Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3233392e31302e302f32332d3233203d3e20323634353632.roa
File:                     34352e3233392e31302e302f32332d3233203d3e20323634353632.roa (raw, json)
Hash identifier:          Q9UltfOMf/7C5FSOE+A6t50NIiP2F1HuFpBzaWxV6Lg=
Subject key identifier:   63:22:D9:FB:16:7B:7B:BD:3C:7E:84:8A:A5:A6:95:AB:B7:8D:B2:CF
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       4C48FC66B8D6FBCB6D9445FEA095CA891D36E7
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3233392e31302e302f32332d3233203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:34 +0000
ROA not before:           Fri 05 May 2023 19:10:34 +0000
ROA not after:            Fri 03 May 2024 19:15:34 +0000
asID:                     264562
IP address blocks:        45.239.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:48:fc:66:b8:d6:fb:cb:6d:94:45:fe:a0:95:ca:89:1d:36:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:34 2023 GMT
            Not After : May  3 19:15:34 2024 GMT
        Subject: CN=6322D9FB167B7BBD3C7E848AA5A695ABB78DB2CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:2a:a1:9e:57:8c:fa:57:26:d5:28:34:9a:
                    b5:3f:99:8d:1a:c8:b7:2d:de:1c:87:fd:02:84:20:
                    63:45:1f:c7:93:f6:ad:2c:f7:5e:26:80:69:e7:7b:
                    a6:79:4c:17:6b:10:ed:0d:d5:65:47:05:5f:0a:cb:
                    a2:90:49:3e:17:b6:65:8a:18:e9:de:a1:e5:90:94:
                    d6:7f:0d:29:65:02:21:27:c7:c5:89:92:a4:bb:e2:
                    dc:1d:38:e4:a6:c9:9a:f8:65:2c:c0:64:41:b5:fd:
                    5c:df:f8:9e:36:69:e8:a7:7b:7f:bf:7c:4d:00:3c:
                    01:7e:f3:e1:6b:53:44:34:c3:fb:14:92:7f:98:7f:
                    d6:a7:29:bc:e2:28:6c:54:7a:10:ea:8b:db:4e:e5:
                    8a:63:28:1b:37:72:e4:11:21:fd:11:4e:b2:7d:87:
                    70:4b:cc:42:c7:f5:b3:91:f0:29:3f:f5:eb:11:ac:
                    f6:4d:32:7f:5d:c9:76:ef:2b:4d:e9:e6:b7:65:a7:
                    23:09:30:0b:f6:a1:e4:29:73:d5:3a:f1:11:67:47:
                    a8:6e:ea:f5:ad:d3:e0:bd:83:d1:cd:50:dd:87:a5:
                    f2:fb:e3:60:c6:cc:38:1a:6d:5e:07:be:20:0f:8a:
                    3d:1d:0e:5a:a3:35:17:aa:b8:e8:d3:0c:ff:c2:07:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:22:D9:FB:16:7B:7B:BD:3C:7E:84:8A:A5:A6:95:AB:B7:8D:B2:CF
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3233392e31302e302f32332d3233203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:9d:17:98:11:e2:80:9f:08:2a:08:98:ed:ac:43:73:bf:40:
         44:8a:f2:cf:c5:b2:8f:6a:a7:ff:e7:8a:10:46:b6:01:73:e8:
         c3:6a:b7:82:0a:a9:25:80:ac:3f:0e:3e:33:71:61:b5:f1:f5:
         98:05:31:39:2b:12:f6:9b:f4:2c:a3:d6:ee:bb:fe:0d:31:7e:
         ea:55:7e:26:8b:44:9c:05:b1:c3:1a:69:48:1d:a8:7b:fa:70:
         f1:fe:57:f9:4e:e6:bb:c8:30:8c:36:3f:b1:7e:28:21:bb:49:
         00:a3:26:c6:a5:46:a6:a3:67:01:31:ed:1b:9a:ad:30:7f:72:
         9d:c2:73:f6:ec:12:df:24:43:30:58:98:ad:aa:8e:94:63:f1:
         8b:c6:8d:39:62:b6:48:c3:38:5b:bf:d6:b1:91:7a:fb:95:9d:
         3d:b3:44:74:b6:06:b1:bc:c5:9f:e3:8c:a0:9e:28:6d:4c:76:
         ac:a7:23:21:67:56:2b:a5:91:10:cf:0d:6e:f8:cb:ef:c5:c5:
         09:ba:ab:2f:20:07:e8:5a:87:84:91:0b:95:02:89:4c:2d:fc:
         e7:b5:c4:ef:01:a9:bc:5b:26:64:2a:97:5b:07:7e:45:d4:49:
         d3:c4:ce:f6:73:5a:53:bd:1e:64:9e:b0:c5:38:c6:24:69:f6:
         b9:61:77:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org