Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32332d3233203d3e20323639373034.roa
File:                     34352e3139312e3130342e302f32332d3233203d3e20323639373034.roa (raw, json)
Hash identifier:          NyHyDVhrfE5ks18ap9KZhdJoP+yq0Edtzc1sfFNIaZU=
Subject key identifier:   80:F0:A6:0B:F9:44:A6:E4:60:92:62:97:E9:0D:60:CE:57:42:CF:A9
Certificate issuer:       /CN=BB8B45D4059EE60780139D24D6D7C6AA4971E94E
Certificate serial:       3E942C45ED9A78A98B09514F3D6AF699F5EAAB9F
Authority key identifier: BB:8B:45:D4:05:9E:E6:07:80:13:9D:24:D6:D7:C6:AA:49:71:E9:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB8B45D4059EE60780139D24D6D7C6AA4971E94E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32332d3233203d3e20323639373034.roa
Signing time:             Thu 30 Nov 2023 00:18:40 +0000
ROA not before:           Thu 30 Nov 2023 00:13:40 +0000
ROA not after:            Thu 28 Nov 2024 00:18:40 +0000
asID:                     269704
IP address blocks:        45.191.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:94:2c:45:ed:9a:78:a9:8b:09:51:4f:3d:6a:f6:99:f5:ea:ab:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8B45D4059EE60780139D24D6D7C6AA4971E94E
        Validity
            Not Before: Nov 30 00:13:40 2023 GMT
            Not After : Nov 28 00:18:40 2024 GMT
        Subject: CN=80F0A60BF944A6E460926297E90D60CE5742CFA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:ba:95:ee:5b:b9:52:c7:24:5f:90:e0:1e:
                    d1:d0:39:16:85:ea:61:52:28:52:bc:df:ca:59:7e:
                    be:f6:aa:c8:6e:31:48:bb:7d:a0:48:c4:99:c4:95:
                    10:7b:b8:e6:0c:f1:f8:94:6e:f7:85:21:b5:aa:90:
                    06:af:24:24:2d:25:5b:1d:d4:54:d3:b5:39:77:df:
                    c1:74:ba:5c:93:49:ab:ca:d8:e5:ab:6d:8e:cf:5b:
                    ac:5a:46:54:9c:49:97:6d:b6:20:90:95:cf:b9:dc:
                    35:c3:44:45:9c:93:b6:b5:b3:5e:9f:9b:12:fa:c2:
                    71:c9:2d:29:b7:fa:d5:d5:9b:df:84:a3:ec:ff:05:
                    25:aa:5e:41:e4:b3:f4:90:05:4a:fd:23:ea:ba:07:
                    ac:6e:2c:a4:2c:47:41:23:3b:9b:77:28:97:ae:0d:
                    97:e1:32:36:b9:0f:b2:17:2b:ec:14:c1:da:66:ce:
                    73:57:2d:7a:21:99:10:91:2a:ad:21:c2:8f:b6:ed:
                    23:bc:a2:21:e9:56:91:8c:c6:40:16:90:13:ea:82:
                    e0:1b:5f:96:d0:ef:1d:dc:77:01:c5:36:a9:2a:29:
                    12:12:0b:35:40:94:7b:32:e2:8c:21:70:05:6a:ec:
                    0b:b5:bf:29:ba:ba:1f:56:09:ce:a9:19:a8:87:ff:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F0:A6:0B:F9:44:A6:E4:60:92:62:97:E9:0D:60:CE:57:42:CF:A9
            X509v3 Authority Key Identifier:
                keyid:BB:8B:45:D4:05:9E:E6:07:80:13:9D:24:D6:D7:C6:AA:49:71:E9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/BB8B45D4059EE60780139D24D6D7C6AA4971E94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB8B45D4059EE60780139D24D6D7C6AA4971E94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32332d3233203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:aa:d7:42:ec:8a:3b:56:62:60:d8:02:3f:2e:42:ca:cb:
         97:85:c0:a6:16:8f:20:bb:86:bf:7d:51:e3:b8:c2:f6:ae:5d:
         bc:f3:a0:c2:e1:b3:d2:77:c2:0e:3a:83:1a:1f:95:9a:25:23:
         f7:18:20:17:8e:e5:e6:f3:85:21:5e:28:2e:22:b5:9f:9c:60:
         c5:45:c3:9e:00:9b:8a:75:0e:4f:67:29:74:7f:c9:2a:3b:f3:
         0f:3d:02:ee:40:8f:d5:be:5d:b9:dc:95:20:fc:5e:23:62:9b:
         3c:4a:b3:25:96:c2:e3:d7:8d:53:cb:8c:da:19:21:62:11:30:
         c4:57:52:5b:46:e8:6c:c2:1a:f2:48:43:4e:eb:e3:5a:76:8e:
         9c:db:57:8e:b3:a7:4c:6f:06:b6:0e:fe:e7:bd:c7:58:db:e3:
         e4:77:c5:8b:67:90:f8:68:2d:61:48:b1:09:c0:86:a7:41:ba:
         c4:91:f7:b5:ea:43:a0:cb:98:db:ed:3c:9c:17:50:7d:a7:30:
         4e:0f:db:a6:0d:03:70:e5:ad:83:ff:d1:59:d2:33:ef:06:45:
         79:3c:02:ca:f0:d9:e7:30:7a:ac:c1:05:c8:54:0c:0c:c3:8b:
         d6:c6:8d:e5:58:08:91:65:08:dc:aa:c2:f6:8b:c7:65:4d:fd:
         ac:8c:ab:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org