Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/0/34352e3136382e3132382e302f32322d3234203d3e20323638313039.roa
File:                     34352e3136382e3132382e302f32322d3234203d3e20323638313039.roa (raw, json)
Hash identifier:          VclOQMFA5ZT6Y6bl6afFq/S3vrS/3thqJwN8RWIW5HE=
Subject key identifier:   13:CD:EC:32:35:11:16:61:AB:47:8C:D1:FE:31:F5:0C:6A:87:04:C0
Certificate issuer:       /CN=A0579459EC0798D04F7069512F964BDBFDFEB1B5
Certificate serial:       185EBCA3DAC37AFE5C57660DFC6B25CFCD182004
Authority key identifier: A0:57:94:59:EC:07:98:D0:4F:70:69:51:2F:96:4B:DB:FD:FE:B1:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0579459EC0798D04F7069512F964BDBFDFEB1B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/0/34352e3136382e3132382e302f32322d3234203d3e20323638313039.roa
Signing time:             Wed 05 Apr 2023 17:40:43 +0000
ROA not before:           Wed 05 Apr 2023 17:35:43 +0000
ROA not after:            Wed 03 Apr 2024 17:40:43 +0000
asID:                     268109
IP address blocks:        45.168.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5e:bc:a3:da:c3:7a:fe:5c:57:66:0d:fc:6b:25:cf:cd:18:20:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0579459EC0798D04F7069512F964BDBFDFEB1B5
        Validity
            Not Before: Apr  5 17:35:43 2023 GMT
            Not After : Apr  3 17:40:43 2024 GMT
        Subject: CN=13CDEC3235111661AB478CD1FE31F50C6A8704C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:56:ba:1d:ef:f9:43:62:5c:75:c8:40:90:
                    d6:a3:04:03:54:a0:ba:72:34:ad:e2:77:3c:15:75:
                    83:7b:87:35:4d:bf:99:f7:a5:24:3e:91:23:67:7b:
                    9f:1b:44:ef:ca:24:c2:60:b6:4e:22:d7:e8:5b:20:
                    c4:7d:a1:50:4d:b9:3f:37:1b:13:34:ca:31:58:da:
                    f8:39:9a:93:33:dc:0e:57:f9:0e:57:fd:4d:eb:ab:
                    fb:4c:dd:72:80:94:12:26:ee:49:f0:c2:10:06:fa:
                    3f:75:11:6f:4d:8b:27:47:31:b8:94:c6:65:32:c9:
                    9d:e3:0d:82:78:0d:70:e5:c4:87:58:cb:59:de:6e:
                    ac:8c:7e:d8:b6:e6:cd:3f:01:98:21:db:ca:ab:94:
                    d5:68:5d:45:ef:c0:06:c4:9d:c7:a0:58:8f:b1:24:
                    fb:c6:e1:40:cd:64:d0:08:31:9b:51:8d:58:d6:89:
                    35:10:77:90:32:50:f7:5f:db:80:36:ed:c3:9c:3d:
                    3d:71:7b:81:76:e3:ae:fb:ea:7f:8b:7b:7f:7b:73:
                    30:1b:5e:3b:b1:14:a4:62:b5:88:2e:2e:4b:eb:41:
                    a5:68:17:0b:f8:40:42:04:02:33:fc:5d:52:f4:9b:
                    a9:3f:61:6d:b6:97:18:39:af:0a:6a:72:0c:ba:8e:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CD:EC:32:35:11:16:61:AB:47:8C:D1:FE:31:F5:0C:6A:87:04:C0
            X509v3 Authority Key Identifier:
                keyid:A0:57:94:59:EC:07:98:D0:4F:70:69:51:2F:96:4B:DB:FD:FE:B1:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/0/A0579459EC0798D04F7069512F964BDBFDFEB1B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0579459EC0798D04F7069512F964BDBFDFEB1B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/0/34352e3136382e3132382e302f32322d3234203d3e20323638313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:64:74:d2:32:23:0a:3a:c7:13:74:18:25:b1:50:c4:37:78:
         59:84:cf:0e:1f:96:55:92:2c:d0:e7:65:c2:7a:ee:a1:fe:09:
         b0:4c:8b:98:60:eb:7e:40:cf:d7:b6:bf:7d:3c:93:78:68:fa:
         ef:ae:e1:a1:c3:bc:c8:3b:f2:be:15:e1:4b:e7:a9:dc:2e:bf:
         cf:21:13:a9:2f:9b:6c:ab:fd:6c:0d:a8:83:b1:cf:6f:ea:b5:
         90:0a:52:e4:e2:30:cc:dd:ca:08:cc:72:53:ea:8c:21:2c:d3:
         38:da:b1:12:c8:a5:3a:91:fb:0e:4e:15:4c:a0:46:fd:34:37:
         f1:81:f6:5f:5b:08:72:22:ff:30:97:bd:f7:80:6a:0c:3f:3c:
         c7:2f:99:8f:ba:fd:f1:c9:c1:61:56:03:64:33:bd:3a:84:b0:
         c7:50:b4:00:16:86:2d:97:8a:fa:b2:5d:c2:d9:df:08:ac:ea:
         af:a1:3f:ce:9b:9f:d0:b1:33:2e:fa:2d:e8:32:31:77:22:d5:
         71:26:00:a2:55:0f:66:34:2a:1b:d5:5a:b3:00:e8:2c:33:6f:
         28:35:f6:2c:57:fd:05:c4:ea:b7:75:ba:38:bb:e8:6e:9a:00:
         53:1d:a3:ce:f7:9e:9b:de:16:fc:fd:f3:87:f8:02:29:50:97:
         d4:62:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org