Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/34352e3139312e3132382e302f32322d3234203d3e20323639363839.roa
File:                     34352e3139312e3132382e302f32322d3234203d3e20323639363839.roa (raw, json)
Hash identifier:          c1nlK8zKJTbJ0sdFU53sdoILA7Elgks8qpzSKIL2qGM=
Subject key identifier:   60:3A:BD:7A:47:B0:E8:BA:98:E6:13:A4:B5:8C:19:21:AD:FD:46:6C
Certificate issuer:       /CN=A230333F7690F474E284A95BADD3D39F6C5CB9F3
Certificate serial:       7CBD6273D702B22B8096FEC33E2B8C4F5E789B0C
Authority key identifier: A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/34352e3139312e3132382e302f32322d3234203d3e20323639363839.roa
Signing time:             Mon 27 Feb 2023 18:07:54 +0000
ROA not before:           Mon 27 Feb 2023 18:02:54 +0000
ROA not after:            Mon 26 Feb 2024 18:07:54 +0000
asID:                     269689
IP address blocks:        45.191.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bd:62:73:d7:02:b2:2b:80:96:fe:c3:3e:2b:8c:4f:5e:78:9b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A230333F7690F474E284A95BADD3D39F6C5CB9F3
        Validity
            Not Before: Feb 27 18:02:54 2023 GMT
            Not After : Feb 26 18:07:54 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7a:5f:1a:7d:7c:42:3c:84:3c:07:4a:8a:5c:
                    b0:10:5e:a4:24:b0:54:59:70:7f:14:a9:ce:07:01:
                    03:e6:83:d0:38:b5:8a:b3:f6:a1:63:a7:f6:01:76:
                    62:af:62:4e:b5:2d:22:ee:09:32:94:6f:68:3a:63:
                    9f:39:ee:84:0f:60:fc:ae:82:3a:20:95:5c:e0:7d:
                    0a:cb:13:e0:3c:67:c4:b8:e6:cb:4d:09:52:a8:6f:
                    65:7a:93:a9:b1:72:ec:4b:a4:f4:cb:51:77:30:1c:
                    c4:97:0c:73:bc:b2:55:86:c9:4e:8d:c9:56:9b:c9:
                    30:40:cf:cf:74:0a:91:a1:19:77:d5:c1:7a:94:86:
                    be:bc:dc:d8:ac:f8:c4:a8:46:d8:9d:b4:7e:9f:41:
                    0a:cc:10:41:3f:e7:04:5c:d0:a6:88:41:3f:85:12:
                    0b:6c:c0:92:45:03:7b:3b:a0:06:b9:14:10:b5:91:
                    67:05:ab:43:de:41:2a:e3:63:b2:46:49:5e:a5:20:
                    83:3e:ca:a9:85:eb:ef:4a:5e:2d:1a:c5:4c:ff:33:
                    aa:ee:13:1a:74:8b:58:ee:7f:3f:e1:74:87:97:6d:
                    63:55:ed:6f:d7:d1:0f:22:f8:c0:ea:db:87:02:04:
                    73:89:b7:f1:3c:f4:ba:07:43:1c:4c:bf:9b:e2:55:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3A:BD:7A:47:B0:E8:BA:98:E6:13:A4:B5:8C:19:21:AD:FD:46:6C
            X509v3 Authority Key Identifier:
                keyid:A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/34352e3139312e3132382e302f32322d3234203d3e20323639363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:f5:58:2e:6e:84:21:32:e9:9c:39:54:39:57:0e:9d:7e:
         ea:af:0b:79:1a:a7:5f:b8:4d:1a:33:f7:d2:ac:a9:cb:da:71:
         dd:0c:ac:68:0a:f7:02:e7:06:53:d1:0a:54:e6:ec:d1:a1:70:
         ea:7d:3f:c9:5f:74:5a:56:09:63:b4:91:1b:72:c9:0b:ca:cf:
         36:1e:05:66:fa:d1:8b:4b:51:c1:2b:78:f9:02:73:17:32:cd:
         cf:fa:57:ba:7a:7c:67:26:95:09:2c:75:c1:20:a6:c2:9b:31:
         3a:84:ac:62:1d:f4:89:2c:ca:16:fe:48:88:9d:ea:47:a3:77:
         73:42:e1:06:41:25:7b:61:70:af:4e:12:63:93:83:40:68:a1:
         3f:8f:96:15:e1:45:27:05:03:b6:ff:be:d0:27:77:94:d2:ef:
         81:2a:5d:31:00:fd:8c:a4:2d:9e:ed:65:83:2e:a7:6e:41:8c:
         e9:82:06:3a:bd:95:04:b7:ba:ad:03:a5:01:ec:d1:67:62:17:
         f3:7c:45:e6:1d:16:37:f5:76:01:c1:16:ea:54:21:76:d8:67:
         5b:ac:ce:04:af:08:41:fe:4e:4b:1d:2d:5c:53:b9:6e:d1:d7:
         a4:e9:c7:02:ed:65:4d:36:ca:c5:e5:fa:49:30:5b:b4:77:6a:
         d7:3e:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org