Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32332d3233203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32332d3233203d3e20323638343430.roa (raw, json)
Hash identifier:          agkaAVF5ugh5OxzXjs5i4ZUliuq9F/FxT4I+gTgkoDA=
Subject key identifier:   BE:12:AD:6F:88:A6:D7:8F:BF:41:6D:B4:B9:22:67:71:C2:B1:69:2B
Certificate issuer:       /CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
Certificate serial:       6A6A26694B2FE1AC8E9E9DDC8866673D995D4797
Authority key identifier: C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32332d3233203d3e20323638343430.roa
Signing time:             Mon 18 Dec 2023 19:05:06 +0000
ROA not before:           Mon 18 Dec 2023 19:00:06 +0000
ROA not after:            Mon 16 Dec 2024 19:05:06 +0000
asID:                     268440
IP address blocks:        45.161.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6a:26:69:4b:2f:e1:ac:8e:9e:9d:dc:88:66:67:3d:99:5d:47:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
        Validity
            Not Before: Dec 18 19:00:06 2023 GMT
            Not After : Dec 16 19:05:06 2024 GMT
        Subject: CN=BE12AD6F88A6D78FBF416DB4B9226771C2B1692B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:fa:5f:61:b4:aa:af:e2:e0:bf:d3:49:f1:
                    79:fb:fe:e3:4e:0e:b9:4b:d8:1b:3f:7c:d0:f0:4f:
                    88:44:6a:b8:4f:f0:05:80:1b:05:2f:f5:b4:b9:6b:
                    37:49:46:3f:d8:d5:c6:1e:83:f3:52:4e:53:2b:fd:
                    38:9c:b1:38:41:33:8a:6f:06:46:a4:42:c0:36:20:
                    49:10:b6:f4:45:89:9d:c7:a2:14:e1:8f:d2:69:c3:
                    f8:27:4f:1c:e0:6e:19:c1:5b:1a:3e:21:6f:b6:6a:
                    73:94:14:f2:ef:05:6a:77:f7:40:51:e9:0b:d1:55:
                    45:bf:71:c1:ce:b5:d9:9d:f7:67:4d:b6:82:33:05:
                    40:1f:03:70:f3:39:b4:fa:f4:76:c0:0f:78:02:14:
                    4c:0c:9b:43:d1:bc:5e:8a:e4:e6:e9:76:85:26:17:
                    ec:ea:c2:71:55:c5:ef:fa:f4:50:6f:c9:de:65:e2:
                    79:1d:a7:cf:df:d6:31:bc:d8:36:a7:1c:8e:7a:ac:
                    f1:c4:38:cc:ef:08:8c:e4:47:06:46:b0:16:35:d2:
                    19:3e:68:11:8f:0b:8b:32:d7:00:c3:39:87:eb:ff:
                    41:54:60:b4:1f:1e:b7:dc:e2:7a:4e:aa:6b:0b:e3:
                    8d:2f:9b:cc:d0:ef:c9:6c:ed:12:6b:66:5f:8d:e3:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:12:AD:6F:88:A6:D7:8F:BF:41:6D:B4:B9:22:67:71:C2:B1:69:2B
            X509v3 Authority Key Identifier:
                keyid:C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32332d3233203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:4f:8b:24:2e:d5:68:94:93:b6:6d:f9:fd:d9:44:70:56:7b:
         9d:49:a3:4b:4d:dd:f9:61:5f:26:eb:e0:28:c7:db:d4:18:3a:
         b2:e1:3b:38:d8:0a:87:21:cd:82:2b:61:60:2d:76:5c:4f:8a:
         ff:bc:7f:66:b4:18:bd:21:7f:79:bf:9e:26:e2:10:70:49:7f:
         47:c5:4b:16:02:72:f3:e1:03:85:14:d1:3a:ee:be:11:8d:8c:
         05:2b:95:1d:af:46:56:56:15:88:9b:dd:5e:70:8f:2e:06:5c:
         69:84:be:5d:1c:9f:7e:75:31:5d:fa:97:9d:73:18:20:9f:8d:
         ae:40:f7:bf:94:0b:fc:88:98:1f:a0:48:0e:b3:eb:fa:e9:e6:
         d3:8a:84:b8:62:e5:2f:28:53:2e:e2:48:2d:5f:62:b3:e7:5c:
         0f:dc:b2:7a:f5:db:be:96:9a:ca:5e:7b:f8:47:a2:ba:54:a1:
         41:b4:6b:d8:9b:c9:ba:d2:9f:78:86:4f:b3:9c:83:6b:4b:5f:
         0a:33:64:52:b9:5f:ca:55:f0:b1:de:7f:02:6d:7d:3d:69:77:
         75:97:d8:da:9c:5e:f8:2f:bb:ab:98:5d:4d:77:91:f4:ea:a6:
         0e:1a:79:76:a0:67:d5:5a:77:5a:28:8e:1b:c5:06:99:25:77:
         0b:d3:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org