0:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:17:A9:BA:56:27:1E:D5:03:91:6A:44:AD:74:F6:30:8A:08:7E:12
            X509v3 Authority Key Identifier:
                keyid:47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32322d3232203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:a3:e4:0e:22:b8:2b:c8:ad:e6:31:1d:81:ff:b9:9f:fb:ec:
         f7:b8:e0:c5:5a:4d:ff:29:61:7d:a4:82:8e:cc:40:0d:70:de:
         5d:5f:35:ea:0b:73:46:db:50:34:01:7f:dc:bd:4e:0e:77:f0:
         5d:cf:5d:e8:4c:c6:67:82:71:80:4c:cb:b2:a0:e1:92:79:bc:
         2d:28:22:f1:5c:69:f0:ff:50:52:d7:78:7a:4b:3d:2d:9b:b0:
         5b:64:82:a6:a7:e9:c5:82:b4:1d:62:b8:1d:e8:b0:93:f4:ab:
         f4:1b:15:66:5e:a5:61:7c:24:16:d0:1e:76:fe:a2:ea:89:4a:
         14:0d:74:34:b4:4a:e3:0b:01:dc:3b:bc:e0:cf:40:58:a2:f5:
         01:6c:53:c9:6e:1a:d7:1a:ab:1d:28:5e:4d:27:6e:16:53:13:
         1a:2e:41:a5:95:77:22:05:b7:18:29:56:35:63:fd:c4:b8:bd:
         c3:26:07:95:b9:f4:33:31:90:b4:ff:31:8a:21:25:a0:a3:0f:
         14:cd:98:7c:5b:c1:f7:a7:e6:59:b5:da:ec:ca:1d:a1:36:9d:
         68:5d:6c:f4:db:04:76:a6:1c:cf:d5:e1:a8:d7:c8:3a:28:24:
         6f:1e:df:0d:d5:0f:de:5b:1e:92:da:f0:5d:a0:5d:1c:d3:34:
         65:e0:cb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org