Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32332d3233203d3e20323633343237.roa
File:                     34352e3136322e3234302e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier:          JJ56mNBl+Btb4OFsRhgyWRKG7yf//L2WHUxn1Mj4q1c=
Subject key identifier:   83:5C:B2:2E:76:72:0A:CA:C4:7F:9C:F0:97:E6:95:00:E2:57:27:76
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       41426317D37831957626C22ABC674229270A915B
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32332d3233203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:12:46 +0000
ROA not before:           Fri 09 Jun 2023 22:07:46 +0000
ROA not after:            Fri 07 Jun 2024 22:12:46 +0000
asID:                     263427
IP address blocks:        45.162.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:42:63:17:d3:78:31:95:76:26:c2:2a:bc:67:42:29:27:0a:91:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 22:07:46 2023 GMT
            Not After : Jun  7 22:12:46 2024 GMT
        Subject: CN=835CB22E76720ACAC47F9CF097E69500E2572776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:d1:e0:65:17:95:d1:ac:b2:35:af:74:42:
                    7b:25:61:5e:0d:ad:71:88:4e:57:06:84:4e:62:e8:
                    5f:7a:b6:ee:17:f6:cf:ee:d5:d3:ac:66:25:ad:44:
                    78:2a:89:c0:65:f3:1a:f5:8b:11:5f:30:6a:6e:78:
                    b7:a6:7c:80:4e:7e:fe:aa:ab:81:b1:db:26:2e:1d:
                    09:48:45:1a:03:87:c3:be:ae:bc:c7:ce:ee:d2:cb:
                    ab:71:e9:9f:93:65:b0:32:8c:e9:7b:d8:08:20:57:
                    af:ce:dd:b9:4f:19:e1:62:3a:f9:3a:3e:23:b0:81:
                    5d:e0:6d:01:59:5e:2d:a0:56:d6:77:ca:b3:d7:b5:
                    94:de:6a:cf:95:c6:c9:86:4b:a4:36:1e:be:6e:c1:
                    fd:65:97:84:7c:3a:17:af:d2:f7:ca:11:eb:23:25:
                    6c:ed:10:f8:98:7c:9e:2d:a8:d9:68:e3:54:2d:31:
                    fe:f0:a3:0d:af:81:41:de:4a:c1:97:e9:9d:8f:19:
                    7e:f6:91:9c:01:3f:b6:5c:78:be:c0:b6:ba:55:e6:
                    80:dd:4b:45:37:d2:c0:2e:17:ac:ce:a8:4c:47:8a:
                    09:ca:42:d9:1f:cb:90:34:ed:02:03:f9:a4:91:35:
                    f9:2a:15:40:65:bb:9e:f6:f5:ed:fe:1e:37:91:3c:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5C:B2:2E:76:72:0A:CA:C4:7F:9C:F0:97:E6:95:00:E2:57:27:76
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32332d3233203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:d7:14:8a:3d:07:3e:d8:0a:e7:ed:8c:15:8d:e0:60:a3:
         0d:74:f1:1b:f7:9a:2a:fe:97:ab:4f:09:9c:4d:45:1d:63:49:
         0d:05:78:a8:63:fe:a7:8b:58:2a:e5:8b:d4:14:3c:f8:6a:8a:
         cf:e4:c7:2b:df:4b:96:cd:c0:de:5a:6d:02:27:85:4b:e3:35:
         53:0e:88:f7:db:01:f3:cb:51:a3:1e:58:ed:e3:46:03:73:8d:
         18:22:98:fc:7b:9b:44:00:3d:3b:b7:99:8d:8f:dc:26:df:52:
         06:11:6b:0f:70:9b:e7:8f:b6:79:e4:c3:fe:a6:e3:bd:df:6e:
         7b:f6:64:9f:e4:b3:89:3c:ce:17:43:f5:36:3a:f8:76:0c:00:
         42:25:78:cf:d0:87:5d:95:fe:09:25:f3:ef:89:2e:13:94:50:
         be:6e:3e:11:3b:7e:91:1a:1c:5d:12:8b:c3:0b:12:e6:b0:f0:
         92:1d:15:92:40:48:27:55:f8:78:15:06:88:67:5b:2c:4c:11:
         69:90:71:1a:3e:dd:20:34:f2:a4:b3:cd:6e:b3:3d:3f:e6:5d:
         a6:ef:55:8b:5c:8d:85:e9:88:0a:a4:e5:c9:2b:78:6c:96:0c:
         98:93:a5:75:2d:9c:d1:f4:4e:bc:7e:0d:15:90:a1:53:f5:d5:
         66:df:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org