Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130392e302f32342d3234203d3e203631353839.roa
File:                     34352e3233302e3130392e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier:          xULDWi9AYSHhiXHw0F4JI18AryFSRSuGdTlqfqncOYY=
Subject key identifier:   07:71:ED:68:D5:59:C2:79:89:0D:8E:BA:B2:1C:12:55:3A:92:44:30
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       3DDFD7A697D256965963685D9F02C9344870AE90
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130392e302f32342d3234203d3e203631353839.roa
Signing time:             Mon 24 Apr 2023 11:53:56 +0000
ROA not before:           Mon 24 Apr 2023 11:48:56 +0000
ROA not after:            Mon 22 Apr 2024 11:53:56 +0000
asID:                     61589
IP address blocks:        45.230.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:df:d7:a6:97:d2:56:96:59:63:68:5d:9f:02:c9:34:48:70:ae:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Apr 24 11:48:56 2023 GMT
            Not After : Apr 22 11:53:56 2024 GMT
        Subject: CN=0771ED68D559C279890D8EBAB21C12553A924430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:28:65:55:3d:ea:14:20:1c:83:1c:f1:b2:4e:
                    6d:24:c7:aa:ad:b7:4e:0a:a4:b6:66:c6:4d:d3:84:
                    8c:ea:9b:65:22:80:30:5f:0c:61:b4:be:ae:60:80:
                    00:6d:75:4f:bf:63:27:23:cf:e0:6d:1b:ce:29:ae:
                    cb:58:a9:18:53:6c:95:89:85:b0:c9:57:c3:f2:1e:
                    00:ad:b2:1e:2d:8c:a5:26:aa:8a:1e:bd:f9:02:9e:
                    77:30:af:5a:a9:a5:12:33:fa:cf:9a:15:6e:5a:80:
                    24:c3:38:51:9d:37:ba:42:62:88:c1:83:ed:d0:4d:
                    ad:f2:d1:33:47:ce:5e:78:f9:18:79:c7:39:46:17:
                    9c:60:14:e4:a4:2f:25:39:8c:b5:8f:38:61:a6:fd:
                    37:96:f2:94:bb:d3:c4:7f:1d:f9:ca:82:ed:02:ee:
                    5b:b4:ca:fb:78:03:9e:e9:cb:e5:05:01:5b:d7:4a:
                    e3:de:ae:22:00:d5:94:73:45:a5:62:66:26:fd:7f:
                    a1:1b:f8:78:4f:33:07:b6:be:9b:13:b2:da:ac:71:
                    60:06:93:02:93:a6:0b:d1:2b:a8:41:dc:6d:6b:ea:
                    c5:5a:4e:7c:2b:47:2c:3c:b7:d5:2e:23:45:d2:a5:
                    d5:49:87:ad:a8:09:9f:a2:4f:23:d3:61:8a:d8:09:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:ED:68:D5:59:C2:79:89:0D:8E:BA:B2:1C:12:55:3A:92:44:30
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130392e302f32342d3234203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:28:8d:eb:94:5f:ae:17:06:61:ae:5e:71:ed:87:27:f0:
         fc:a9:63:be:f9:66:43:8e:1c:8c:35:d9:fd:ea:bc:fa:c7:42:
         5e:f2:43:ab:4f:3f:f7:23:13:72:8a:db:73:19:2c:64:e7:f8:
         6d:9e:5d:25:4c:49:fc:9e:8d:8b:03:42:79:a4:d5:e1:4b:48:
         e9:b5:e0:50:65:ef:65:37:d1:16:1f:8d:d8:ed:14:e6:ba:d5:
         33:da:8c:3f:2c:c8:9d:e5:53:66:9a:7d:de:ef:f3:91:0e:7f:
         b4:cc:fd:39:af:54:a6:8c:04:97:44:dc:17:37:5c:ee:5c:d6:
         9d:a8:36:7e:0a:92:59:0c:6a:10:7b:66:12:ab:23:3a:24:32:
         15:62:f9:27:25:3d:02:5f:2f:e6:a9:6a:e2:85:6e:52:5e:5d:
         6c:7e:17:f3:c0:16:45:0c:d9:63:cd:e9:d9:3f:4a:6f:b3:b8:
         ee:8e:cb:a6:dd:ee:61:84:5e:79:54:d1:43:9d:69:fc:1f:e4:
         b6:7f:d9:0e:36:27:ab:07:a0:56:e9:0a:fa:44:1a:f3:c7:63:
         f4:6d:aa:35:91:13:ab:f5:01:2c:41:57:4a:e5:55:ce:80:7c:
         77:41:49:25:ff:71:08:6b:2c:53:4c:a2:7d:fb:94:57:4c:bc:
         74:f4:1a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org