Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/34352e3233322e3133392e302f32342d3234203d3e20323637333231.roa
File:                     34352e3233322e3133392e302f32342d3234203d3e20323637333231.roa (raw, json)
Hash identifier:          u7XeSelGCu1Xf05qpIXZAOMeyXkzsF7KSsGHM+LBL0E=
Subject key identifier:   BD:94:F5:6C:12:98:1B:C6:A3:0A:E4:2A:4C:81:20:6B:55:78:85:17
Certificate issuer:       /CN=579DF23540432B30BFE18FA378AD1C45E5ED6034
Certificate serial:       47D761E6591C1C26C71850C76EE18E48254259BB
Authority key identifier: 57:9D:F2:35:40:43:2B:30:BF:E1:8F:A3:78:AD:1C:45:E5:ED:60:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/579DF23540432B30BFE18FA378AD1C45E5ED6034.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/34352e3233322e3133392e302f32342d3234203d3e20323637333231.roa
Signing time:             Sat 09 Sep 2023 19:46:34 +0000
ROA not before:           Sat 09 Sep 2023 19:41:34 +0000
ROA not after:            Sat 07 Sep 2024 19:46:34 +0000
asID:                     267321
IP address blocks:        45.232.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d7:61:e6:59:1c:1c:26:c7:18:50:c7:6e:e1:8e:48:25:42:59:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579DF23540432B30BFE18FA378AD1C45E5ED6034
        Validity
            Not Before: Sep  9 19:41:34 2023 GMT
            Not After : Sep  7 19:46:34 2024 GMT
        Subject: CN=BD94F56C12981BC6A30AE42A4C81206B55788517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:23:13:35:9c:80:ee:f4:88:1f:18:f4:49:
                    ef:ce:74:02:4d:3a:d6:3d:16:89:62:a9:72:ed:59:
                    81:6a:4c:a4:db:ab:28:59:6f:86:1d:c6:26:c2:15:
                    5f:ad:1c:0c:76:fa:4c:37:c6:62:47:56:90:b5:32:
                    a5:6e:74:5a:bd:90:09:46:25:d0:61:27:9a:fc:f1:
                    a3:6e:78:eb:d3:69:d6:59:a1:44:95:13:83:fe:3b:
                    a3:00:d0:7d:3d:47:90:f0:73:10:64:90:5c:02:1a:
                    7f:90:ca:68:ee:d0:d8:eb:21:a4:78:c7:c8:64:b3:
                    1c:57:7b:70:be:6e:84:9e:87:ae:5e:39:e9:dc:1b:
                    71:a4:a3:58:cb:71:ca:b6:ed:20:dc:e6:11:80:f4:
                    eb:15:ec:28:1c:6b:94:b8:c5:da:c6:d3:dd:e9:44:
                    1c:ae:9c:67:fe:e1:a8:9b:f3:8e:45:e6:2e:97:40:
                    12:f1:64:58:9a:bb:ef:d6:18:68:92:80:54:ec:27:
                    40:5d:a3:e0:a7:8d:e8:de:a1:8a:2e:ee:63:c3:8f:
                    06:ef:93:f4:29:c8:c9:5d:4b:d4:6d:91:ea:64:17:
                    e8:1f:31:97:1c:d4:f1:80:22:de:6d:3a:d1:5a:74:
                    57:78:e3:6f:58:dc:10:c5:5f:dc:c3:c9:b4:01:35:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:94:F5:6C:12:98:1B:C6:A3:0A:E4:2A:4C:81:20:6B:55:78:85:17
            X509v3 Authority Key Identifier:
                keyid:57:9D:F2:35:40:43:2B:30:BF:E1:8F:A3:78:AD:1C:45:E5:ED:60:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/579DF23540432B30BFE18FA378AD1C45E5ED6034.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/579DF23540432B30BFE18FA378AD1C45E5ED6034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/34352e3233322e3133392e302f32342d3234203d3e20323637333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:62:4e:d6:a7:64:90:be:9d:d7:d1:f8:dc:10:49:f0:9a:
         c8:e1:e9:e1:5e:c4:6a:9c:d0:51:60:f3:bb:9b:1a:1e:19:b6:
         4c:20:16:03:30:2e:47:0c:d3:df:91:e2:8c:c5:48:44:b2:d4:
         da:00:f5:eb:3e:0b:59:9d:52:42:b1:f1:43:53:c0:40:28:fe:
         01:39:c7:c1:31:4c:04:df:fe:55:10:da:cf:fd:46:66:40:7e:
         d0:8a:34:07:bd:a0:8a:a8:3c:fb:92:45:dc:50:bd:f2:f4:ca:
         a6:99:67:1f:89:ea:39:93:5c:75:fb:51:0c:2b:4b:9c:26:71:
         a6:c9:c2:2f:59:07:ad:02:f6:c0:23:b1:16:93:43:d1:87:5f:
         75:6a:c5:6a:73:8d:26:d9:1a:04:9c:5e:2a:b7:b8:27:ad:a4:
         e2:01:b5:0a:f1:e7:ce:a0:a3:03:4d:90:3f:5e:04:20:2e:dd:
         d9:22:98:ee:ea:90:d5:03:b5:d4:86:99:7f:52:f3:fd:ce:27:
         8d:eb:7a:5c:c5:07:bf:82:1b:0a:39:cd:48:e9:0d:86:c3:aa:
         3a:88:e5:80:c8:c8:f3:f5:bd:ed:17:bd:5d:c4:7e:e0:33:31:
         50:4b:12:79:27:1d:8b:ed:66:ca:ea:c8:20:81:11:da:97:5c:
         fd:98:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org