Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa
File:                     34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa (raw, json)
Hash identifier:          b5+4q0hSWFEzogGqrpBDbS02aQCxfPD0d4FGBEch5L8=
Subject key identifier:   02:E8:FD:F7:21:05:32:3A:CD:9B:EB:59:C9:2B:0A:CF:DA:57:E0:FB
Certificate issuer:       /CN=0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9
Certificate serial:       58233DFE5D40AC08308C64D9C1E203ED0804B95A
Authority key identifier: 0D:C1:9C:23:CD:B3:5F:B0:A5:F7:42:FD:8D:6E:4C:05:3E:F0:0E:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa
Signing time:             Thu 16 Nov 2023 19:21:38 +0000
ROA not before:           Thu 16 Nov 2023 19:16:38 +0000
ROA not after:            Thu 14 Nov 2024 19:21:38 +0000
asID:                     269329
IP address blocks:        45.184.128.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:23:3d:fe:5d:40:ac:08:30:8c:64:d9:c1:e2:03:ed:08:04:b9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9
        Validity
            Not Before: Nov 16 19:16:38 2023 GMT
            Not After : Nov 14 19:21:38 2024 GMT
        Subject: CN=02E8FDF72105323ACD9BEB59C92B0ACFDA57E0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:3d:29:d8:b8:d5:56:98:3e:ee:88:b6:c9:
                    71:c3:b7:1e:e7:bf:7d:9f:8d:69:ee:61:48:25:2e:
                    d9:5f:97:45:97:50:c7:51:21:62:9d:b6:83:9a:b1:
                    69:d8:4f:6b:87:c0:32:a1:82:9f:92:6b:1d:d6:ab:
                    98:93:b1:d9:79:5f:c6:cf:0a:e6:c0:db:f2:dc:b7:
                    99:22:32:05:4d:ae:2b:e5:cc:4a:a9:6c:eb:a7:b8:
                    55:fb:1f:2c:09:f6:a4:1d:49:f8:d8:d3:8c:c8:9a:
                    32:da:5e:24:a1:ba:94:49:bf:89:f1:26:46:52:79:
                    8b:e4:37:79:23:c0:43:af:cb:d0:16:70:cc:1a:01:
                    68:db:34:1f:ad:32:49:09:ec:ef:f1:83:fd:d1:44:
                    f0:9f:9a:15:8e:6b:19:92:9d:65:5d:d0:ed:fa:e6:
                    d2:46:6c:dc:a4:a5:b9:a7:c2:c9:01:73:be:18:7e:
                    0b:0c:97:5e:05:1e:32:99:30:d4:1a:72:55:55:52:
                    11:92:f7:66:4c:11:b3:d3:ee:be:f2:39:e3:7f:ce:
                    d7:6c:d8:28:a2:08:dd:44:f1:21:c6:f8:da:09:ef:
                    a6:28:c2:5c:aa:50:4d:8f:ff:63:c7:2b:78:78:ae:
                    28:b1:0b:4e:7f:e0:cc:79:ce:ff:78:6d:ce:86:15:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E8:FD:F7:21:05:32:3A:CD:9B:EB:59:C9:2B:0A:CF:DA:57:E0:FB
            X509v3 Authority Key Identifier:
                keyid:0D:C1:9C:23:CD:B3:5F:B0:A5:F7:42:FD:8D:6E:4C:05:3E:F0:0E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC19C23CDB35FB0A5F742FD8D6E4C053EF00EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:36:2d:14:c2:58:06:67:36:da:39:b5:72:64:e4:cf:2c:
         65:e6:1e:cc:9e:8f:23:c2:8c:af:91:87:d5:59:d0:5e:15:74:
         9a:cf:82:f1:53:06:9c:bd:6c:ea:6f:69:ef:d9:15:4f:68:c1:
         1d:cf:2e:90:70:0b:eb:8c:0f:b2:0b:08:e8:cf:db:1b:cb:6c:
         22:bd:2f:2e:e1:86:5d:2d:1a:4a:3e:be:7f:4e:d1:61:ad:59:
         66:8c:bb:ee:8c:69:21:92:73:c3:f5:1d:99:45:40:ac:a5:7f:
         38:b9:9e:87:56:61:d3:21:cd:b7:e2:b8:77:13:f9:4b:e0:37:
         2b:ce:90:6d:bd:97:ef:0e:4b:83:f4:1a:83:40:54:09:62:87:
         66:cc:a4:9d:da:29:0d:f4:25:ba:fc:39:9e:3f:6d:5e:1e:b5:
         7a:de:20:55:18:53:9d:7c:13:d3:c7:0b:43:46:fb:44:75:92:
         e6:ed:1e:ca:d5:00:3e:3d:cb:0b:70:a8:23:d2:57:3b:16:cc:
         3d:19:a2:0a:fb:4a:59:2b:e2:12:6f:35:19:bf:d6:f1:22:37:
         8d:12:55:bb:80:aa:44:77:d3:18:15:5c:59:2d:39:ce:b5:ef:
         34:4b:74:a6:83:e2:b9:95:f4:ac:e0:77:b2:53:86:8f:de:24:
         b2:6f:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org