Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa
File:                     34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          t6qbhNJtKaK0u5msw59h7Fcbn248hh77MjolhMwY7rU=
Subject key identifier:   D6:AD:8C:21:48:13:85:8B:23:C5:E2:16:25:2A:E2:B1:2E:47:AF:1C
Certificate issuer:       /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial:       12955FCC3BDC88A7BB22AB656DADFDB882173DEA
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa
Signing time:             Fri 09 Jun 2023 22:05:10 +0000
ROA not before:           Fri 09 Jun 2023 22:00:10 +0000
ROA not after:            Fri 07 Jun 2024 22:05:10 +0000
asID:                     263427
IP address blocks:        45.162.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:95:5f:cc:3b:dc:88:a7:bb:22:ab:65:6d:ad:fd:b8:82:17:3d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
        Validity
            Not Before: Jun  9 22:00:10 2023 GMT
            Not After : Jun  7 22:05:10 2024 GMT
        Subject: CN=D6AD8C214813858B23C5E216252AE2B12E47AF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:bb:02:02:ca:df:6c:5a:24:9d:88:b9:dc:
                    43:c2:5a:c7:05:9c:91:bf:61:b9:ce:3f:9c:41:43:
                    8c:08:5b:25:13:f9:31:3c:7b:c0:74:fa:96:b9:01:
                    33:92:0b:13:0e:31:63:15:bf:74:5c:8a:13:58:a2:
                    21:88:bf:53:c6:4d:f0:15:b6:46:ba:c4:e3:ea:7b:
                    75:d9:52:f8:b1:58:1f:9d:68:8b:4b:6b:4d:00:9e:
                    b4:b3:ba:d2:30:65:24:52:25:64:40:f6:7f:66:53:
                    df:65:f0:f0:7c:01:da:2a:07:13:c3:1a:e2:f3:70:
                    dc:68:1e:be:d9:7c:ea:45:3b:fd:2b:fe:f3:1e:4e:
                    22:cd:01:f7:5f:f3:69:40:82:3b:d5:22:23:63:49:
                    3a:9e:3f:ee:a9:23:33:42:56:7a:c2:2e:52:0f:54:
                    9d:ab:fc:07:da:db:d6:50:68:b4:4d:d1:9b:ac:1b:
                    db:02:93:3f:e1:17:3a:23:bc:a8:f9:7f:0f:57:32:
                    d6:18:ab:89:e8:89:4a:cb:3b:32:53:00:76:1e:4a:
                    62:88:5c:d8:52:2f:de:89:0e:1d:4a:3f:da:27:0d:
                    2d:1c:31:ed:6d:18:70:39:ff:5b:8e:70:b9:80:0f:
                    76:0d:33:9d:03:ac:64:76:a1:b3:12:63:ed:f0:26:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AD:8C:21:48:13:85:8B:23:C5:E2:16:25:2A:E2:B1:2E:47:AF:1C
            X509v3 Authority Key Identifier:
                keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8d:6d:0b:7d:37:85:13:88:64:aa:65:0f:63:5b:99:55:d5:
         b5:8e:29:b1:42:6d:7c:1b:b1:9e:fa:54:29:3a:30:86:79:22:
         fb:1e:c3:19:22:de:96:a9:53:94:83:aa:61:82:5f:77:da:dd:
         b5:5d:ed:bd:c6:6e:47:7d:6d:aa:ae:b8:49:e9:7b:4f:67:6f:
         72:55:5a:ad:2f:62:26:57:52:9c:59:bb:fb:de:f6:7d:52:4d:
         5a:d8:d6:24:63:84:ca:70:46:5e:61:32:df:4f:05:4c:e5:76:
         79:61:7a:6e:f2:69:73:52:1b:10:d0:36:48:3a:31:55:3b:9e:
         29:dd:aa:33:5c:18:b4:ab:3a:68:49:04:76:b7:5c:08:5e:c7:
         dc:e6:20:5c:ee:86:d6:17:bc:70:ea:c5:68:73:f2:d8:eb:04:
         7e:71:94:5a:d8:ab:1e:2a:c3:45:a0:0c:f3:1b:5e:25:76:4e:
         9c:b2:45:2d:93:cb:40:ec:97:a9:57:ea:0a:d9:52:ff:58:23:
         56:2d:5e:bf:00:a2:76:19:09:89:7f:3a:39:27:01:c2:b7:3f:
         47:26:d1:03:48:15:a1:1f:50:b7:d1:89:1a:97:86:57:65:87:
         e4:79:b6:da:d6:d5:d4:cb:df:e9:05:e6:15:12:00:bf:6c:26:
         2b:33:65:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org