Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/34352e3233312e3134302e302f32322d3232203d3e20323637313939.roa
File:                     34352e3233312e3134302e302f32322d3232203d3e20323637313939.roa (raw, json)
Hash identifier:          SwuxM7D7s8Ki7PEtHbW6g/TAmKLw7ErY7VuEAeql/YQ=
Subject key identifier:   97:9D:DC:DB:16:0C:E6:13:49:B1:15:A5:B8:00:2F:71:30:D0:DD:1C
Certificate issuer:       /CN=39001353DF34F0196E25E171DFBDFA059922EBF7
Certificate serial:       083764D51E86A06615E3C2BACC5F29086284D7EE
Authority key identifier: 39:00:13:53:DF:34:F0:19:6E:25:E1:71:DF:BD:FA:05:99:22:EB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39001353DF34F0196E25E171DFBDFA059922EBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/34352e3233312e3134302e302f32322d3232203d3e20323637313939.roa
Signing time:             Fri 17 Nov 2023 19:32:32 +0000
ROA not before:           Fri 17 Nov 2023 19:27:32 +0000
ROA not after:            Fri 15 Nov 2024 19:32:32 +0000
asID:                     267199
IP address blocks:        45.231.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:37:64:d5:1e:86:a0:66:15:e3:c2:ba:cc:5f:29:08:62:84:d7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39001353DF34F0196E25E171DFBDFA059922EBF7
        Validity
            Not Before: Nov 17 19:27:32 2023 GMT
            Not After : Nov 15 19:32:32 2024 GMT
        Subject: CN=979DDCDB160CE61349B115A5B8002F7130D0DD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:96:79:7d:40:7c:18:ab:16:c5:8a:15:48:
                    93:19:22:bd:a5:9e:62:f1:e1:68:52:f2:ba:00:c1:
                    72:28:32:47:b8:0e:4e:9e:bb:a3:2e:9f:88:f7:6e:
                    f2:68:ac:b5:1a:52:6d:f1:f6:38:9b:e2:65:06:2f:
                    d5:ea:67:71:6b:bd:5a:c0:6e:c8:ce:b4:25:e9:24:
                    f5:4c:41:90:82:11:a0:2e:74:f7:75:ee:aa:6b:a4:
                    f2:b4:2b:d5:13:f9:9a:3f:02:03:56:ab:75:07:d9:
                    97:c4:3a:98:7c:34:37:26:23:2b:cf:39:e0:67:4f:
                    5a:36:b1:2a:51:53:76:0d:7c:78:1f:6c:14:d9:dc:
                    cc:b6:98:7e:1c:9d:cd:39:96:6d:2b:6b:64:76:3d:
                    d9:90:78:44:68:d0:dc:60:30:0b:52:16:30:dd:c1:
                    2a:74:90:e3:b4:1e:0a:40:97:41:3f:f6:3c:9c:74:
                    53:7c:f1:e7:4f:cd:82:af:78:05:6b:95:a2:c7:54:
                    5d:7e:ef:1c:1f:2b:89:7a:9f:11:52:94:f1:30:cd:
                    0e:f7:8d:4e:55:45:93:2c:55:a1:46:34:da:af:72:
                    0d:6f:cd:71:0c:14:4b:cf:09:c1:3f:91:b2:1b:b6:
                    f0:27:e6:48:41:a6:66:7b:6a:58:a1:e8:e3:23:47:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9D:DC:DB:16:0C:E6:13:49:B1:15:A5:B8:00:2F:71:30:D0:DD:1C
            X509v3 Authority Key Identifier:
                keyid:39:00:13:53:DF:34:F0:19:6E:25:E1:71:DF:BD:FA:05:99:22:EB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39001353DF34F0196E25E171DFBDFA059922EBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/34352e3233312e3134302e302f32322d3232203d3e20323637313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:fd:47:b2:dc:fe:62:d1:be:fa:9c:54:9f:22:69:75:38:a5:
         f8:2a:e0:7d:32:3f:6b:21:ec:86:54:8e:37:01:f9:67:c5:2b:
         da:a8:c1:0e:3f:93:38:ab:f6:eb:9d:6b:75:e3:12:ce:58:27:
         86:73:78:1f:b3:0b:02:4e:03:c2:35:6d:cc:a2:3b:b5:7a:a3:
         e0:87:4b:f6:6c:85:48:9d:11:3b:39:25:ac:c9:4e:ee:3e:18:
         d8:6d:b8:d4:8f:04:62:65:66:a5:ef:db:34:0d:08:cf:4e:ee:
         9e:16:b0:9c:fc:e0:b3:93:85:f2:fc:92:80:54:ce:a5:eb:8f:
         07:5e:0c:76:70:17:87:82:a8:3b:cb:ea:5b:03:35:d9:48:c6:
         af:f4:bd:a0:3a:43:8f:5a:eb:3f:2e:5f:67:c3:1d:68:08:51:
         4d:17:1b:e7:10:61:cf:c4:2b:64:a9:ee:b8:4b:1c:63:84:cc:
         36:6d:38:fb:41:1d:5a:ea:72:47:51:5f:3c:c2:69:07:62:04:
         e1:c4:80:04:12:b3:b1:86:d6:cc:1a:a7:32:f9:bf:7f:b8:8f:
         a4:f7:5b:17:3a:91:12:02:a9:f4:c5:9b:25:62:99:71:de:20:
         cb:0e:de:29:75:89:e5:59:51:e6:c8:a4:53:9c:14:b3:e2:70:
         ae:5d:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org