Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32332d3233203d3e20323636353238.roa
File:                     34352e36352e3133302e302f32332d3233203d3e20323636353238.roa (raw, json)
Hash identifier:          i6D6kdjjo9ZIPXRJZ8XDUHdb6R1TpZx1hGPCU82MfyY=
Subject key identifier:   76:6B:D0:B7:25:39:9F:3F:88:3E:64:F3:4B:01:9A:09:1A:02:09:CA
Certificate issuer:       /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial:       0735F593FFE3DD3A58BEE32BA26D3E246C023977
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32332d3233203d3e20323636353238.roa
Signing time:             Wed 31 May 2023 00:02:55 +0000
ROA not before:           Tue 30 May 2023 23:57:55 +0000
ROA not after:            Wed 29 May 2024 00:02:55 +0000
asID:                     266528
IP address blocks:        45.65.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:35:f5:93:ff:e3:dd:3a:58:be:e3:2b:a2:6d:3e:24:6c:02:39:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
        Validity
            Not Before: May 30 23:57:55 2023 GMT
            Not After : May 29 00:02:55 2024 GMT
        Subject: CN=766BD0B725399F3F883E64F34B019A091A0209CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:53:c1:56:4d:ef:23:28:16:36:8c:a5:9b:
                    e9:4b:cd:96:54:16:a2:78:ba:67:ce:85:71:8a:47:
                    ba:0d:fe:54:2b:c2:5f:cd:94:d9:9c:4e:b2:74:80:
                    57:98:dd:b7:9b:75:3f:64:8c:b1:f6:93:a1:cd:8a:
                    76:d9:ab:a2:80:40:c7:47:a4:53:72:c6:1d:20:61:
                    9c:4c:d3:30:c1:4c:61:9f:3e:5a:fd:29:f1:04:d1:
                    43:c5:d6:52:19:8d:23:0f:6e:65:c7:2b:c0:39:69:
                    67:3c:c6:06:43:b7:90:9e:6a:13:8e:78:82:9e:86:
                    ed:78:c6:51:1e:f6:53:64:14:9f:41:ce:d2:f3:a0:
                    3e:e0:78:1f:f5:a6:2a:b9:8b:fc:a0:b4:8c:d9:e6:
                    b2:60:69:fa:7d:df:ed:fc:8e:c5:5d:65:14:86:d4:
                    c5:fb:03:37:a3:4f:3e:f5:69:49:c6:2a:8a:db:5b:
                    a8:77:65:27:8d:5f:6f:9f:ba:84:99:b2:ef:93:dd:
                    f0:eb:33:0e:6d:0c:af:63:6e:b4:01:9d:7a:2c:4e:
                    3b:f8:66:21:f1:70:dd:c4:be:54:e2:66:9d:ae:ee:
                    e2:92:b9:da:8b:73:12:fc:08:87:8a:da:1c:c8:f4:
                    dd:dc:f7:cb:96:26:d2:19:09:47:18:41:cd:94:18:
                    47:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:D0:B7:25:39:9F:3F:88:3E:64:F3:4B:01:9A:09:1A:02:09:CA
            X509v3 Authority Key Identifier:
                keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32332d3233203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:0d:cc:35:1b:87:57:18:12:fc:cf:db:3a:2c:09:81:eb:8c:
         9a:15:59:4a:74:b5:55:86:99:5f:4a:ad:3f:77:ee:a0:6c:9a:
         ca:3b:9c:34:dd:51:60:84:db:d0:83:fc:0f:47:42:f8:a1:d4:
         bb:6d:05:86:ca:ef:04:28:2a:ec:a1:8c:4e:e5:ab:18:7b:35:
         c2:93:3a:ee:f6:49:fa:ed:ff:c5:03:d4:02:66:8c:d2:38:ce:
         c9:20:87:cd:34:8d:06:15:85:b3:bc:e4:d0:a1:91:3f:b1:9e:
         a8:ca:5a:00:2f:73:ff:73:20:e3:28:7a:73:b8:0e:a3:16:56:
         b1:4b:23:d3:9b:e8:63:79:88:53:ad:ea:73:6c:28:29:5a:15:
         5b:cb:6e:fe:e2:33:ff:64:ae:e1:e7:3b:81:0a:17:99:bb:c1:
         99:3e:24:77:ce:86:c7:b3:65:8f:77:f3:9a:54:f7:a1:e5:6f:
         0d:cc:b0:bb:f3:74:ff:0a:6a:9b:b9:c0:17:ee:62:95:cf:35:
         70:28:fb:47:2d:29:9f:cc:35:77:93:d2:52:c5:c2:b3:6b:b1:
         14:a0:6f:95:48:34:00:b9:10:02:52:29:3a:65:e3:b6:b6:64:
         f5:cd:83:8b:3c:ee:be:bc:e8:08:67:5b:b3:e2:08:4d:30:f8:
         b6:c2:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org