Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/34352e3138382e3132302e302f32322d3332203d3e203533303035.roa
File:                     34352e3138382e3132302e302f32322d3332203d3e203533303035.roa (raw, json)
Hash identifier:          ATot4E5d8iKysQtBcd3Lo1XnKlwUL1tEMmPRBvgBGDU=
Subject key identifier:   6A:CB:F6:4B:13:D2:F7:5C:72:EA:0A:DF:F7:69:90:81:79:C6:09:D2
Certificate issuer:       /CN=41BC6FEA40F58F61DD81236BE0F6C43D9D807D15
Certificate serial:       4F25086125B98C9204D43B3C2EC065F2F6CADFAF
Authority key identifier: 41:BC:6F:EA:40:F5:8F:61:DD:81:23:6B:E0:F6:C4:3D:9D:80:7D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/34352e3138382e3132302e302f32322d3332203d3e203533303035.roa
Signing time:             Tue 30 Jan 2024 18:44:28 +0000
ROA not before:           Tue 30 Jan 2024 18:39:28 +0000
ROA not after:            Tue 28 Jan 2025 18:44:28 +0000
asID:                     53005
IP address blocks:        45.188.120.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:25:08:61:25:b9:8c:92:04:d4:3b:3c:2e:c0:65:f2:f6:ca:df:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BC6FEA40F58F61DD81236BE0F6C43D9D807D15
        Validity
            Not Before: Jan 30 18:39:28 2024 GMT
            Not After : Jan 28 18:44:28 2025 GMT
        Subject: CN=6ACBF64B13D2F75C72EA0ADFF769908179C609D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:10:64:80:2f:0e:fc:07:dc:1d:30:c3:10:
                    4d:21:20:19:64:e4:70:bb:cd:be:4f:84:9d:92:fd:
                    6b:4f:99:89:d7:c4:70:5b:f5:05:e4:e3:73:bc:40:
                    8c:7b:b1:18:02:18:ce:dc:28:f7:d7:8c:a1:c5:7e:
                    02:1c:30:e0:24:8c:5f:13:b6:5f:06:d1:22:1b:42:
                    d9:d2:25:60:34:58:46:24:b5:d2:ab:a3:a9:e6:7d:
                    96:ad:fe:a5:d3:5f:ee:37:7e:0f:3b:66:14:0a:a4:
                    c0:da:49:4d:ad:2d:3d:66:94:94:42:c0:85:af:b6:
                    8b:a8:6c:dd:71:3e:c1:f2:8d:45:fe:2e:3b:aa:a7:
                    ee:c4:24:77:ad:b4:12:e3:36:83:dd:42:42:03:35:
                    13:90:20:a4:44:c0:12:81:e9:a4:db:21:04:37:c0:
                    8d:d9:33:a6:ec:07:c2:45:f3:3f:5a:67:54:46:5b:
                    92:75:6c:0b:fe:27:1a:1d:2d:7f:3e:f1:c6:79:11:
                    6c:13:de:b1:5d:5d:b3:09:38:e9:e6:d8:e0:66:8c:
                    82:aa:8d:06:c4:e9:57:bc:0f:b3:d9:86:ee:08:01:
                    15:f9:6c:b8:42:db:70:f0:fb:e1:8d:10:4b:99:78:
                    fb:3c:29:0b:a1:4b:b3:10:ad:5c:6f:71:e1:64:dd:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CB:F6:4B:13:D2:F7:5C:72:EA:0A:DF:F7:69:90:81:79:C6:09:D2
            X509v3 Authority Key Identifier:
                keyid:41:BC:6F:EA:40:F5:8F:61:DD:81:23:6B:E0:F6:C4:3D:9D:80:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/34352e3138382e3132302e302f32322d3332203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:10:26:91:7e:a9:c4:8e:43:51:74:84:5c:67:95:6d:da:
         60:06:33:31:4f:73:33:74:e1:74:da:cb:25:b6:43:6c:30:b9:
         94:8a:ab:da:70:f6:dd:46:71:78:72:7f:9b:be:c0:83:a5:1f:
         23:1a:24:0a:33:14:ed:d6:75:a7:61:5f:84:d6:69:e9:fe:22:
         7e:ff:19:79:ac:96:2f:6f:89:a2:f9:b2:90:05:31:f8:80:17:
         10:86:e2:05:b8:e4:bb:ca:d9:11:35:39:57:04:fb:f3:6d:56:
         f7:7e:c7:e9:cb:3c:ae:0d:7a:c8:8e:54:86:bf:66:3d:b8:7a:
         53:8a:1c:3d:aa:bf:a4:ed:46:2e:af:12:90:f0:eb:60:bc:b0:
         d4:1f:64:87:f8:99:91:4e:d1:32:a9:8c:59:d7:f2:9e:1b:1b:
         fb:ee:e5:11:d9:23:e5:e9:da:36:7b:36:e6:f3:ec:31:9e:2d:
         d3:40:38:21:e8:71:fb:d3:e2:70:51:fb:e5:03:82:c8:55:8a:
         78:ea:d2:75:4e:9b:75:ca:d5:8f:4b:b5:ae:f1:c5:2d:ae:6a:
         92:48:72:88:02:e5:4c:55:41:02:c1:1f:7b:4f:09:40:85:79:
         ec:c7:cd:a2:51:72:25:98:59:a4:ab:23:7c:c2:8b:bd:e0:e1:
         c5:c9:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org