Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/34352e3233312e3134322e302f32332d3233203d3e20323637313939.roa
File:                     34352e3233312e3134322e302f32332d3233203d3e20323637313939.roa (raw, json)
Hash identifier:          9NxgrGXOAisbw2z8fTRDuNWcxTdOw2lrL0L2t2e0FFg=
Subject key identifier:   D0:99:BE:A4:61:E3:F2:3A:01:96:5F:CC:9E:65:18:68:35:44:62:BA
Certificate issuer:       /CN=39001353DF34F0196E25E171DFBDFA059922EBF7
Certificate serial:       12BDCE9210AE78A780C2016B1CED51CF3C2A8DF3
Authority key identifier: 39:00:13:53:DF:34:F0:19:6E:25:E1:71:DF:BD:FA:05:99:22:EB:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39001353DF34F0196E25E171DFBDFA059922EBF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/34352e3233312e3134322e302f32332d3233203d3e20323637313939.roa
Signing time:             Fri 17 Nov 2023 19:32:46 +0000
ROA not before:           Fri 17 Nov 2023 19:27:46 +0000
ROA not after:            Fri 15 Nov 2024 19:32:46 +0000
asID:                     267199
IP address blocks:        45.231.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bd:ce:92:10:ae:78:a7:80:c2:01:6b:1c:ed:51:cf:3c:2a:8d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39001353DF34F0196E25E171DFBDFA059922EBF7
        Validity
            Not Before: Nov 17 19:27:46 2023 GMT
            Not After : Nov 15 19:32:46 2024 GMT
        Subject: CN=D099BEA461E3F23A01965FCC9E651868354462BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:7e:9a:11:8d:db:89:ce:ef:43:9d:bd:40:
                    79:68:0b:18:b7:ed:3f:65:bc:53:01:3f:cc:64:f8:
                    97:83:1d:01:7d:2f:d4:62:66:21:b1:a1:4a:0c:b8:
                    fc:59:08:c3:f1:6a:af:b6:cb:e1:c3:8d:18:5e:68:
                    fe:63:0f:ee:dd:1f:81:e7:b4:6f:b6:8d:73:3f:b1:
                    28:57:eb:08:1b:0e:11:ee:6a:fd:60:fe:8d:61:1e:
                    1b:bb:d3:51:b7:72:11:05:c1:da:5c:f8:9c:07:44:
                    94:3e:57:78:ab:8b:1d:92:b9:fc:cf:d4:89:43:f7:
                    83:ed:1f:90:a1:0a:40:8e:2a:c2:06:7a:c2:4b:47:
                    88:9f:cd:74:3c:f9:9a:55:87:23:65:3a:ec:06:a3:
                    83:73:23:77:dd:f4:ec:2a:4c:37:58:b0:28:cf:01:
                    93:b0:b6:4b:c0:3a:c5:c5:89:63:d2:ec:56:b1:14:
                    3f:9f:b2:ab:32:d3:4f:11:30:d4:a9:99:92:5c:70:
                    f1:e5:31:d9:a5:4d:7f:91:5b:68:4f:ed:dd:25:a4:
                    5e:fa:ca:59:da:0e:48:31:8f:61:57:a9:35:42:8d:
                    41:a9:ec:f9:e1:9b:1c:aa:00:22:ae:3b:04:a1:36:
                    cd:dc:8e:90:43:e1:6d:e9:5c:14:31:14:e3:06:96:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:99:BE:A4:61:E3:F2:3A:01:96:5F:CC:9E:65:18:68:35:44:62:BA
            X509v3 Authority Key Identifier:
                keyid:39:00:13:53:DF:34:F0:19:6E:25:E1:71:DF:BD:FA:05:99:22:EB:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/39001353DF34F0196E25E171DFBDFA059922EBF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39001353DF34F0196E25E171DFBDFA059922EBF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JBEENoHEobzQf8LEbVdfEFELurAuG7rqQCfw51BR7Fy/0/34352e3233312e3134322e302f32332d3233203d3e20323637313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:75:72:af:1d:6e:e8:89:95:9a:a1:34:39:50:e3:f4:5a:cb:
         9e:e4:f9:c3:ba:a5:a2:37:80:64:f3:cb:58:da:81:78:23:70:
         37:d3:7b:74:73:87:e5:6a:21:1f:51:4d:01:12:c3:d6:e8:7e:
         c6:a9:c8:eb:4d:04:b5:c6:a8:54:c8:8a:17:9a:d7:23:c4:9b:
         a1:1d:d5:2c:72:44:cf:78:d9:a0:48:94:13:58:51:a3:50:40:
         db:07:71:ce:a8:f9:da:20:7e:8b:8e:32:ad:ad:a5:b7:a8:ce:
         73:52:e3:15:a6:21:f9:60:91:59:7a:ec:ba:3f:fc:0e:f1:98:
         1f:34:b4:db:48:32:6d:e3:29:e4:a3:3e:f6:0a:b5:50:70:89:
         5b:71:a9:18:68:ca:11:61:90:da:25:7f:9a:a7:dd:a0:53:ac:
         97:44:4f:eb:9b:a1:2b:1b:f2:01:4e:b4:03:47:cf:96:a6:09:
         00:03:c9:16:d2:35:45:98:57:09:fc:1f:dc:43:95:ba:b2:99:
         87:c2:d9:ac:4b:0c:e5:87:18:e0:f1:67:d4:55:19:21:dc:17:
         bf:67:77:7b:a4:cc:8b:4b:ae:e2:2d:76:af:18:de:0d:62:ae:
         db:3a:73:6e:7d:1a:02:f9:eb:44:dc:47:15:bb:a7:a0:a5:40:
         39:90:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org