Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32342d3234203d3e20323636353238.roa
File:                     34352e36352e3132382e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier:          aXfj/De4cXHAVp3d1jS+xcMjwQoESiFLKTnQbPIe1YU=
Subject key identifier:   25:C0:B1:C6:60:BC:3B:09:FF:65:93:0C:99:DE:D8:4A:26:4E:0A:03
Certificate issuer:       /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial:       1AA82EEB3B3520F274F899519D0471EF4F8FDE7D
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32342d3234203d3e20323636353238.roa
Signing time:             Tue 09 Jan 2024 11:37:00 +0000
ROA not before:           Tue 09 Jan 2024 11:32:00 +0000
ROA not after:            Tue 07 Jan 2025 11:37:00 +0000
asID:                     266528
IP address blocks:        45.65.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a8:2e:eb:3b:35:20:f2:74:f8:99:51:9d:04:71:ef:4f:8f:de:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
        Validity
            Not Before: Jan  9 11:32:00 2024 GMT
            Not After : Jan  7 11:37:00 2025 GMT
        Subject: CN=25C0B1C660BC3B09FF65930C99DED84A264E0A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:5b:23:c4:72:f6:d0:e3:2b:e6:77:57:94:
                    1a:2c:24:86:ae:65:89:08:48:7d:36:d7:ce:a9:d2:
                    d6:62:eb:34:bc:e3:d1:97:7b:66:a8:0d:12:80:01:
                    c2:99:ea:7f:d1:32:b7:4d:95:b7:38:fd:9a:88:d1:
                    ca:3f:ff:90:60:20:70:f6:15:2f:72:23:e3:f3:f2:
                    ac:c7:57:b9:b4:6e:24:8e:92:cc:cc:cd:ac:bb:ba:
                    6a:bf:f1:86:81:bb:23:ab:5d:00:44:8b:e8:00:89:
                    87:07:9a:e4:fa:6f:26:6d:b7:88:29:31:5a:50:eb:
                    3a:2e:23:51:f6:d7:8d:b3:da:81:b5:52:dd:1d:6d:
                    8e:64:b8:9d:fd:7a:61:51:b1:7e:a9:31:f1:ee:2a:
                    4b:a5:eb:b2:a7:18:ca:4d:91:c4:b5:35:9d:8b:21:
                    9e:31:32:63:51:02:3e:90:af:5f:94:58:20:f8:86:
                    6a:b6:20:c3:4e:6f:ff:c3:c8:a5:0c:7c:b5:7a:26:
                    eb:e6:9a:6d:0e:78:33:e8:2a:2c:2c:d3:ba:fd:95:
                    c3:8d:de:91:bb:2b:3d:b1:cb:5b:04:77:dc:fa:4f:
                    eb:f6:3d:9e:42:89:3c:36:36:83:24:cf:d8:3c:1b:
                    19:9b:7a:08:5f:5f:9b:8e:ff:09:89:9b:85:9a:0b:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C0:B1:C6:60:BC:3B:09:FF:65:93:0C:99:DE:D8:4A:26:4E:0A:03
            X509v3 Authority Key Identifier:
                keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32342d3234203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:cf:48:42:72:46:0c:d8:4c:4f:8c:dc:d4:94:5b:71:1f:d2:
         38:1a:84:ee:b5:a6:e7:f5:5b:03:94:06:21:08:56:53:48:00:
         96:df:c8:cf:cc:7c:5b:11:89:ab:0c:d8:82:e2:98:f2:d8:00:
         e4:8c:4c:ff:60:27:69:10:eb:f9:21:7d:76:2e:0a:fd:7b:aa:
         69:58:ad:1d:3e:64:94:c3:5b:87:db:e5:18:5c:50:62:57:9e:
         0e:5b:7d:a5:8d:02:08:5c:24:71:b5:92:04:13:0e:bc:6f:f6:
         4f:e7:c5:af:ea:f6:0c:d6:38:64:01:db:f5:76:63:7d:ee:44:
         e0:bb:6b:30:f3:ac:7b:88:3e:93:8a:91:15:ee:a8:8e:3b:67:
         4f:e0:11:ae:ee:ee:a7:84:97:84:d1:da:62:11:bd:af:4a:ea:
         77:55:7b:2e:d7:79:2f:98:88:66:e8:cc:b5:4b:ec:99:98:09:
         7c:fb:7c:8e:99:99:75:6b:46:d1:9b:e4:61:8b:af:0a:28:c6:
         9f:27:99:c3:0f:30:d3:58:62:81:84:32:12:77:b1:a4:f6:e7:
         fc:ac:ce:21:bd:8e:a2:32:a4:3b:7b:1a:70:02:a9:dc:63:08:
         ee:00:5a:43:95:23:65:5c:7f:a0:d3:6c:e1:81:9c:ce:84:07:
         2c:06:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org