Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130352e302f32342d3234203d3e20323639373034.roa
File:                     34352e3139312e3130352e302f32342d3234203d3e20323639373034.roa (raw, json)
Hash identifier:          PyLn4r/NIjyDTgi87S+CB6uyiRtLGVJxOPv9eOBR3Nw=
Subject key identifier:   98:A7:83:7F:3E:E3:E7:D5:F6:CB:EE:91:08:F3:A0:E4:68:CF:43:BA
Certificate issuer:       /CN=BB8B45D4059EE60780139D24D6D7C6AA4971E94E
Certificate serial:       2BF6ED0FC7B47C863BEDC9DB6AD2E696723DAB9C
Authority key identifier: BB:8B:45:D4:05:9E:E6:07:80:13:9D:24:D6:D7:C6:AA:49:71:E9:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB8B45D4059EE60780139D24D6D7C6AA4971E94E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130352e302f32342d3234203d3e20323639373034.roa
Signing time:             Thu 30 Nov 2023 00:18:40 +0000
ROA not before:           Thu 30 Nov 2023 00:13:40 +0000
ROA not after:            Thu 28 Nov 2024 00:18:40 +0000
asID:                     269704
IP address blocks:        45.191.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f6:ed:0f:c7:b4:7c:86:3b:ed:c9:db:6a:d2:e6:96:72:3d:ab:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB8B45D4059EE60780139D24D6D7C6AA4971E94E
        Validity
            Not Before: Nov 30 00:13:40 2023 GMT
            Not After : Nov 28 00:18:40 2024 GMT
        Subject: CN=98A7837F3EE3E7D5F6CBEE9108F3A0E468CF43BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b1:4f:53:de:05:d9:97:ca:20:72:6a:c9:96:
                    40:89:db:67:10:0d:01:63:aa:1f:68:df:dc:34:d6:
                    80:88:cf:3c:8d:89:03:8b:83:93:cb:79:90:7e:ca:
                    a0:cc:8a:2f:89:aa:c8:63:cc:47:93:f5:cd:3f:19:
                    08:20:24:6b:c7:bf:82:85:c3:2a:4c:5a:63:71:91:
                    01:50:8e:04:f9:1b:67:64:ce:bc:47:b8:78:dc:36:
                    ec:ec:f7:3b:33:87:99:e1:e1:dd:a2:f3:3a:a7:ba:
                    83:fc:e4:56:34:c7:78:2c:66:66:7e:47:31:40:f7:
                    a7:47:16:78:5a:03:11:94:2f:09:19:d3:bf:73:67:
                    20:f6:c2:66:fe:28:4d:b8:b1:40:ba:86:75:2d:a7:
                    cb:da:c6:91:ac:4d:c2:97:9b:e7:c3:7a:10:1b:3e:
                    79:bb:29:6d:bd:dd:b8:b4:dd:1d:57:ee:3c:19:7a:
                    32:6a:c2:f8:ff:8c:bf:e1:10:61:03:1c:26:f0:de:
                    99:8c:53:a5:f3:80:4b:7f:76:c1:77:42:78:14:e4:
                    76:01:69:ac:94:50:08:d1:5e:40:64:f1:47:b0:bb:
                    ef:9a:cf:4d:3d:56:6b:79:83:7c:9f:89:56:62:c0:
                    f8:89:b8:52:ed:b3:d2:a6:c5:83:dd:f0:4d:30:e9:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A7:83:7F:3E:E3:E7:D5:F6:CB:EE:91:08:F3:A0:E4:68:CF:43:BA
            X509v3 Authority Key Identifier:
                keyid:BB:8B:45:D4:05:9E:E6:07:80:13:9D:24:D6:D7:C6:AA:49:71:E9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/BB8B45D4059EE60780139D24D6D7C6AA4971E94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB8B45D4059EE60780139D24D6D7C6AA4971E94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130352e302f32342d3234203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:67:e9:fe:01:49:e9:38:ab:24:76:11:55:a5:c6:5d:09:
         1c:a2:dc:77:74:e2:63:d5:be:21:4e:38:64:a3:c5:ca:57:60:
         25:de:df:a3:fd:49:ed:44:ba:f9:0e:8d:d9:43:bb:3d:82:37:
         b0:30:99:99:73:f8:83:70:7b:a1:00:45:82:69:ae:a4:7c:2a:
         12:25:86:ca:60:53:b0:7b:57:c4:e3:11:47:68:01:9b:c4:19:
         27:68:49:2f:46:c0:dc:15:26:bb:a2:73:ca:fe:c7:28:57:44:
         d0:23:c8:a8:f0:6d:d2:60:d4:e9:d1:14:23:a5:06:c6:a0:70:
         9b:6e:e3:8c:11:0d:85:20:77:d8:4e:e0:c9:13:e7:bd:92:55:
         2d:05:4e:d7:2d:b5:f3:69:91:e8:d3:84:d8:0c:e4:bd:da:b7:
         ae:2d:74:bf:16:05:97:1b:30:bb:e9:e0:66:9b:cd:6b:c5:06:
         45:3c:50:87:48:28:cf:3d:ac:84:af:61:24:d3:04:e0:94:dd:
         b8:4d:b8:09:12:aa:4d:a9:7b:f9:44:80:63:0e:03:27:71:1d:
         c9:77:75:88:a1:99:ec:5f:49:da:d2:1f:27:0f:4a:15:5f:fd:
         d8:87:ac:81:f1:c4:e3:5e:47:4a:0d:66:bb:0e:36:ba:3e:b1:
         b4:5d:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org