Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3131302e302f32342d3234203d3e203631353839.roa
File:                     34352e3233302e3131302e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier:          P/YpbhxDS8eO5UD+jgmCAC6ftpA6pJ9ho/HJB2STcVQ=
Subject key identifier:   A0:F9:F6:D2:27:59:7A:53:5E:53:A8:14:1E:D3:A1:CE:FF:D5:FE:66
Certificate issuer:       /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial:       5DD4CCEEA890580714A3FB950680A9F401F257ED
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3131302e302f32342d3234203d3e203631353839.roa
Signing time:             Mon 24 Apr 2023 11:54:11 +0000
ROA not before:           Mon 24 Apr 2023 11:49:11 +0000
ROA not after:            Mon 22 Apr 2024 11:54:11 +0000
asID:                     61589
IP address blocks:        45.230.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d4:cc:ee:a8:90:58:07:14:a3:fb:95:06:80:a9:f4:01:f2:57:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
        Validity
            Not Before: Apr 24 11:49:11 2023 GMT
            Not After : Apr 22 11:54:11 2024 GMT
        Subject: CN=A0F9F6D227597A535E53A8141ED3A1CEFFD5FE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:71:c8:3d:db:cd:68:e5:a7:a5:44:78:c8:
                    54:d3:e3:92:96:94:a6:01:8a:f1:c7:6c:8f:99:6c:
                    23:e8:26:aa:bf:27:ca:6a:43:2c:1b:92:ba:23:8f:
                    e9:d2:62:4c:ae:28:df:bc:e0:4d:30:22:d0:9b:d0:
                    e1:6c:bd:a6:07:9c:50:f0:8d:f7:a4:f3:d8:3e:fe:
                    83:c4:5a:97:6c:ff:df:8b:93:41:bf:00:85:e6:99:
                    6e:1d:51:cb:3d:0b:7e:ed:58:ed:d5:b6:f8:7f:d8:
                    ff:e0:36:e6:f8:9d:e0:da:a8:d1:f7:94:9a:db:78:
                    07:79:7a:a6:e7:bf:1a:b3:8a:9b:f3:76:7d:15:40:
                    50:48:d0:73:b1:6a:91:f9:0d:69:36:09:a0:72:31:
                    fa:24:3a:e8:60:56:ef:f7:81:ee:e9:67:5c:73:50:
                    f5:e1:86:a5:be:73:9a:22:b6:dd:ca:f1:d7:9f:db:
                    68:b5:61:18:bd:27:81:e4:2e:b6:c4:45:6b:82:f5:
                    1d:77:cc:d8:02:f4:21:63:76:0c:fc:f2:cd:bc:9a:
                    74:a2:c9:ac:b4:a6:49:51:24:79:e7:71:18:db:63:
                    2b:94:50:76:f1:a2:30:05:91:f1:84:37:cb:55:76:
                    54:d6:65:4d:cf:f2:bf:1b:58:d4:ad:f4:37:a3:4f:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F9:F6:D2:27:59:7A:53:5E:53:A8:14:1E:D3:A1:CE:FF:D5:FE:66
            X509v3 Authority Key Identifier:
                keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3131302e302f32342d3234203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:81:15:0c:d3:4c:e7:49:29:73:1e:66:6e:54:08:ca:58:
         29:5c:9c:3f:65:b3:e0:c0:a9:f0:c2:3c:5f:c8:35:36:c8:64:
         96:5b:9f:11:87:1d:28:4b:68:4d:58:3d:6c:c5:9c:ce:9d:6f:
         36:03:09:4f:93:0b:a7:b2:a3:c1:9b:a3:1f:8b:e7:e9:ab:8e:
         d2:c1:c0:b8:78:de:e2:c5:89:db:e8:52:b2:22:49:b2:b9:e8:
         3a:62:19:b3:59:d3:15:fc:35:8a:a1:7c:ce:2f:e5:50:84:72:
         d4:cc:ec:9f:86:23:7f:99:86:dd:d0:5b:63:be:32:e7:a6:9f:
         37:91:53:86:d5:39:ad:bd:81:3f:38:2c:a6:cf:a6:65:ab:cf:
         e0:65:8a:44:a9:9a:e9:1d:3f:24:f8:1f:73:6f:44:41:f6:16:
         2d:4f:ed:7e:cf:2f:b7:b9:8e:20:1a:fb:bb:38:07:37:ef:62:
         63:9a:bc:80:a4:6c:7d:3a:05:69:b1:04:d2:2d:de:49:5f:50:
         a3:82:eb:3f:db:04:b8:36:3b:0f:28:aa:e2:8c:ba:3a:e6:9a:
         47:3c:9c:0c:1e:ed:6a:d4:fb:cd:7d:36:e9:9c:9a:7f:b1:5b:
         74:dc:44:2e:04:0e:0b:7c:ea:98:35:a1:9b:16:a1:87:e0:77:
         2a:4e:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org