Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/34352e3138362e3232382e302f32322d3332203d3e20323639343339.roa
File:                     34352e3138362e3232382e302f32322d3332203d3e20323639343339.roa (raw, json)
Hash identifier:          X26XZMY4eYWNzAy3cvm09LwCS03P6EgmY+dRtEMM2Xs=
Subject key identifier:   31:98:AC:A6:C4:47:D1:17:FF:B4:03:B2:E3:52:30:EB:C9:2B:31:AF
Certificate issuer:       /CN=975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D
Certificate serial:       013326805CB6B1EDDE63A4622032ACC190F0A05C
Authority key identifier: 97:5C:B8:DB:1C:E9:5D:0A:37:5C:7E:8D:E0:7D:0D:78:35:BB:B5:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/34352e3138362e3232382e302f32322d3332203d3e20323639343339.roa
Signing time:             Fri 01 Mar 2024 15:21:20 +0000
ROA not before:           Fri 01 Mar 2024 15:16:20 +0000
ROA not after:            Fri 28 Feb 2025 15:21:20 +0000
asID:                     269439
IP address blocks:        45.186.228.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:33:26:80:5c:b6:b1:ed:de:63:a4:62:20:32:ac:c1:90:f0:a0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D
        Validity
            Not Before: Mar  1 15:16:20 2024 GMT
            Not After : Feb 28 15:21:20 2025 GMT
        Subject: CN=3198ACA6C447D117FFB403B2E35230EBC92B31AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:b1:27:cd:fa:fc:92:d1:6a:c5:be:74:54:
                    5c:d2:b0:7e:9f:a7:42:fe:fd:89:07:17:5e:ef:14:
                    01:e2:a8:07:e2:80:57:38:2d:f9:37:fb:32:2c:3d:
                    ca:72:3c:62:e1:19:33:39:45:2c:22:44:4b:8c:ca:
                    a4:bf:67:d9:cf:92:55:15:c4:f5:76:64:fa:68:59:
                    15:8f:b7:30:b7:dd:1f:3f:4e:fb:19:60:0c:fd:f4:
                    16:a0:74:9a:09:f2:99:41:a7:62:06:f0:5f:cc:4e:
                    de:5c:81:83:8a:0b:33:9b:35:e0:f5:8a:d2:20:11:
                    d3:a6:87:7d:cc:13:69:f6:c5:90:ca:56:46:5f:fc:
                    1c:90:68:fd:dd:d4:12:86:5c:37:2f:f2:a4:48:84:
                    6e:b3:3b:89:84:a2:aa:f3:71:84:0d:8c:0f:61:fe:
                    91:84:ed:df:1d:14:13:15:41:ce:cb:bd:6a:39:55:
                    19:09:5d:2e:58:1d:e2:a4:fb:17:bd:a6:f2:bf:24:
                    93:47:64:63:28:e8:88:20:93:a4:14:c9:c7:aa:54:
                    a7:2e:5a:d5:6e:cc:83:78:3f:a7:da:f1:8c:a7:94:
                    30:36:ae:4a:2a:da:14:67:55:82:58:6a:f1:3a:f5:
                    08:ba:08:ad:f7:93:8e:7a:72:0b:a2:22:61:b2:e6:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:98:AC:A6:C4:47:D1:17:FF:B4:03:B2:E3:52:30:EB:C9:2B:31:AF
            X509v3 Authority Key Identifier:
                keyid:97:5C:B8:DB:1C:E9:5D:0A:37:5C:7E:8D:E0:7D:0D:78:35:BB:B5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/975CB8DB1CE95D0A375C7E8DE07D0D7835BBB54D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/34352e3138362e3232382e302f32322d3332203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:2d:dd:b3:a4:d7:5e:b6:16:5f:22:3a:d7:e5:56:27:90:
         ba:06:48:57:61:f6:52:8d:bc:41:8b:e2:72:00:d5:ed:b8:a8:
         df:89:0b:70:47:0f:79:64:74:32:f4:7f:91:55:19:16:e1:ff:
         e7:36:f5:f6:d4:87:e8:b5:10:c8:05:e7:46:bf:80:c4:31:cd:
         f3:d2:2b:e4:80:b1:12:5e:d1:0e:b1:e2:88:75:2c:ad:38:65:
         d6:c4:87:6f:2d:a0:27:df:02:f6:4e:c4:4c:70:04:c8:a2:8e:
         b3:4c:1b:db:5e:c4:57:20:54:37:77:40:45:32:60:39:e7:0f:
         db:24:2a:3b:74:48:be:da:13:26:30:b2:85:1f:bd:cb:5e:75:
         bf:c8:2a:39:09:e6:12:01:f0:f8:0a:68:50:3e:5c:3a:2a:d6:
         48:64:a2:37:b2:5d:a2:b6:f5:a2:3d:cf:58:25:a8:7e:c7:e0:
         6e:a5:a0:3b:9e:d4:92:df:f2:96:7a:ac:61:80:54:df:7c:d9:
         ab:3b:c4:6c:58:87:86:96:7b:0a:1b:39:d0:b5:ac:8c:56:ac:
         dd:a4:3c:ab:9c:5c:7e:c2:4a:de:8f:15:cf:ee:50:72:76:5e:
         05:25:87:7e:a3:69:77:1d:c7:e9:ad:e8:bd:f5:c3:c1:c7:d3:
         15:23:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org