Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa
File:                     34352e3139312e34302e302f32322d3332203d3e20323730323534.roa (raw, json)
Hash identifier:          WZaj7BtGRqYRoIIM9BbvBBCj9Xq5oc2CX9gwkwM3+3c=
Subject key identifier:   E4:05:A5:B4:8E:2E:02:CE:D0:29:C5:56:6A:D8:85:D0:E6:80:62:27
Certificate issuer:       /CN=02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3
Certificate serial:       79D5EF491C823824C78813EDED0C816E598D411D
Authority key identifier: 02:A6:52:AC:86:BF:FF:5E:3B:32:1D:94:C1:C1:4F:5A:F8:0C:E1:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa
Signing time:             Tue 21 Nov 2023 03:21:06 +0000
ROA not before:           Tue 21 Nov 2023 03:16:06 +0000
ROA not after:            Tue 19 Nov 2024 03:21:06 +0000
asID:                     270254
IP address blocks:        45.191.40.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d5:ef:49:1c:82:38:24:c7:88:13:ed:ed:0c:81:6e:59:8d:41:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3
        Validity
            Not Before: Nov 21 03:16:06 2023 GMT
            Not After : Nov 19 03:21:06 2024 GMT
        Subject: CN=E405A5B48E2E02CED029C5566AD885D0E6806227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:b8:77:50:e4:b6:2e:88:28:5a:63:18:20:
                    40:27:67:23:38:cb:07:ba:0d:69:00:87:7f:bc:a7:
                    f2:6e:89:b2:7f:f8:b0:79:64:65:00:3c:00:6c:7d:
                    04:8b:11:1f:09:11:9d:43:4d:f8:b5:7f:15:9c:ad:
                    f6:c1:78:97:e3:2b:d6:60:d5:cc:d9:f4:1e:ef:29:
                    21:cd:be:63:17:23:78:e4:f0:5f:f5:50:87:9a:51:
                    40:01:33:ce:a1:e3:81:a8:e2:69:ac:31:aa:d1:21:
                    93:cf:85:2b:35:99:7f:0e:83:c1:5a:00:c4:58:0f:
                    dd:43:62:50:6d:fe:de:9d:29:29:77:b6:07:55:88:
                    81:3b:48:b8:18:c7:18:fa:e4:24:d3:2a:ba:c9:8a:
                    fa:f5:11:84:72:22:7d:c2:6e:53:ee:16:6c:d2:8f:
                    f0:6b:1b:65:18:36:86:bc:a7:a5:cd:fe:88:cc:0f:
                    ba:b5:a0:58:c2:cd:0b:ee:a5:b2:62:31:8d:c9:e7:
                    27:92:78:58:a1:df:85:5d:78:14:60:dc:d4:37:7e:
                    c9:9f:b3:3d:b9:1e:e8:b0:2f:51:08:16:ba:e2:c5:
                    b0:4c:d5:9f:cf:cf:82:c5:33:45:b5:cb:a2:a2:36:
                    b1:b3:be:c3:78:81:dc:2f:9a:49:42:6e:d7:da:62:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:A5:B4:8E:2E:02:CE:D0:29:C5:56:6A:D8:85:D0:E6:80:62:27
            X509v3 Authority Key Identifier:
                keyid:02:A6:52:AC:86:BF:FF:5E:3B:32:1D:94:C1:C1:4F:5A:F8:0C:E1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:17:c7:5d:4e:31:e9:44:2c:d5:7a:30:c5:e8:f4:27:b6:5c:
         5b:08:d2:cd:5d:86:e9:e9:f7:45:93:ba:4e:bb:e2:63:74:c5:
         2d:24:65:b6:0b:84:9a:29:08:43:a6:f6:5c:58:b2:da:2f:22:
         60:93:4b:31:84:75:92:de:b3:b7:62:f3:97:e0:a0:6b:1a:b8:
         bf:b9:ca:e1:9a:69:e4:35:8b:05:d0:51:b5:05:24:e8:4d:9e:
         5e:aa:ec:e9:05:fc:a9:de:c4:64:70:c8:c4:7d:51:a9:ee:0d:
         07:c3:80:38:52:5b:63:0b:09:22:15:7e:fe:e2:51:6a:df:c6:
         9f:92:87:0a:db:c0:69:c3:aa:2d:58:dc:98:6a:45:4c:89:53:
         62:d6:cc:8a:a6:a8:c8:08:d1:a2:0f:c1:62:06:df:4e:14:68:
         33:79:4f:e5:84:2b:82:c5:00:a7:74:8f:aa:54:14:cf:fa:73:
         79:7a:43:31:f8:9e:d7:4c:bf:1b:2e:fc:68:c8:4f:06:3b:f4:
         19:e4:c3:d3:65:e7:98:9c:3f:03:d0:ad:cc:1b:6c:e9:c2:d8:
         db:16:85:40:d7:fa:37:b5:a9:7a:74:ee:26:08:d1:32:7f:ed:
         98:3a:34:65:11:f5:72:6d:9c:c8:45:da:5e:b0:85:d7:a7:62:
         0c:94:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org