Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32322d3234203d3e20323637313234.roa
File:                     34352e3232392e35322e302f32322d3234203d3e20323637313234.roa (raw, json)
Hash identifier:          K2QbC89xqNG1LsuQDst4M3EmgZSOyWccTKm3VdjgHDU=
Subject key identifier:   1F:0E:4A:28:03:09:18:45:89:5C:C7:89:13:90:6B:2F:47:CF:BC:EF
Certificate issuer:       /CN=4A0CF634A638CADFFABAC397E0D1615D2CA89C53
Certificate serial:       58D9FB81D7D3666D407F5DFB6287ACCA0FFFB8A6
Authority key identifier: 4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32322d3234203d3e20323637313234.roa
Signing time:             Fri 15 Dec 2023 12:49:12 +0000
ROA not before:           Fri 15 Dec 2023 12:44:12 +0000
ROA not after:            Fri 13 Dec 2024 12:49:12 +0000
asID:                     267124
IP address blocks:        45.229.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d9:fb:81:d7:d3:66:6d:40:7f:5d:fb:62:87:ac:ca:0f:ff:b8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A0CF634A638CADFFABAC397E0D1615D2CA89C53
        Validity
            Not Before: Dec 15 12:44:12 2023 GMT
            Not After : Dec 13 12:49:12 2024 GMT
        Subject: CN=1F0E4A2803091845895CC78913906B2F47CFBCEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:86:06:c9:f6:3a:a8:db:ed:82:ef:cd:43:
                    33:ef:be:51:73:c3:53:e4:77:62:40:4f:d5:2c:04:
                    25:df:85:73:22:c7:32:04:02:2f:b7:f1:91:7a:ce:
                    9f:7d:f1:22:1a:63:eb:0b:c8:0b:8e:ba:70:ea:83:
                    6b:6b:03:3d:8f:f7:bf:9e:01:75:db:e9:06:30:18:
                    8b:2e:62:8f:18:61:22:b9:8e:0b:a0:8f:2e:5a:de:
                    26:fa:9d:06:1b:4a:cb:30:08:bb:cc:8b:67:9a:a6:
                    5c:5f:94:0d:03:f2:ea:1c:f6:15:cf:0b:2c:e8:12:
                    fd:27:75:3e:fa:b1:b7:06:d6:c1:15:28:b1:bb:c6:
                    98:2b:b5:4e:ed:44:72:42:27:42:81:08:f9:f1:73:
                    38:dc:d0:93:45:bd:8a:7d:05:95:30:e9:2b:91:3c:
                    c0:b0:29:cd:9d:93:32:54:f6:7d:c8:4b:e4:83:f8:
                    61:e6:7e:42:78:72:58:b8:3d:a3:3f:97:61:3c:45:
                    1b:ac:d3:2b:ef:32:13:c3:f6:bb:0e:ab:e0:50:bc:
                    5d:95:ac:7f:5d:da:82:0f:3c:f1:03:3a:7c:9c:67:
                    0f:2e:2f:e5:69:7b:8b:f3:a1:1d:a7:29:ab:95:fc:
                    26:46:b3:f7:be:a4:fe:20:5d:48:94:e6:0a:6a:0d:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0E:4A:28:03:09:18:45:89:5C:C7:89:13:90:6B:2F:47:CF:BC:EF
            X509v3 Authority Key Identifier:
                keyid:4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32322d3234203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:b1:80:2b:b1:ee:d0:78:3c:16:fb:07:23:bd:40:fb:0a:
         49:50:d8:65:a3:87:8b:cd:86:53:69:8c:9c:30:ec:2d:36:99:
         fe:30:24:2a:22:36:35:eb:a5:2c:8e:7e:f9:24:4d:c7:62:cc:
         ca:c0:e9:05:5b:33:de:74:13:f0:c3:07:1e:76:7c:50:a5:f9:
         dc:73:23:15:96:8f:1f:df:6b:35:4b:3b:0f:ef:d5:ac:4c:23:
         db:cc:f9:89:89:7f:32:80:89:35:4e:ee:a8:3c:22:7d:26:8b:
         a2:b4:52:22:53:41:41:7f:a1:fb:74:65:65:95:4e:d5:0d:47:
         fc:96:ff:7b:8d:71:56:ad:01:1a:7b:33:e5:14:0f:3f:2e:73:
         de:0e:6f:4a:8a:7b:34:c1:aa:3c:5e:62:99:45:b8:1b:96:99:
         3d:61:75:33:da:5f:bd:e5:84:f8:4d:f6:ef:b0:82:a4:68:96:
         a7:65:da:8b:fc:71:15:7a:fe:c7:ea:b6:c6:ab:d6:d4:6a:42:
         07:58:84:6f:a9:42:51:65:46:1d:f1:29:59:90:a2:28:95:c1:
         ea:47:69:be:fc:2d:e8:35:03:a9:50:8f:c6:34:ea:a6:58:99:
         f8:7a:a9:43:56:6e:58:26:e5:1c:b0:81:6e:e9:03:d5:8f:88:
         3d:50:9d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org