Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa
File:                     34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa (raw, json)
Hash identifier:          Zq/nJKS6dcPBSSZcQ1DsgFnI6TbJ4EsmNbCRyGnZDE8=
Subject key identifier:   74:12:96:37:96:22:42:40:5B:EB:C1:B4:A1:55:87:79:DC:5B:2C:3A
Certificate issuer:       /CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
Certificate serial:       1DE63C9296F1ECF9BDEA895B728DD95195876664
Authority key identifier: BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa
Signing time:             Mon 08 Jan 2024 15:07:55 +0000
ROA not before:           Mon 08 Jan 2024 15:02:55 +0000
ROA not after:            Mon 06 Jan 2025 15:07:55 +0000
asID:                     268408
IP address blocks:        45.160.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e6:3c:92:96:f1:ec:f9:bd:ea:89:5b:72:8d:d9:51:95:87:66:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE34597B7ABF76EF20D214D43F25E2579F560E78
        Validity
            Not Before: Jan  8 15:02:55 2024 GMT
            Not After : Jan  6 15:07:55 2025 GMT
        Subject: CN=74129637962242405BEBC1B4A1558779DC5B2C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:d7:37:bb:6b:2b:66:a3:a4:27:83:39:60:
                    19:45:5e:00:9f:62:e1:82:16:20:47:db:9b:dd:6a:
                    ab:e9:84:26:e0:5c:ab:36:98:ea:6b:d4:fc:99:62:
                    c8:28:f0:35:c0:c6:a7:0e:a2:38:4b:9d:66:ec:41:
                    ae:87:26:a9:1b:2c:b0:8c:31:d4:5d:16:53:a6:93:
                    9f:0c:81:d2:5b:1f:79:92:ac:67:d8:b1:22:16:10:
                    52:90:4e:fc:a2:8d:c7:19:b6:33:1e:f3:d4:f6:45:
                    ff:a7:ad:52:3f:02:d3:c2:db:4e:d3:8d:bf:21:50:
                    3c:73:6a:f9:73:ed:7d:ce:a7:d3:97:c1:49:10:43:
                    7a:8a:2d:c7:99:89:01:4a:09:9a:a5:8f:46:15:ff:
                    0e:83:92:c8:51:41:1d:e6:9a:64:02:79:44:62:f0:
                    fb:c5:c7:cf:c4:dc:0c:14:33:b3:11:ee:98:ee:db:
                    54:5b:b8:e3:b5:89:55:f6:8c:be:bc:eb:df:c0:3f:
                    cb:99:7d:36:0a:9d:c7:3f:5f:89:0a:02:22:50:a0:
                    b5:7e:d3:93:fc:fd:21:d6:c6:99:fd:77:1d:10:b3:
                    24:e1:c1:c7:fc:59:3c:10:b0:a5:93:2a:2d:b0:c7:
                    2d:69:47:95:55:9a:f5:f5:7c:04:90:4f:1e:16:ca:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:12:96:37:96:22:42:40:5B:EB:C1:B4:A1:55:87:79:DC:5B:2C:3A
            X509v3 Authority Key Identifier:
                keyid:BE:34:59:7B:7A:BF:76:EF:20:D2:14:D4:3F:25:E2:57:9F:56:0E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE34597B7ABF76EF20D214D43F25E2579F560E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/0/34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:4e:b4:2a:aa:6b:2c:d4:91:43:78:b4:b0:3e:20:d5:8b:04:
         d0:43:98:db:20:d6:e4:1a:44:d6:a4:fb:52:91:ae:ff:83:54:
         81:9b:91:13:90:40:74:e3:5c:28:1e:d3:3c:75:fa:4e:05:cf:
         a4:bc:17:a4:5c:d6:12:89:16:fa:60:da:00:0f:6c:c5:8d:5c:
         f6:4f:4d:f2:33:d8:d2:88:50:3b:43:e7:aa:a2:62:f4:f9:6e:
         72:48:14:b4:10:4d:c3:a4:76:50:4e:26:50:cd:8e:89:47:0b:
         61:5d:4c:4f:c0:5a:ee:88:61:bc:42:30:8d:9b:86:8c:2c:9d:
         2f:c0:eb:5b:c1:67:26:ff:d4:33:91:1d:da:43:1c:96:8e:cc:
         c1:55:90:9a:f8:d9:e4:c2:b9:06:43:b1:49:5e:3e:6d:f0:ec:
         a7:ac:c2:c1:dc:8a:ca:6e:20:f8:cc:b3:a9:4b:9e:55:48:c9:
         6f:12:a2:18:01:79:df:37:b8:14:cd:2d:2f:95:3c:eb:49:d3:
         7d:d7:a6:29:a5:a6:11:1b:26:f6:35:35:62:f4:24:b2:1b:7f:
         91:59:ad:e8:a8:97:46:02:9f:82:09:dc:57:79:c2:f7:20:f6:
         c7:1b:76:78:46:23:d2:7b:2e:73:70:88:a9:13:b8:02:06:e6:
         07:4c:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org