Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39362e302f32342d3234203d3e20323638363734.roa
File:                     34352e3136352e39362e302f32342d3234203d3e20323638363734.roa (raw, json)
Hash identifier:          go0ctlWjGyCrrfXBj8DD71KULVa01Yv3HorKC0yz6to=
Subject key identifier:   FF:DD:B2:DC:B4:E0:C0:92:20:42:8F:53:3D:A1:19:C2:B8:D2:FC:FC
Certificate issuer:       /CN=04004212A99696A4F283C73FE7EC609301933701
Certificate serial:       5BC2AFC034C3A56D69ABFB27A614A8AE77A5EB6C
Authority key identifier: 04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39362e302f32342d3234203d3e20323638363734.roa
Signing time:             Thu 25 Jan 2024 17:49:00 +0000
ROA not before:           Thu 25 Jan 2024 17:44:00 +0000
ROA not after:            Thu 23 Jan 2025 17:49:00 +0000
asID:                     268674
IP address blocks:        45.165.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c2:af:c0:34:c3:a5:6d:69:ab:fb:27:a6:14:a8:ae:77:a5:eb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04004212A99696A4F283C73FE7EC609301933701
        Validity
            Not Before: Jan 25 17:44:00 2024 GMT
            Not After : Jan 23 17:49:00 2025 GMT
        Subject: CN=FFDDB2DCB4E0C09220428F533DA119C2B8D2FCFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:41:f2:e6:fb:ac:41:18:d4:27:c8:11:5d:e2:
                    a5:a7:be:2c:e7:54:3e:78:68:de:99:a8:d4:b4:a4:
                    e6:20:1f:ad:a0:ce:30:24:8d:cb:43:28:88:ad:81:
                    cb:f9:2c:8e:b9:64:53:3b:a3:9e:d2:01:64:6a:29:
                    d6:e2:8d:27:ed:f8:06:50:ee:0f:df:dc:00:5a:df:
                    47:57:86:b5:e7:9f:40:59:14:25:08:18:e0:c0:cf:
                    00:a6:b1:32:e8:c8:2f:ae:77:da:81:21:4a:5c:4b:
                    0f:c0:1f:ce:c0:2b:7a:7a:45:0a:5b:54:ba:1e:ed:
                    0f:9f:b0:8f:61:50:ab:c6:4e:f8:ff:68:40:8a:df:
                    d0:6b:dc:45:34:fd:ba:c6:6b:53:a2:26:dd:83:e7:
                    f7:72:d2:10:64:c4:90:9f:df:ea:7f:f0:9f:b7:63:
                    0b:a5:09:f4:e1:ba:9b:0a:50:4d:99:6b:48:d4:66:
                    14:df:2b:12:6b:b5:16:c5:d5:31:9b:b9:98:80:df:
                    11:7a:a5:4c:eb:87:a2:f9:36:bb:29:75:40:93:e2:
                    35:cb:83:42:97:23:81:5b:ef:82:10:dd:d4:ba:4c:
                    6c:9f:73:00:3f:b8:48:8f:fe:05:3b:28:a9:7b:f9:
                    4d:43:cb:18:c5:ab:9a:72:8e:6c:cb:e4:bf:cb:42:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DD:B2:DC:B4:E0:C0:92:20:42:8F:53:3D:A1:19:C2:B8:D2:FC:FC
            X509v3 Authority Key Identifier:
                keyid:04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/04004212A99696A4F283C73FE7EC609301933701.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39362e302f32342d3234203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:21:d6:6a:cb:f3:87:04:12:0d:c9:03:4c:3e:02:9d:82:7a:
         62:f6:cf:86:e8:28:59:cb:58:4a:71:a4:3b:11:61:76:8d:ab:
         e3:41:31:19:52:24:0f:59:6a:47:01:ce:20:3a:75:2f:5c:30:
         ca:56:42:91:e2:c9:84:59:b7:55:dd:fa:67:2a:2e:25:47:bd:
         7a:cc:cc:78:42:4d:7b:7f:47:cf:cd:7e:77:4d:07:4c:07:bd:
         cb:18:f4:38:97:12:b4:cb:4c:33:6d:68:c1:db:c8:16:cc:54:
         39:b6:1f:2e:cc:97:7b:d3:41:e4:d5:bc:3a:a3:08:c5:15:63:
         c7:54:73:4f:22:97:8d:69:21:51:e7:76:a4:e8:ad:78:51:75:
         c3:63:db:3f:7b:76:b8:60:11:c0:15:4c:6f:58:29:dd:59:14:
         26:a5:60:88:ff:52:29:ee:09:bb:98:63:10:da:45:2c:3f:c4:
         63:af:f7:7e:09:25:bc:4d:fa:fd:30:94:f2:93:54:a9:e9:6a:
         06:84:e2:36:f9:de:17:17:4f:e0:d3:02:cd:e4:c3:37:9d:a0:
         d9:43:bf:7b:ff:03:52:97:11:b2:dd:7e:a6:1d:ac:9e:16:5a:
         ea:e0:a6:c7:4d:32:98:a5:92:09:e0:35:f4:d3:18:95:e4:37:
         93:d2:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org