Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/34352e3233342e3133362e302f32332d3233203d3e20323636333536.roa
File:                     34352e3233342e3133362e302f32332d3233203d3e20323636333536.roa (raw, json)
Hash identifier:          UTljLfv5AtAW5gaDSVFmDbq0m20EM/32s8m2KvktwpE=
Subject key identifier:   1E:EB:71:3F:46:F1:1C:1B:0B:31:3D:2F:01:3B:A0:EA:30:D0:1D:86
Certificate issuer:       /CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
Certificate serial:       EA3BDF0EAEF127B25A8CFCE6F745CF8399BBE9
Authority key identifier: D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/34352e3233342e3133362e302f32332d3233203d3e20323636333536.roa
Signing time:             Thu 18 Jan 2024 21:40:21 +0000
ROA not before:           Thu 18 Jan 2024 21:35:21 +0000
ROA not after:            Thu 16 Jan 2025 21:40:21 +0000
asID:                     266356
IP address blocks:        45.234.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ea:3b:df:0e:ae:f1:27:b2:5a:8c:fc:e6:f7:45:cf:83:99:bb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64B89CB91E52BC9365EA489D394DB5AFCF428DA
        Validity
            Not Before: Jan 18 21:35:21 2024 GMT
            Not After : Jan 16 21:40:21 2025 GMT
        Subject: CN=1EEB713F46F11C1B0B313D2F013BA0EA30D01D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:0b:8f:e8:ed:f1:bd:17:69:b2:25:7a:9d:
                    37:17:0d:62:d1:bb:32:ea:c2:a8:c3:db:09:4b:1f:
                    df:57:6f:fb:4a:b9:33:67:4b:81:1b:2f:10:a9:f5:
                    66:50:ca:e0:f1:c9:67:d8:cc:44:6e:93:55:cb:4d:
                    36:67:92:fb:91:67:bc:e6:6b:bb:f0:bd:d0:35:c6:
                    51:49:a1:9a:00:73:e8:b1:6d:06:16:f1:2f:e2:1c:
                    07:e0:b8:9b:99:4e:7e:65:48:22:41:11:85:75:9b:
                    65:39:17:97:fe:79:40:cd:cd:d6:dc:e0:99:2e:d3:
                    e9:1b:9e:5f:73:ca:03:6a:2c:8b:07:63:0c:08:ed:
                    53:d6:c6:21:2c:0e:3c:84:81:a9:8a:6e:01:65:31:
                    86:25:66:62:57:38:8d:fb:f9:cc:12:91:83:10:58:
                    3f:ca:83:e6:03:41:d3:be:5b:fe:83:d5:fb:b0:77:
                    2d:a7:fb:16:e0:25:9a:a8:82:70:bc:14:c2:a9:e3:
                    3e:a2:a7:8c:f0:8e:2a:ce:43:13:c3:f2:22:3b:01:
                    6a:19:36:ae:60:3e:66:ec:ff:c4:f4:3c:71:0c:61:
                    43:26:84:44:17:e1:d2:91:d6:97:b2:52:5e:7f:d7:
                    d1:d7:b6:96:a6:d3:20:7f:9a:53:21:c3:ae:38:5d:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EB:71:3F:46:F1:1C:1B:0B:31:3D:2F:01:3B:A0:EA:30:D0:1D:86
            X509v3 Authority Key Identifier:
                keyid:D6:4B:89:CB:91:E5:2B:C9:36:5E:A4:89:D3:94:DB:5A:FC:F4:28:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D64B89CB91E52BC9365EA489D394DB5AFCF428DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FUH9fnHfyx3xmxy4KAU4oE6FnSS9VnBFLiwmybSaYN9/0/34352e3233342e3133362e302f32332d3233203d3e20323636333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:54:d0:52:95:01:84:9d:b0:6b:8e:b1:73:f9:0a:a3:dd:10:
         d1:e9:ad:bb:c0:53:96:de:f8:41:49:06:6a:1c:ae:4b:60:af:
         49:83:9b:dc:6e:86:d8:fb:0f:f6:9c:40:06:22:96:fe:fd:6f:
         33:52:2e:77:90:5d:32:64:a9:fc:2a:52:d8:69:e9:80:e7:34:
         64:e7:f8:6e:82:94:b7:6a:77:6f:8e:94:f3:e1:1e:9e:49:90:
         2e:c5:4b:ff:8b:2d:43:cb:87:0a:51:2c:d8:82:aa:12:7a:64:
         b0:2e:96:77:50:5e:ad:05:82:18:9b:9e:97:3b:42:99:7c:3c:
         e1:2f:f1:3d:bf:cd:29:a9:f9:eb:23:b5:40:59:85:d0:67:b3:
         3f:13:98:ad:13:91:c5:b4:55:17:38:0a:7f:9f:b0:78:33:33:
         0e:4b:66:90:3b:cc:6c:45:af:65:57:97:27:9e:6a:e4:c6:5e:
         13:31:a9:cb:3b:42:67:7d:68:9f:db:05:37:d8:27:9a:fb:b8:
         f3:df:ec:b8:93:42:ff:b1:fb:97:05:5a:bb:ab:f4:55:f8:57:
         29:e9:bc:ee:c9:38:87:7c:8d:04:bf:32:6f:6a:5c:4f:95:a4:
         a8:e8:e8:55:21:b0:fc:83:f5:09:68:9c:c2:7b:c9:6b:ce:60:
         81:61:5f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org