Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/34352e3136392e3135342e302f32332d3233203d3e20323638313131.roa
File:                     34352e3136392e3135342e302f32332d3233203d3e20323638313131.roa (raw, json)
Hash identifier:          95o0ihaqfbhxglaDfQ4vkJCJKil9/cuG9nWJxVYA3dk=
Subject key identifier:   15:41:F4:D1:7C:05:FD:CE:B8:87:8D:B8:C7:6E:71:09:C6:E9:2A:3B
Certificate issuer:       /CN=C2B4B346AF46EEEF2859F73836F37B82FF7A26B5
Certificate serial:       6BC38AF8F9A1F68AB0B475F55E5F02AFABB465E7
Authority key identifier: C2:B4:B3:46:AF:46:EE:EF:28:59:F7:38:36:F3:7B:82:FF:7A:26:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2B4B346AF46EEEF2859F73836F37B82FF7A26B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/34352e3136392e3135342e302f32332d3233203d3e20323638313131.roa
Signing time:             Wed 24 May 2023 19:24:22 +0000
ROA not before:           Wed 24 May 2023 19:19:22 +0000
ROA not after:            Wed 22 May 2024 19:24:22 +0000
asID:                     268111
IP address blocks:        45.169.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c3:8a:f8:f9:a1:f6:8a:b0:b4:75:f5:5e:5f:02:af:ab:b4:65:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B4B346AF46EEEF2859F73836F37B82FF7A26B5
        Validity
            Not Before: May 24 19:19:22 2023 GMT
            Not After : May 22 19:24:22 2024 GMT
        Subject: CN=1541F4D17C05FDCEB8878DB8C76E7109C6E92A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:42:aa:7a:48:53:e0:19:50:91:d0:c8:5f:
                    63:35:d8:31:6b:48:17:87:92:27:f7:48:1a:8b:f9:
                    71:ef:55:aa:c5:d9:da:39:e6:2b:a2:99:13:e7:51:
                    75:bc:20:15:24:00:e9:67:38:a9:0f:56:0b:4a:c1:
                    d6:65:4d:ff:58:dd:14:60:4b:2b:91:f9:5b:24:5f:
                    87:21:06:6f:53:b2:b8:6d:ec:19:d3:ca:dc:6a:67:
                    fe:13:be:a6:24:a9:7f:97:af:be:1b:ba:3d:07:fc:
                    fd:99:8b:fd:26:99:7d:6e:d6:1d:aa:e4:4b:8e:85:
                    90:fd:59:09:a1:71:c4:47:c0:4f:fc:fb:d5:f4:0a:
                    e6:74:10:f5:3f:81:27:6e:1e:29:8f:15:97:32:46:
                    aa:b1:3f:68:dd:b0:45:65:95:e8:65:fe:27:a9:26:
                    f4:c6:f9:a1:8c:b8:42:30:bd:a0:06:59:cc:5d:12:
                    eb:f9:c7:df:d5:34:ac:a2:6f:00:b6:83:9d:67:7c:
                    4c:f1:95:55:a3:c2:0e:0c:fe:81:7b:8b:25:cb:40:
                    1f:f8:da:0d:65:06:64:62:26:5f:ad:09:fb:fb:23:
                    6e:8f:8f:66:ce:0d:fa:dd:83:54:69:f6:9c:c2:5e:
                    1c:16:18:fb:5f:97:ef:72:19:8b:30:3a:b2:3c:72:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:41:F4:D1:7C:05:FD:CE:B8:87:8D:B8:C7:6E:71:09:C6:E9:2A:3B
            X509v3 Authority Key Identifier:
                keyid:C2:B4:B3:46:AF:46:EE:EF:28:59:F7:38:36:F3:7B:82:FF:7A:26:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/C2B4B346AF46EEEF2859F73836F37B82FF7A26B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2B4B346AF46EEEF2859F73836F37B82FF7A26B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/34352e3136392e3135342e302f32332d3233203d3e20323638313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:b4:25:b7:8c:b7:19:77:9e:22:a9:79:db:d1:de:34:42:01:
         40:3b:af:e9:36:d2:84:88:d1:00:02:01:43:54:be:2d:10:76:
         e9:62:f6:8f:86:cf:e2:48:c9:5b:85:ec:9b:20:a3:59:c6:ee:
         cf:b6:b0:1a:4c:31:1d:ea:66:b4:53:4f:db:26:c3:18:5b:ec:
         2c:9f:fc:2a:45:8e:80:09:11:3c:d3:c5:29:f2:c6:49:56:c6:
         50:15:f0:36:fc:1e:53:ed:12:b9:b1:b7:f0:34:57:a9:4f:07:
         fe:63:89:f5:bc:88:9b:45:85:93:cf:f4:f8:1a:04:97:96:bc:
         a8:9c:e0:d3:e2:f7:a4:93:c3:2b:0f:3f:0d:8c:03:c0:1c:c6:
         6b:94:11:ce:61:1b:60:be:49:eb:ed:cb:df:9d:7f:8e:5e:6d:
         0a:3f:58:f8:2e:6c:c1:65:c8:2c:45:7f:cf:13:f2:23:49:20:
         61:5f:ac:70:1a:8c:0d:72:13:09:f7:d9:d9:a2:bd:26:fa:68:
         78:f5:80:40:18:85:cf:6e:15:ed:26:50:ef:0f:86:70:96:26:
         bc:d0:6b:d8:f8:fd:b6:97:3d:29:ff:5e:90:c0:5c:e1:3d:19:
         80:52:89:1f:67:ec:b3:a1:22:9c:0b:cb:0f:f9:46:0f:a3:a5:
         40:03:62:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org