Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36342e302f32342d3234203d3e20323639333230.roa
File:                     34352e3138342e36342e302f32342d3234203d3e20323639333230.roa (raw, json)
Hash identifier:          mppgFnVsoUogaCMaeQ6xMplum0cOZ72gYFT/T/5cPJc=
Subject key identifier:   19:DF:A1:70:6C:8D:2C:C5:B3:CA:EA:8F:2C:81:0C:07:DC:B8:4B:3F
Certificate issuer:       /CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
Certificate serial:       53338BA30BC5A6C436935C302A6B929CCF3FC10B
Authority key identifier: 1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36342e302f32342d3234203d3e20323639333230.roa
Signing time:             Thu 09 Nov 2023 14:30:53 +0000
ROA not before:           Thu 09 Nov 2023 14:25:53 +0000
ROA not after:            Thu 07 Nov 2024 14:30:53 +0000
asID:                     269320
IP address blocks:        45.184.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:33:8b:a3:0b:c5:a6:c4:36:93:5c:30:2a:6b:92:9c:cf:3f:c1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
        Validity
            Not Before: Nov  9 14:25:53 2023 GMT
            Not After : Nov  7 14:30:53 2024 GMT
        Subject: CN=19DFA1706C8D2CC5B3CAEA8F2C810C07DCB84B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:e8:d6:22:98:68:5a:49:0c:fe:a7:f8:0f:
                    5f:93:24:64:4a:89:bf:55:ee:d3:f3:bc:0b:0e:9e:
                    5e:30:e4:72:1c:8b:1e:68:be:35:dc:c3:e7:d6:5f:
                    9d:5d:cd:09:90:af:af:3b:c8:e3:06:34:6d:6a:f1:
                    7b:da:a9:3a:f8:21:c1:51:dd:aa:25:6c:d4:1d:84:
                    67:07:54:37:7e:df:8d:9d:8f:40:54:f8:39:70:68:
                    71:6b:5a:72:37:52:9d:07:9d:43:d9:ae:4c:66:df:
                    0a:d0:04:62:79:fb:2d:4d:a1:be:c7:63:81:af:32:
                    53:fc:35:d3:1f:cd:94:49:11:7a:9c:43:0d:78:61:
                    8e:e1:31:d5:74:40:a9:0d:15:05:98:9a:73:22:64:
                    c2:82:72:3e:a2:97:56:f2:03:f8:ea:c0:ff:ff:63:
                    08:4d:71:ae:e7:6a:cf:61:2a:33:f0:c0:47:ac:af:
                    6c:c6:3e:f0:46:f5:d7:80:24:c3:3d:38:6e:a6:57:
                    e2:b5:ef:43:b1:a3:3b:d7:60:86:07:87:72:04:8c:
                    1e:1a:15:a7:47:cf:fc:da:84:e9:cd:19:bb:48:b1:
                    e0:c8:d0:2d:f9:f7:e1:5c:a2:74:63:a6:bd:f7:9d:
                    fb:ec:ed:12:58:35:a1:f9:a5:e4:72:b7:8e:a9:16:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DF:A1:70:6C:8D:2C:C5:B3:CA:EA:8F:2C:81:0C:07:DC:B8:4B:3F
            X509v3 Authority Key Identifier:
                keyid:1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36342e302f32342d3234203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:b7:24:e7:d3:69:fd:2a:10:9c:0b:cc:e7:43:cb:2d:5a:
         05:a3:9b:86:91:cc:32:71:e2:d7:a8:d0:f6:bc:32:ff:1e:2a:
         3b:45:79:53:e6:b0:8e:7c:17:85:c2:d2:5e:fd:37:45:0f:6a:
         a0:52:00:b4:3a:1a:4f:e1:88:ee:3d:28:82:2b:10:2b:80:62:
         19:d6:f4:25:e1:9a:a0:70:b9:e8:1e:be:ed:cc:78:ef:be:b6:
         ba:b4:41:d6:8d:f4:64:08:ad:8a:27:62:33:7d:e7:9a:90:a0:
         7c:ab:2a:ea:58:80:5a:fd:8b:cc:a5:bb:86:52:ce:25:f4:9a:
         d2:22:4c:15:13:65:28:20:3f:74:32:67:a3:ac:d7:07:6c:40:
         b2:ba:4b:9b:24:0f:f7:98:07:7b:d0:b1:e3:cb:22:52:78:b8:
         c1:8e:4d:88:b3:9f:7a:e5:2f:d0:20:e8:dc:2a:d3:c7:06:99:
         ef:01:2d:62:38:17:95:23:c1:03:71:61:5b:cd:a1:d6:fb:37:
         ed:29:4a:64:eb:4e:ed:73:da:f9:2f:5e:49:26:ce:8a:5c:da:
         e8:b8:c6:1d:aa:0d:f1:79:3e:7c:9f:55:77:7e:f0:0a:eb:9f:
         25:1a:4d:0c:88:f9:5d:ff:9c:a5:00:8c:49:10:ae:d7:6f:06:
         cf:46:08:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org