Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e31302e302f32342d3234203d3e20323638363531.roa
File:                     34352e3136352e31302e302f32342d3234203d3e20323638363531.roa (raw, json)
Hash identifier:          bToWK6PHgYkkYONdWkQ9Z1TZPqQUOJYowxl5jGMGz8o=
Subject key identifier:   60:26:6B:8F:73:B7:EF:D0:36:F6:2F:A7:2A:61:A3:89:50:99:FE:1C
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       26D6EC1FA8508330EF6ECF9D7DBF4E37C17B5BAC
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e31302e302f32342d3234203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:00 +0000
ROA not before:           Sun 07 Apr 2024 16:55:00 +0000
ROA not after:            Sun 06 Apr 2025 17:00:00 +0000
asID:                     268651
IP address blocks:        45.165.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d6:ec:1f:a8:50:83:30:ef:6e:cf:9d:7d:bf:4e:37:c1:7b:5b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:00 2024 GMT
            Not After : Apr  6 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:e0:e5:9b:c2:4f:4d:72:e8:c0:73:19:b4:
                    1f:4e:42:3d:73:99:80:e7:97:24:56:03:65:78:a0:
                    bb:b6:2e:17:70:8c:1e:60:49:a5:1d:49:21:0f:4b:
                    49:9d:9f:d1:36:c9:3d:ee:50:8e:37:cc:60:99:5c:
                    09:ad:63:d0:91:5e:59:14:42:ac:0d:8d:b4:d0:0b:
                    2a:cb:c3:fc:21:f1:a8:2e:d0:a7:a2:b1:88:08:01:
                    c0:7f:4c:f8:e4:b6:34:de:44:05:2c:1c:87:df:f5:
                    fe:d1:f5:81:2e:67:12:af:42:d1:8e:db:ee:53:ff:
                    cb:cf:99:b4:9a:15:ab:d1:94:d2:6c:a1:ce:e3:07:
                    bf:10:bb:2e:c0:b2:14:eb:a5:0c:5a:d2:9c:f1:b5:
                    1b:6b:6b:d4:b0:42:9d:66:91:89:5a:8a:af:37:15:
                    fc:23:80:ec:0e:10:66:50:51:eb:54:3e:30:b4:48:
                    19:c9:35:eb:83:a8:6c:b2:6d:75:4f:3c:4d:05:4d:
                    99:0c:99:1c:c4:bf:05:17:84:30:25:72:70:eb:5b:
                    56:ab:63:9b:5a:2b:c4:2f:18:b1:35:2d:bd:18:77:
                    66:8a:04:ec:46:7d:90:44:45:44:60:53:72:0a:cc:
                    40:f7:14:96:8f:65:62:11:cc:fe:5e:cb:89:55:2d:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:26:6B:8F:73:B7:EF:D0:36:F6:2F:A7:2A:61:A3:89:50:99:FE:1C
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e31302e302f32342d3234203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:99:45:de:f5:b8:b8:f8:97:01:82:d0:e9:12:05:53:02:
         fd:30:fe:88:29:28:a1:4d:4d:fa:02:cd:08:5b:12:6b:89:e8:
         cd:b9:24:09:f1:7e:c0:09:a2:9e:e5:ee:33:af:a2:bb:78:35:
         54:dd:1d:05:ab:cc:0a:11:eb:8d:97:f6:2c:3e:d7:8d:6e:11:
         33:d0:6b:f0:62:f6:ab:2e:9d:19:87:c7:a2:b6:f9:35:bc:89:
         4d:4c:ae:45:00:48:22:bc:1b:e0:4e:9e:e0:8f:8e:c3:f7:ab:
         98:93:8f:47:5b:8c:ba:9e:42:b3:f5:fa:98:eb:54:29:df:bb:
         7e:d1:22:7d:8a:c2:ad:e1:dc:e1:df:8c:eb:ee:6d:bd:59:18:
         ad:f1:8c:f8:5d:b0:14:96:4f:91:08:32:9b:6e:b9:21:42:fc:
         e1:84:0d:28:73:f2:0f:27:b3:02:8b:24:52:ce:d8:8d:f7:ef:
         97:1b:37:a8:c5:a0:6a:b0:37:cb:7c:fb:b2:f6:d3:41:5d:ae:
         d5:d1:fe:7e:11:5d:e1:7c:e2:5b:f4:91:af:d1:7b:43:ed:68:
         c0:15:0e:7b:ed:43:0b:3e:43:0f:9f:bf:ab:df:9a:0b:30:94:
         84:49:cd:b1:78:27:65:10:b2:6a:65:78:d3:b1:73:7f:8d:ad:
         f5:dc:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org