Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32322d3232203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32322d3232203d3e20323638343430.roa (raw, json)
Hash identifier:          5J0dwzugIcBi97ZVIoQiHqbkjcQyM5WCgzSUjwwjxlY=
Subject key identifier:   49:F2:66:9F:FC:A7:A2:65:7B:35:90:E5:A7:D3:B9:C5:0E:0A:BB:E0
Certificate issuer:       /CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
Certificate serial:       453D1DA07D9F3B00F81750D30AB22552057F88BF
Authority key identifier: C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32322d3232203d3e20323638343430.roa
Signing time:             Mon 18 Dec 2023 19:05:06 +0000
ROA not before:           Mon 18 Dec 2023 19:00:06 +0000
ROA not after:            Mon 16 Dec 2024 19:05:06 +0000
asID:                     268440
IP address blocks:        45.161.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3d:1d:a0:7d:9f:3b:00:f8:17:50:d3:0a:b2:25:52:05:7f:88:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
        Validity
            Not Before: Dec 18 19:00:06 2023 GMT
            Not After : Dec 16 19:05:06 2024 GMT
        Subject: CN=49F2669FFCA7A2657B3590E5A7D3B9C50E0ABBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:bd:da:f4:b7:69:c0:2f:f9:41:c8:80:55:
                    db:42:0d:44:66:7e:b0:5f:2e:d2:8d:46:7a:f0:b3:
                    2e:ba:98:86:d5:5e:d1:ad:37:c3:54:f9:97:7c:d8:
                    a8:4a:93:58:a7:41:23:06:64:43:86:9f:95:49:fa:
                    f7:54:1b:3a:e6:89:a6:06:fc:66:6a:d2:9d:21:bc:
                    0a:70:bc:6c:9b:56:f7:9b:64:90:29:69:5a:8e:04:
                    14:2f:9e:8a:3a:ea:1f:31:dc:4c:23:b4:d2:94:c4:
                    29:f8:50:6b:f8:c0:d4:f2:c1:52:64:8c:e1:ae:60:
                    99:69:31:b0:63:73:45:79:63:3f:e7:40:77:c1:a4:
                    4e:87:b6:a1:9d:f3:7d:a5:ee:c3:92:a7:ff:e0:4d:
                    ed:ba:03:e8:cb:92:d8:aa:3f:7a:65:33:6c:4d:07:
                    87:dc:64:84:74:66:21:0a:d5:a4:29:c9:c9:60:56:
                    a4:40:e9:cb:40:23:29:54:ba:74:23:65:fd:52:8c:
                    f9:ac:a4:b5:d1:13:60:15:8c:2c:77:fe:39:61:0c:
                    f8:1e:59:9f:0e:79:a3:09:bb:5b:9f:0e:2e:b3:83:
                    ae:42:c1:87:5f:aa:1d:60:56:94:82:4f:b5:2a:7b:
                    1e:1a:30:4a:48:04:96:61:89:4f:6e:69:24:81:0b:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F2:66:9F:FC:A7:A2:65:7B:35:90:E5:A7:D3:B9:C5:0E:0A:BB:E0
            X509v3 Authority Key Identifier:
                keyid:C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32322d3232203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:8c:96:6b:66:48:40:5d:da:ae:9a:93:51:b2:ec:df:e9:51:
         2f:8c:53:12:b2:2c:f5:9f:28:a9:b3:15:a5:71:8a:c5:eb:30:
         ad:37:1d:2c:dc:62:86:9a:56:19:6d:01:6f:e2:af:98:73:ae:
         c5:b2:5b:ef:b8:b9:c0:bb:28:33:41:e8:e3:b4:c4:39:26:7b:
         e4:19:09:c8:8d:72:8f:88:75:79:5f:54:a4:ae:dc:23:4a:32:
         8c:c6:ae:8f:b0:67:a0:db:58:d4:9d:cb:28:86:bb:99:bf:dc:
         a9:71:1c:6c:b0:79:7e:06:44:f8:e3:7f:53:c9:c6:fd:8b:bc:
         8f:c6:68:2e:41:da:ff:f3:71:e7:bd:d2:85:69:c4:65:f4:2d:
         cf:c3:f4:2d:05:52:9f:f5:9b:d6:89:51:53:4f:c0:2f:b1:8e:
         ce:f1:b7:4c:f7:17:c9:3f:e1:f7:cb:db:4f:3d:dc:eb:9f:54:
         16:a6:8c:a2:81:1a:47:31:33:47:23:3c:02:8b:48:c2:0d:3a:
         7e:20:28:d9:05:2e:54:6f:ff:de:33:7a:d8:03:2d:2f:8e:6d:
         64:e0:4c:49:94:55:02:b2:3f:50:a6:95:12:81:7a:ad:67:72:
         ee:b1:ae:b4:ff:ba:6c:36:1b:95:31:30:d4:44:73:6c:86:81:
         c7:98:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org