Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa
File:                     34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa (raw, json)
Hash identifier:          csLoUyqzY+vokzuSL9DfdJ0eU/axDOwQiubUWRllO/s=
Subject key identifier:   3B:BB:FD:4F:39:53:0B:3A:23:9A:DF:41:FF:8C:7B:48:5C:AD:A1:C9
Certificate issuer:       /CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
Certificate serial:       7FB8C423B86EBADC2F2E474823E15637F4C32AAB
Authority key identifier: 75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa
Signing time:             Wed 13 Mar 2024 20:19:01 +0000
ROA not before:           Wed 13 Mar 2024 20:14:01 +0000
ROA not after:            Wed 12 Mar 2025 20:19:01 +0000
asID:                     269423
IP address blocks:        45.186.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b8:c4:23:b8:6e:ba:dc:2f:2e:47:48:23:e1:56:37:f4:c3:2a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=752DF8A511E583FD16AFDE7868B695CB08BB271E
        Validity
            Not Before: Mar 13 20:14:01 2024 GMT
            Not After : Mar 12 20:19:01 2025 GMT
        Subject: CN=3BBBFD4F39530B3A239ADF41FF8C7B485CADA1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:e6:5f:66:90:7e:b4:31:d5:eb:82:de:f6:
                    1e:95:dc:8e:2c:61:3a:ea:f7:a3:64:8c:ef:bd:71:
                    a4:52:0f:d2:d5:ac:3f:fd:5c:c6:c5:e5:9f:4e:90:
                    bf:9a:cb:ef:4e:07:8c:fc:d1:b8:6e:e2:9c:01:ff:
                    f4:99:5c:b7:01:0f:33:99:38:6c:83:08:49:84:33:
                    4c:34:6e:46:38:7b:45:b1:19:62:25:ad:08:ff:5f:
                    77:6c:9e:72:36:a4:82:0c:93:d1:09:ab:03:50:af:
                    03:46:0f:37:e9:81:6f:6b:08:12:6b:93:9a:e4:9a:
                    b0:f7:5f:22:79:7f:9d:55:5f:ee:8d:92:28:d6:04:
                    01:4a:ff:64:e0:63:e4:3e:40:d4:5d:d2:53:00:d5:
                    af:45:e5:16:6a:85:ce:ea:b9:45:7d:f7:27:52:06:
                    45:dc:09:74:7f:86:38:b9:ba:82:04:6d:3e:22:41:
                    ab:94:78:11:aa:f5:29:88:56:6e:f7:cb:c4:22:38:
                    7f:a9:9d:83:77:6e:d6:17:8f:7e:40:77:7f:f9:1a:
                    2d:c2:11:8c:54:92:fe:5e:bf:60:6d:e8:c5:71:a1:
                    92:a5:38:dd:ac:0f:c4:37:b5:33:f3:10:84:2b:21:
                    9a:ea:dc:89:58:6b:74:34:f2:ba:30:9c:bc:a9:11:
                    a2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BB:FD:4F:39:53:0B:3A:23:9A:DF:41:FF:8C:7B:48:5C:AD:A1:C9
            X509v3 Authority Key Identifier:
                keyid:75:2D:F8:A5:11:E5:83:FD:16:AF:DE:78:68:B6:95:CB:08:BB:27:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/752DF8A511E583FD16AFDE7868B695CB08BB271E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/752DF8A511E583FD16AFDE7868B695CB08BB271E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/1/34352e3138362e3132302e302f32322d3232203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:18:e9:7b:85:d8:b2:2e:29:28:58:7d:c3:fd:4d:fd:66:d2:
         33:57:b0:8b:1e:77:d8:6f:1d:2c:9a:82:c0:9a:82:08:13:4d:
         5e:ea:e5:c2:3f:f2:fd:a8:04:f2:2a:51:fe:1a:a9:60:a5:46:
         b0:ab:4a:4a:7e:19:28:f6:62:61:92:35:d8:01:86:7f:79:1b:
         3e:5a:a5:94:e2:dc:56:4a:9e:12:ca:a4:17:75:c5:f1:98:50:
         7c:71:c9:59:94:4e:11:2d:3b:6d:bb:45:6d:b5:af:d3:de:b0:
         3b:9a:00:e1:b3:d7:25:29:0f:ee:f2:37:df:96:68:68:94:f7:
         23:6b:fe:ee:c5:95:21:2b:c1:46:e8:ba:e1:8d:70:42:84:bd:
         3e:9f:71:5c:ed:48:7c:e8:c5:45:5a:78:3c:e5:2a:a1:73:06:
         9b:61:14:01:12:03:5a:28:7c:97:54:31:2c:22:34:c9:08:5b:
         4f:c7:57:d0:3e:24:68:61:62:00:73:96:93:cf:6f:37:81:cf:
         98:7b:a9:b8:da:33:5d:9f:c7:8c:7b:01:21:5e:54:e8:dc:17:
         a1:ec:eb:b3:a2:9d:ed:e4:9d:32:a1:8d:ec:fb:7e:9d:3a:65:
         f4:6e:61:42:a4:e0:36:8c:67:72:b8:94:f8:22:c4:f1:b8:6d:
         0b:26:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org