Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e392e302f32342d3234203d3e20323638363531.roa
File:                     34352e3136352e392e302f32342d3234203d3e20323638363531.roa (raw, json)
Hash identifier:          +Ox7QtR8kS1qIXlQd4dYGElP268z9onMDVEUlJo4xFg=
Subject key identifier:   91:97:88:B1:2D:EA:DE:CB:0A:AA:9D:F2:37:29:24:77:76:99:7A:64
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       1F1C45284B66DFD214D5272EEB36461A052E0A0D
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e392e302f32342d3234203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:00 +0000
ROA not before:           Sun 07 Apr 2024 16:55:00 +0000
ROA not after:            Sun 06 Apr 2025 17:00:00 +0000
asID:                     268651
IP address blocks:        45.165.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1c:45:28:4b:66:df:d2:14:d5:27:2e:eb:36:46:1a:05:2e:0a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:00 2024 GMT
            Not After : Apr  6 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:c1:b8:3b:9e:b7:49:fb:7e:2b:b3:90:24:
                    a1:ae:04:46:4f:11:75:fb:4e:5d:54:6e:d9:c0:d2:
                    c7:6c:c4:ce:e2:27:e2:16:04:34:62:60:20:da:a6:
                    d2:9d:45:5f:1f:79:af:88:d1:3c:c4:78:e8:23:30:
                    17:58:7f:11:12:d3:a6:a6:5d:3f:f3:4d:f6:76:76:
                    9a:f5:6d:a2:be:4c:60:5b:c2:65:7a:0d:21:c7:50:
                    a6:7c:f8:51:c3:3b:21:54:1a:df:94:4f:4f:fb:35:
                    11:55:ce:e2:57:b9:07:d2:7b:fb:6f:7b:d9:ca:4a:
                    94:68:db:21:68:06:84:92:40:f1:68:c4:4a:7a:82:
                    f5:f4:c8:8b:c8:d7:24:dc:26:af:52:b2:b7:62:81:
                    85:f2:41:78:49:a0:90:c9:b7:90:7c:f3:91:05:db:
                    06:a3:5f:ab:d8:11:c4:e7:18:29:d7:a2:2b:18:fd:
                    ee:30:0e:ff:a3:9c:7f:24:f3:19:f8:a6:11:f8:93:
                    a6:66:34:e8:91:29:18:f2:e6:80:ee:fe:3b:46:f5:
                    b1:92:b4:38:90:b3:c0:34:7c:16:72:ad:2c:a3:3e:
                    49:0b:8b:9d:22:36:65:5a:d4:12:48:53:04:32:17:
                    44:ff:08:c3:5c:16:00:ec:57:6f:18:57:82:d2:ed:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:97:88:B1:2D:EA:DE:CB:0A:AA:9D:F2:37:29:24:77:76:99:7A:64
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e392e302f32342d3234203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:82:3b:63:d6:6d:06:1a:ef:9e:40:fe:8a:79:98:27:fd:a5:
         a3:78:09:a5:86:52:91:cf:b4:6c:47:55:61:39:e2:47:c6:24:
         6a:12:ab:05:44:0d:c8:2a:cf:74:fd:4d:46:68:13:9b:bd:70:
         4b:15:78:67:57:a9:97:80:54:3c:b0:67:51:f5:03:34:2c:50:
         1a:40:cd:28:4f:50:47:9e:e0:e4:2e:25:24:0a:0c:02:2e:2c:
         29:83:54:ba:7c:95:81:9a:e2:12:e1:06:ef:9a:18:b3:72:94:
         37:54:78:e9:98:e3:a0:48:99:1e:89:23:29:91:60:83:91:ff:
         dc:4e:fb:e5:45:b8:37:51:ed:71:17:b1:75:05:b2:bd:61:0c:
         83:6f:a9:aa:5b:f8:ac:94:75:ed:43:21:88:7b:1c:30:9d:24:
         d0:ed:8e:5e:50:31:d7:87:51:5f:81:47:b8:ad:d5:88:13:f5:
         11:e5:0e:20:81:79:17:d9:96:ab:81:98:15:91:c1:62:44:5b:
         74:3d:f0:52:27:1f:84:c6:0e:ef:5e:54:5a:2f:c1:cd:3f:b1:
         ff:4d:71:49:66:58:dc:99:dc:8b:69:29:49:01:2c:da:6d:6e:
         88:af:b0:81:2c:0f:dd:56:b1:f8:01:52:92:9f:91:93:13:80:
         0c:4f:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org