Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130392e302f32352d3235203d3e203631353839.roa
File:                     34352e3233302e3130392e302f32352d3235203d3e203631353839.roa (raw, json)
Hash identifier:          U6/hF9/vfDpG59fUVZSSU0WedvSZ4vsye1XpgjffkSI=
Subject key identifier:   8F:79:00:D9:FA:E8:B8:73:2A:9B:1F:3D:0F:72:DC:D3:3E:D8:5A:21
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       34DDE710A561F960DC8681FE46A521223075826C
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130392e302f32352d3235203d3e203631353839.roa
Signing time:             Wed 10 Jan 2024 13:02:52 +0000
ROA not before:           Wed 10 Jan 2024 12:57:52 +0000
ROA not after:            Wed 08 Jan 2025 13:02:52 +0000
asID:                     61589
IP address blocks:        45.230.109.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:dd:e7:10:a5:61:f9:60:dc:86:81:fe:46:a5:21:22:30:75:82:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Jan 10 12:57:52 2024 GMT
            Not After : Jan  8 13:02:52 2025 GMT
        Subject: CN=8F7900D9FAE8B8732A9B1F3D0F72DCD33ED85A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:16:be:10:1f:90:1f:9e:68:de:d5:06:09:
                    d9:65:10:f2:8f:b8:1e:7d:82:1c:d9:03:b2:e2:74:
                    95:4a:1f:7a:35:5e:8e:21:0a:eb:2a:cc:e1:56:80:
                    73:a2:16:b4:90:aa:e7:52:6b:5b:d2:30:58:07:1d:
                    1d:ec:40:7c:9b:e3:d1:5d:da:60:c6:1b:e9:3b:11:
                    2f:1f:d3:c4:6f:dd:59:42:6d:8e:66:36:4e:e5:9e:
                    5b:00:f5:69:47:f1:b9:6f:bc:3d:e7:00:42:e6:3d:
                    0f:d3:c5:73:8e:ce:0d:97:76:4b:e8:19:61:65:79:
                    98:ea:a8:a3:0e:22:7d:3a:45:50:be:b8:ba:4c:22:
                    55:19:fb:c6:de:2f:ac:3c:e2:3c:4e:b4:ce:3f:fd:
                    1a:9d:24:25:28:79:6b:39:68:51:f8:51:74:c0:6e:
                    53:59:2b:87:26:2d:1e:35:db:8d:4d:4d:5d:9e:b4:
                    35:cf:07:36:4b:a0:79:6f:57:94:da:9b:c7:f4:c6:
                    70:d6:ad:cf:b3:3b:d0:30:61:96:f2:d1:58:a7:4b:
                    1f:cb:b5:08:a8:4f:ca:e3:7e:18:6b:e5:bd:25:82:
                    9d:c9:40:b4:cb:9d:23:32:21:f7:cf:21:46:26:9d:
                    ad:21:bf:f8:8e:ce:de:7b:d6:62:40:e1:59:63:04:
                    93:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:79:00:D9:FA:E8:B8:73:2A:9B:1F:3D:0F:72:DC:D3:3E:D8:5A:21
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130392e302f32352d3235203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.109.0/25

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:74:ac:6f:82:55:3e:76:37:01:1d:0c:e2:ef:1a:f2:9b:
         bd:0d:49:be:76:14:a7:27:6b:3f:d3:27:12:81:60:a7:53:da:
         4d:f6:93:b1:cd:f2:df:5c:24:79:f3:dd:fb:43:79:11:a2:0c:
         32:16:63:04:21:4a:9c:f9:0d:29:8f:73:82:a3:2c:06:a5:9d:
         96:4e:43:20:31:49:37:75:60:e9:4b:51:a9:40:e0:75:f0:3e:
         05:ec:8d:e2:32:83:7b:ce:7a:19:74:f8:9b:d5:2a:2b:db:8e:
         b3:c9:ba:63:63:f2:a0:2b:17:a9:2f:2e:1e:5b:90:83:1b:fe:
         72:ab:b8:65:9b:5f:cf:1b:b9:f7:92:6f:61:e2:57:9b:fb:7e:
         df:78:2b:64:d5:60:86:52:88:7c:0e:16:bb:f5:e8:d6:ec:d7:
         73:a3:ba:66:c2:60:b6:bc:ca:44:70:97:34:3e:8e:28:2a:c8:
         dc:45:3a:dd:03:db:49:2a:cd:c0:e8:41:74:b7:05:69:e4:77:
         01:51:a3:fd:a5:79:6c:ab:3a:aa:9f:e6:0f:d0:c9:3e:9e:f8:
         bf:c0:3e:72:c1:c0:65:79:72:e5:73:6d:81:13:db:8b:69:1f:
         2c:80:16:8c:97:49:82:40:32:d2:38:8a:df:9b:fa:68:64:ca:
         2e:ec:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org