Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa
File:                     34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa (raw, json)
Hash identifier:          YzxfVwXZqnFvTO7L5TloMqP2reT3eAU0k3kc3z0ylPM=
Subject key identifier:   28:10:79:58:21:87:90:BF:7E:97:9C:9A:6D:4D:AE:E5:12:E3:95:A3
Certificate issuer:       /CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
Certificate serial:       65251135A87A603B52CE752ABA5BE2A804949DD5
Authority key identifier: D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa
Signing time:             Wed 03 Apr 2024 22:27:40 +0000
ROA not before:           Wed 03 Apr 2024 22:22:40 +0000
ROA not after:            Wed 02 Apr 2025 22:27:40 +0000
asID:                     269423
IP address blocks:        45.186.122.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:25:11:35:a8:7a:60:3b:52:ce:75:2a:ba:5b:e2:a8:04:94:9d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D037231865C4494DAE0A707D2C8705DFEDDA26FF
        Validity
            Not Before: Apr  3 22:22:40 2024 GMT
            Not After : Apr  2 22:27:40 2025 GMT
        Subject: CN=28107958218790BF7E979C9A6D4DAEE512E395A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:0a:61:a7:36:a3:95:70:fb:41:a3:40:9f:
                    2c:32:c2:98:31:d8:23:fd:c2:25:29:ac:45:75:79:
                    14:d9:0d:65:c9:42:0c:ac:1e:7d:33:ca:e5:23:86:
                    5c:26:cf:ec:29:01:38:75:9a:a9:3d:1c:67:73:87:
                    51:c9:4f:a2:a2:90:56:ff:86:e5:50:45:0d:58:15:
                    fc:b0:73:5b:81:27:46:ab:49:6c:8e:55:ad:e5:11:
                    29:8a:9b:7c:f2:01:0b:d8:eb:3b:a8:b6:f8:25:cd:
                    e5:fc:b0:99:b0:8b:df:f4:5f:36:5a:14:2d:40:ce:
                    d6:6f:55:a1:45:5d:d6:5e:cd:46:41:87:35:58:89:
                    cc:39:1e:0a:d0:c8:1c:fe:07:76:6a:a9:9e:58:70:
                    31:3d:1b:fe:ca:21:4b:ec:c6:f6:73:cc:b2:cc:c3:
                    cd:36:60:c4:f0:8f:bc:21:a3:54:a9:73:6f:0f:82:
                    e5:65:26:93:30:c3:9c:d1:f4:4c:07:3c:58:1d:88:
                    9d:20:97:a3:f4:7d:f3:16:9b:12:f3:c2:a0:66:2e:
                    db:24:c2:f6:da:6d:a2:15:a2:48:83:51:bb:2b:3c:
                    27:11:ef:1b:17:4b:dd:e7:f9:6d:04:06:ec:18:af:
                    7f:cb:c2:fd:91:91:6a:f7:67:8b:1c:7a:7a:fd:90:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:10:79:58:21:87:90:BF:7E:97:9C:9A:6D:4D:AE:E5:12:E3:95:A3
            X509v3 Authority Key Identifier:
                keyid:D0:37:23:18:65:C4:49:4D:AE:0A:70:7D:2C:87:05:DF:ED:DA:26:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/D037231865C4494DAE0A707D2C8705DFEDDA26FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D037231865C4494DAE0A707D2C8705DFEDDA26FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/2/34352e3138362e3132322e302f32332d3233203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:00:c8:45:49:86:50:5b:d3:76:a5:b1:46:df:52:b9:a2:a2:
         46:34:58:eb:54:62:63:7a:4a:16:d7:77:41:4a:63:4d:0e:a7:
         58:4a:00:e1:c0:ee:c0:38:30:8e:cd:4a:e5:8f:91:c5:95:5d:
         6c:53:14:80:bb:ea:62:89:96:82:5f:cf:d6:f7:1e:d2:b8:85:
         08:d2:c8:ff:f4:0e:df:4b:ea:5a:25:2f:9c:38:45:ae:dc:7e:
         25:59:02:49:4e:99:ef:d9:0d:47:c9:e2:cd:80:74:d6:bc:89:
         8e:41:d9:41:de:69:22:4d:12:7d:30:82:7b:a5:95:d9:b1:03:
         ea:f5:56:79:f3:c2:ad:1d:56:6f:2b:97:84:e1:27:b8:70:f5:
         af:ea:5f:6d:5f:4d:0d:60:ed:5e:b1:cf:e3:e5:26:98:3a:6c:
         e8:fe:07:4a:2a:dc:b0:52:90:64:74:90:9f:bb:52:5e:6a:d9:
         35:94:7e:a6:15:68:40:ab:a2:70:14:7b:a8:4c:2e:d9:84:e7:
         58:54:c7:22:20:7f:07:f1:42:f1:b7:75:a3:c4:cb:34:38:fe:
         6e:c1:f8:3f:5c:5b:33:35:17:16:75:9d:fc:a5:1f:96:1a:34:
         93:fe:d0:b3:23:b3:73:59:a7:dd:57:2b:55:51:6f:f9:81:9b:
         57:d5:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org