Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/34352e3138362e3232382e302f32322d3332203d3e20323639343339.roa
File:                     34352e3138362e3232382e302f32322d3332203d3e20323639343339.roa (raw, json)
Hash identifier:          gztccl7vYp/9W1BVpPGRGc7QtJICSOi6w8s0PTY3Msc=
Subject key identifier:   9F:EF:34:2A:F5:3A:B3:C2:54:51:85:01:AF:3B:0C:DF:E8:81:6B:56
Certificate issuer:       /CN=9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F
Certificate serial:       33BA59736BB909B8AD125856477CAAAA66BEF3FC
Authority key identifier: 9E:0C:BB:5D:F0:52:22:AB:B1:DC:13:DB:72:BC:3E:96:95:5D:64:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/34352e3138362e3232382e302f32322d3332203d3e20323639343339.roa
Signing time:             Thu 04 Apr 2024 17:36:17 +0000
ROA not before:           Thu 04 Apr 2024 17:31:17 +0000
ROA not after:            Thu 03 Apr 2025 17:36:17 +0000
asID:                     269439
IP address blocks:        45.186.228.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ba:59:73:6b:b9:09:b8:ad:12:58:56:47:7c:aa:aa:66:be:f3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F
        Validity
            Not Before: Apr  4 17:31:17 2024 GMT
            Not After : Apr  3 17:36:17 2025 GMT
        Subject: CN=9FEF342AF53AB3C254518501AF3B0CDFE8816B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:7f:b5:cf:83:2e:4c:4e:7a:52:aa:80:5e:
                    70:4d:9c:78:ad:76:20:f3:7c:9e:76:60:b9:d0:ea:
                    cb:f8:85:37:5b:10:38:d5:f2:32:7a:43:17:6d:fd:
                    a3:ed:0f:6d:0a:a9:4d:84:50:22:b7:e5:5d:21:61:
                    a3:2b:4f:82:a2:1b:f8:bc:0c:09:0a:3c:ca:74:c3:
                    06:53:72:dc:fd:d8:9e:04:a6:35:3a:c4:b0:ce:f8:
                    66:bc:ab:96:4b:04:70:cb:27:f5:9a:c4:f3:ce:c5:
                    78:d2:57:f9:14:d8:7b:e1:13:5d:82:c4:26:34:99:
                    ea:5f:b0:75:02:3f:b6:43:2d:a1:e3:1b:0f:72:48:
                    ca:92:0d:ee:4d:84:98:b5:0c:d5:51:eb:85:c4:bd:
                    ff:b3:1d:60:b1:a1:79:a7:ea:39:e0:46:10:23:53:
                    f4:c7:56:12:97:0c:9c:41:e4:30:ab:9f:c9:8f:ba:
                    4a:31:84:13:2c:ca:ab:d1:1e:8f:fe:8b:08:85:81:
                    b3:1e:c0:d6:e9:0f:72:1c:42:9c:73:ea:61:ef:c5:
                    bd:d4:cd:e8:96:ea:0f:5f:d7:44:45:0b:74:4a:e3:
                    ab:30:78:38:56:2f:22:a7:20:68:d8:0c:8c:49:45:
                    a7:9b:ba:ca:82:ff:26:2c:c4:a9:c8:b0:58:1a:44:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EF:34:2A:F5:3A:B3:C2:54:51:85:01:AF:3B:0C:DF:E8:81:6B:56
            X509v3 Authority Key Identifier:
                keyid:9E:0C:BB:5D:F0:52:22:AB:B1:DC:13:DB:72:BC:3E:96:95:5D:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/34352e3138362e3232382e302f32322d3332203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:69:06:43:58:cd:bb:1b:9c:25:ff:5c:99:0d:0f:f2:ef:
         41:46:f0:c4:78:60:aa:c1:97:f0:a8:69:61:8a:7b:ba:01:97:
         af:54:b1:58:a2:12:a3:87:ca:67:f9:2a:db:dc:8d:09:90:17:
         c6:22:1d:5c:1e:f8:e1:c9:79:ae:61:8b:c2:39:d7:bd:78:58:
         3a:ce:c1:db:fb:b5:52:1f:e5:b9:95:a5:2b:e9:ba:a4:c0:25:
         d9:14:9c:d1:36:41:fe:3d:51:11:1f:68:fc:31:6b:e7:db:dd:
         90:41:74:f6:09:05:5f:e6:96:75:f2:ef:cb:e2:f0:ae:9d:a4:
         de:4f:83:34:26:49:c3:fe:1e:d7:74:b6:3d:78:8b:b9:03:ce:
         b6:b7:e7:92:6d:07:ae:00:59:8a:78:56:0a:fd:e4:32:39:4a:
         17:6e:65:d7:e5:fe:e9:1a:3b:18:28:cb:04:c2:74:47:bc:17:
         53:f5:08:11:9c:70:b9:ed:11:ef:dd:da:ed:5e:5a:cb:d9:0e:
         43:7e:8f:c2:3e:8c:9b:5d:77:b4:85:af:5e:a4:e5:c0:cf:9c:
         af:24:c1:08:6a:43:b1:0d:05:58:81:0e:62:1e:cb:bb:4f:9f:
         24:10:f5:bd:18:6a:9f:fa:d6:c8:20:1e:6a:9c:ba:0d:65:32:
         da:69:9c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org