Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e3136352e35342e302f32342d3234203d3e20323636313239.roa
File:                     34352e3136352e35342e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          lvVVRaIl+yL/VpE3cmat4iMNEJV2XJfuDUWuXbb3Ix8=
Subject key identifier:   1E:5C:4E:92:D4:E5:32:C1:92:1E:63:02:CC:F4:8E:E4:79:3E:83:F1
Certificate issuer:       /CN=806014EFB447E6CDC6DAE631F19157D7748822CD
Certificate serial:       0318879C529A91AEC11AC63CF7A71ABFD23066F8
Authority key identifier: 80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e3136352e35342e302f32342d3234203d3e20323636313239.roa
Signing time:             Fri 24 Nov 2023 14:05:46 +0000
ROA not before:           Fri 24 Nov 2023 14:00:46 +0000
ROA not after:            Fri 22 Nov 2024 14:05:46 +0000
asID:                     266129
IP address blocks:        45.165.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:18:87:9c:52:9a:91:ae:c1:1a:c6:3c:f7:a7:1a:bf:d2:30:66:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806014EFB447E6CDC6DAE631F19157D7748822CD
        Validity
            Not Before: Nov 24 14:00:46 2023 GMT
            Not After : Nov 22 14:05:46 2024 GMT
        Subject: CN=1E5C4E92D4E532C1921E6302CCF48EE4793E83F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:51:ba:ab:b8:a1:55:99:fe:2e:7d:81:31:
                    32:34:c7:3e:65:d5:a1:cc:69:28:b4:95:c4:3b:62:
                    c4:b1:9b:fe:72:f1:f2:63:a9:0a:2c:7b:f6:70:fd:
                    80:75:11:c4:75:bd:7a:db:47:e4:5e:62:4d:b3:fa:
                    d0:cc:15:bf:9e:52:a7:2a:9a:39:00:a0:a1:14:bf:
                    3a:85:2e:1a:e1:76:f8:fd:84:e0:08:84:ca:13:e0:
                    b1:ca:78:f4:1b:67:0e:f6:4a:00:aa:3b:bb:08:0a:
                    53:8a:a2:9d:b8:8b:77:81:5c:42:0e:5d:dd:65:5e:
                    00:bd:45:1c:b9:88:38:d2:48:31:50:41:c3:db:58:
                    29:d6:6c:8c:f1:be:fa:bc:f9:fa:8e:9f:43:ee:97:
                    a2:52:5d:7d:a0:81:0e:8d:1f:4e:93:03:89:80:81:
                    8c:c8:83:a8:d5:4d:b4:da:4c:84:47:9b:89:56:8b:
                    c3:2c:f2:87:0e:24:2d:7a:5f:da:59:0d:d7:72:4f:
                    34:1f:d1:89:27:0d:5d:15:64:83:ae:62:2c:d1:45:
                    bf:11:7e:4f:e3:cb:52:7d:5a:2c:a3:bd:07:be:7e:
                    bf:e1:93:2c:f7:23:fc:ce:6d:35:d0:22:1e:1d:0a:
                    b8:70:88:4b:93:df:c3:02:fc:f0:e4:a1:72:6e:38:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5C:4E:92:D4:E5:32:C1:92:1E:63:02:CC:F4:8E:E4:79:3E:83:F1
            X509v3 Authority Key Identifier:
                keyid:80:60:14:EF:B4:47:E6:CD:C6:DA:E6:31:F1:91:57:D7:74:88:22:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/806014EFB447E6CDC6DAE631F19157D7748822CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/806014EFB447E6CDC6DAE631F19157D7748822CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/0/34352e3136352e35342e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:ad:3a:3e:a1:fb:8f:3c:59:95:06:30:c5:80:c4:60:f9:
         2e:ea:f6:a9:11:d0:ba:e2:14:d6:fa:4e:92:38:07:84:22:b8:
         40:26:9d:f6:b0:cf:1e:9d:f0:f6:e4:6e:68:2a:1e:a5:d6:f3:
         93:cf:99:67:d7:ff:bb:d3:94:d9:c6:01:81:79:1c:21:f4:59:
         b0:d9:32:de:64:dd:7b:05:bf:65:0c:7e:56:6c:6d:12:dc:72:
         7c:df:f7:07:f5:44:30:48:36:ee:81:73:82:fc:f9:f3:dd:88:
         7c:17:88:a3:fb:64:d7:9e:12:50:ca:b9:98:95:fd:45:a1:5f:
         d8:32:78:30:34:1a:d3:e5:f4:fd:10:73:91:90:2c:06:64:c8:
         3a:31:f2:9e:c4:5c:3e:cd:72:9d:04:59:c1:b2:a2:7b:e3:2d:
         f4:f3:7c:49:be:15:5a:c2:51:47:6a:e9:41:ee:c7:ac:40:21:
         3d:66:3d:e2:30:0f:25:71:2a:4f:ee:df:6b:80:ed:76:68:50:
         fa:80:18:07:c3:5c:24:6b:fa:27:79:34:73:26:51:46:17:f4:
         5a:23:a5:1f:8b:b3:a0:5a:fb:bf:de:e4:3b:60:7a:bf:73:f0:
         13:24:21:ef:c1:d0:67:e8:20:0a:37:4b:47:50:18:38:ee:62:
         3b:8d:37:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org