Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36352e302f32342d3234203d3e20323639333230.roa
File:                     34352e3138342e36352e302f32342d3234203d3e20323639333230.roa (raw, json)
Hash identifier:          AitnVEVsDwNrKRTt+EbQDcRcF5ymDWuKk08JZPxm2ZM=
Subject key identifier:   DD:98:D9:AE:2E:E1:31:2C:D4:CE:F2:BB:6C:0E:94:AF:40:1E:11:23
Certificate issuer:       /CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
Certificate serial:       75E9723BE02E0B875AF851C3D54D252814EED306
Authority key identifier: 1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36352e302f32342d3234203d3e20323639333230.roa
Signing time:             Thu 09 Nov 2023 14:30:53 +0000
ROA not before:           Thu 09 Nov 2023 14:25:53 +0000
ROA not after:            Thu 07 Nov 2024 14:30:53 +0000
asID:                     269320
IP address blocks:        45.184.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e9:72:3b:e0:2e:0b:87:5a:f8:51:c3:d5:4d:25:28:14:ee:d3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
        Validity
            Not Before: Nov  9 14:25:53 2023 GMT
            Not After : Nov  7 14:30:53 2024 GMT
        Subject: CN=DD98D9AE2EE1312CD4CEF2BB6C0E94AF401E1123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:47:95:a6:8f:4e:2e:c4:d0:5e:d1:0e:d3:
                    00:6e:8f:db:92:61:4d:a0:82:32:db:5f:c0:fb:8a:
                    57:5c:98:50:89:0b:0a:53:30:a9:48:8a:02:ba:d0:
                    dc:4e:95:0f:61:4a:b1:23:72:38:4b:c8:5d:c6:6b:
                    f2:81:23:7a:39:e4:03:48:ac:50:4e:a5:b1:80:a9:
                    77:9b:35:85:8f:48:eb:50:d5:61:38:86:6e:8a:39:
                    3c:d2:39:ef:9b:cd:a6:b9:cf:20:8c:69:0c:7e:cc:
                    31:1e:bf:40:e7:88:0d:0a:4e:03:e8:27:2a:e3:e6:
                    f4:5d:59:30:2b:61:77:96:f3:b3:cf:4c:54:3d:32:
                    8e:a7:ef:9a:c1:40:b1:e7:be:d9:2f:2b:67:c7:a7:
                    2a:f4:1e:8f:99:a5:35:d2:23:4a:c2:0c:ae:c8:0f:
                    9a:e1:13:f7:1d:20:bf:00:1a:7d:b4:67:0d:1c:8c:
                    1f:a3:31:6d:90:38:f3:98:45:6d:ff:c4:71:20:3e:
                    88:1d:7e:f3:c1:4e:81:c1:3d:1a:dc:67:a5:3d:06:
                    6a:5c:3e:c5:2f:11:fd:16:f3:88:89:f8:14:a9:c4:
                    87:4f:ab:5d:0f:c5:bc:5a:74:87:8d:55:71:b7:03:
                    03:e3:e3:c9:15:de:8c:8a:5d:78:e6:e0:94:8a:f1:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:98:D9:AE:2E:E1:31:2C:D4:CE:F2:BB:6C:0E:94:AF:40:1E:11:23
            X509v3 Authority Key Identifier:
                keyid:1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36352e302f32342d3234203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:b8:8f:d1:7c:5a:b8:77:5c:e2:ce:d3:36:34:b3:44:f5:
         fd:21:5e:00:90:4c:60:43:ab:97:97:bf:69:f9:dd:40:62:4f:
         59:d6:0f:59:42:ff:6a:cf:2d:04:0d:99:8d:51:92:53:d5:a2:
         f9:b2:e5:24:d4:db:42:e4:51:29:1d:e1:6c:ff:ec:43:7d:71:
         ec:bd:45:e4:22:55:44:50:94:5f:1e:90:37:e9:19:59:43:99:
         e4:a6:76:d6:15:9d:79:4f:6d:83:7f:17:1d:8b:d4:03:64:18:
         50:ec:ad:c0:ec:d5:c3:8d:80:96:7e:85:71:6c:0c:60:37:d6:
         fb:1c:b1:93:4c:d4:22:09:67:fe:50:c3:cc:3c:e2:5d:cd:a4:
         7f:0d:3a:bb:fe:e2:8a:e3:e3:f5:c3:8f:74:63:e8:69:5b:59:
         bc:37:87:fd:5c:b2:fa:ed:f2:5f:fa:58:c5:38:7e:3a:d7:cb:
         14:f9:33:2c:e2:24:60:81:61:4f:d7:70:bf:58:e7:ae:7a:48:
         c5:cb:06:ff:8c:fe:a6:d9:75:e3:78:1d:b4:88:de:f2:98:93:
         d1:95:b9:96:76:ef:c7:cb:5d:f5:c1:db:29:2c:0d:bf:c9:14:
         9a:a3:fe:99:87:05:df:4f:49:ac:fc:76:11:37:b5:3c:d9:f9:
         10:ce:a8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org