Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32332d3233203d3e20323638393434.roa
File:                     34352e3137362e3134302e302f32332d3233203d3e20323638393434.roa (raw, json)
Hash identifier:          bUgMR0U+cFkWPKv1NXPdgeCcZoBYmpytWpJnQN+gGdY=
Subject key identifier:   33:79:80:05:23:DA:25:63:1D:F7:3D:33:2F:43:6C:11:66:AE:18:34
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       297113B3E4387C143CDF4919F0DE247D4488F24E
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32332d3233203d3e20323638393434.roa
Signing time:             Mon 22 May 2023 18:46:27 +0000
ROA not before:           Mon 22 May 2023 18:41:27 +0000
ROA not after:            Mon 20 May 2024 18:46:27 +0000
asID:                     268944
IP address blocks:        45.176.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:71:13:b3:e4:38:7c:14:3c:df:49:19:f0:de:24:7d:44:88:f2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: May 22 18:41:27 2023 GMT
            Not After : May 20 18:46:27 2024 GMT
        Subject: CN=3379800523DA25631DF73D332F436C1166AE1834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:65:98:a0:a8:09:9d:ec:4b:f4:8f:01:61:
                    25:80:69:7e:f3:8f:f9:42:06:00:fe:5c:09:36:a9:
                    86:d9:5e:d7:8f:e8:b2:75:7c:4b:d9:80:31:7e:78:
                    d8:b6:4e:2d:bd:d5:9e:89:19:43:de:bb:cb:b9:46:
                    96:c6:60:8f:18:ad:02:7d:11:df:af:ab:d0:9b:8e:
                    dd:9c:c5:ce:a9:b9:05:c8:6a:f7:47:33:1e:5e:d0:
                    48:15:6f:6d:5e:e8:c8:2d:10:00:cc:67:81:4d:fb:
                    63:0e:c2:d3:f4:08:42:cd:05:36:b2:51:56:f8:8c:
                    62:d3:63:52:88:5e:47:2d:65:5b:8b:96:94:5a:f3:
                    04:0d:e5:09:3b:c3:8d:86:ee:6a:b7:36:b0:97:83:
                    3a:17:59:e6:36:30:f3:15:4f:30:bf:6e:01:34:e8:
                    82:76:ee:8a:d5:20:97:dd:8c:c1:16:43:07:ea:7b:
                    31:8a:c9:d9:d1:52:b9:5f:25:7c:4b:ca:f0:06:1a:
                    f9:e4:37:34:c8:70:fe:e1:ee:85:33:ef:d2:18:88:
                    a1:b4:6e:00:31:86:ca:fb:91:1e:e9:32:7d:3c:85:
                    6e:ac:cd:0f:37:de:fd:93:a5:7d:0d:31:53:bb:61:
                    45:ee:84:5e:dd:2c:b3:6c:f6:53:19:99:f9:ee:af:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:80:05:23:DA:25:63:1D:F7:3D:33:2F:43:6C:11:66:AE:18:34
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32332d3233203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:8b:0c:13:f9:28:ae:a4:76:ac:cd:1e:e4:4e:43:24:1f:cb:
         01:40:7b:bf:ab:57:26:c7:37:ab:61:de:1b:ac:44:94:49:08:
         01:85:44:45:f2:ad:a6:42:ae:46:69:bf:00:4d:18:6e:be:a7:
         a6:35:75:de:c1:6e:36:4d:e3:74:18:cc:1f:3d:bb:c1:77:2b:
         73:fd:8e:1a:77:0c:36:2d:f9:1c:02:2b:a4:4b:68:d7:1b:1d:
         b8:08:26:2c:3b:f0:90:00:20:c3:ce:3e:e6:58:bb:4b:b3:cb:
         1c:cb:ba:25:7a:e6:85:2a:88:cb:a5:1f:d2:64:4d:1c:32:4c:
         91:da:62:a7:b8:cd:99:4e:ba:e2:59:f5:37:ce:16:e6:d2:61:
         1a:0a:47:27:e0:7d:65:7a:c7:54:ec:e7:55:59:e7:41:0a:fd:
         7f:9b:6f:7e:4f:ca:14:2c:de:40:29:4c:b6:c9:97:f0:5e:55:
         67:bc:33:99:c2:7b:24:42:4b:83:e9:6c:0a:f4:48:ba:d8:fe:
         ca:ee:4a:1a:1c:a0:26:23:53:09:55:b4:8a:e0:dd:17:b7:b2:
         14:44:ec:8c:fd:d2:2b:c2:5d:e5:bb:26:da:bf:73:59:c9:3d:
         72:b4:d2:d1:7c:be:65:12:3d:50:db:46:98:86:52:23:31:fc:
         86:78:88:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org