Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132392e302f32342d3234203d3e20323636353238.roa
File:                     34352e36352e3132392e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier:          QbSAjt68+JvaFUI4ghusLrOdJ7gX2G1IC4Qjscfb8oA=
Subject key identifier:   20:C8:55:B8:E9:DF:E8:99:5B:38:59:A0:CB:CC:63:B2:5F:3F:13:8F
Certificate issuer:       /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial:       0E9874B7EC7E1B46819925ACD5845FB5D3B2D7AE
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132392e302f32342d3234203d3e20323636353238.roa
Signing time:             Tue 09 Jan 2024 11:36:59 +0000
ROA not before:           Tue 09 Jan 2024 11:31:59 +0000
ROA not after:            Tue 07 Jan 2025 11:36:59 +0000
asID:                     266528
IP address blocks:        45.65.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:98:74:b7:ec:7e:1b:46:81:99:25:ac:d5:84:5f:b5:d3:b2:d7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
        Validity
            Not Before: Jan  9 11:31:59 2024 GMT
            Not After : Jan  7 11:36:59 2025 GMT
        Subject: CN=20C855B8E9DFE8995B3859A0CBCC63B25F3F138F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:e2:99:50:d3:c8:c8:7b:28:a0:09:15:d5:
                    fd:38:d3:95:d2:c3:df:a8:cd:b5:a5:49:ae:84:f5:
                    55:fe:1f:ed:fe:c2:82:91:b0:09:dd:02:56:6c:39:
                    29:06:9c:9f:22:95:b5:57:84:85:66:f8:0e:ad:0c:
                    76:11:ef:4b:25:0d:b6:ad:de:6a:98:30:c1:3f:f2:
                    16:36:7a:07:cb:82:dc:fd:72:83:47:98:43:89:7b:
                    24:79:22:16:fc:7d:6f:6a:b1:c9:cf:ac:e6:68:22:
                    6b:7a:7f:49:75:ed:d0:d6:70:22:7a:71:42:06:6b:
                    13:59:24:a1:82:1e:32:e9:10:f0:8c:c8:85:96:12:
                    cb:99:f3:b7:ba:39:8a:48:91:90:4b:24:a2:e4:5f:
                    cd:9a:4e:06:cc:65:7a:c1:ba:b5:c0:1d:b0:2f:b5:
                    31:1b:60:39:80:da:1c:00:d7:0b:a2:78:96:40:b4:
                    e2:c7:43:65:a1:ae:ea:6b:40:5a:ad:06:c9:33:4c:
                    ec:d3:4f:bf:c6:e3:41:29:9f:47:d3:ba:c2:3a:19:
                    3a:da:2c:99:28:d8:f0:b4:f7:22:30:cc:29:9d:cb:
                    43:6c:e4:ff:41:42:73:08:a3:57:90:38:3a:ca:d4:
                    51:e2:10:c4:53:02:01:94:87:a5:c6:bf:f2:59:47:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C8:55:B8:E9:DF:E8:99:5B:38:59:A0:CB:CC:63:B2:5F:3F:13:8F
            X509v3 Authority Key Identifier:
                keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132392e302f32342d3234203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:8b:9b:cf:17:2a:5f:40:13:1b:4f:f2:ea:ea:c4:2f:22:
         a4:b1:62:de:d4:66:0a:bb:95:47:52:ec:b2:b8:7a:95:f9:47:
         35:aa:02:e1:7c:58:8a:c7:c2:1a:d3:2e:56:6e:4a:f6:40:24:
         e5:48:15:80:92:31:a6:8c:93:34:66:1d:5a:11:7a:4a:af:4a:
         f9:73:e1:ca:3c:e1:1e:0a:db:9d:0f:cf:8e:f4:4e:e1:f6:ed:
         2f:09:fb:08:96:32:2b:9a:11:35:a6:a4:39:df:a3:8b:a1:06:
         10:8b:47:db:bb:e9:be:99:5a:d7:4d:49:25:78:b5:9c:7a:00:
         a0:11:a0:c3:00:d1:7f:d3:87:50:7c:ad:83:31:db:ed:87:93:
         e3:6b:b6:3d:2f:b9:f2:75:5c:29:fd:54:68:3d:5b:65:4d:80:
         97:05:86:5a:3a:71:4d:63:cb:3b:a5:bb:c6:7e:63:64:11:ae:
         2f:6c:41:fb:b2:a0:96:52:0a:7f:45:86:d5:37:75:4e:7e:12:
         14:56:b9:f4:52:bc:ba:81:e9:18:ff:e7:67:0a:27:dd:09:6e:
         17:88:73:76:bd:54:f3:65:7b:e9:8a:8d:53:ea:b9:c6:44:52:
         c8:8a:1a:51:57:e8:ee:b0:cc:86:f9:40:2d:d0:dd:30:fc:4e:
         a0:1b:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org