Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32342d3234203d3e20323638393434.roa
File:                     34352e3137362e3134302e302f32342d3234203d3e20323638393434.roa (raw, json)
Hash identifier:          B5C67SHFxwr6golXfjc+bHRCh5h+SzwkB3rHz/QGeuA=
Subject key identifier:   07:52:E0:AE:D9:F0:FC:A3:A1:46:F0:5F:25:D0:32:11:FD:86:26:BD
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       7608B30D4CE55923AE86DBFD2BEAA3159619EE1A
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32342d3234203d3e20323638393434.roa
Signing time:             Mon 24 Jul 2023 17:48:33 +0000
ROA not before:           Mon 24 Jul 2023 17:43:33 +0000
ROA not after:            Mon 22 Jul 2024 17:48:33 +0000
asID:                     268944
IP address blocks:        45.176.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:08:b3:0d:4c:e5:59:23:ae:86:db:fd:2b:ea:a3:15:96:19:ee:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: Jul 24 17:43:33 2023 GMT
            Not After : Jul 22 17:48:33 2024 GMT
        Subject: CN=0752E0AED9F0FCA3A146F05F25D03211FD8626BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:6a:ab:7b:b8:6a:ba:1d:f9:18:8b:7f:26:
                    f7:22:7d:a1:92:5f:db:80:f7:ee:b4:e0:e5:7a:fc:
                    38:d3:6e:bc:8e:07:69:de:90:6d:ea:58:c2:77:24:
                    06:1d:61:d5:58:2e:4b:ed:c3:a1:f4:4a:f3:6d:17:
                    ce:d4:7e:41:30:4d:3e:50:f7:b3:78:34:a3:56:4e:
                    8b:27:27:10:40:d6:13:ad:0b:36:71:46:57:69:f4:
                    ec:23:17:25:6d:af:d9:5e:be:80:71:bb:2b:fb:9a:
                    a2:0d:ec:9b:9a:97:c2:24:00:10:71:ad:f7:45:42:
                    b0:e3:52:95:1b:98:ec:40:ac:05:76:e1:09:f6:af:
                    d9:dd:d1:95:5e:cb:e7:e0:0a:93:47:ef:b1:26:e8:
                    5f:7e:0a:07:37:ec:03:a1:a0:65:64:14:7f:4a:be:
                    97:4f:e6:a0:ee:d7:28:da:2f:c9:d0:dc:5e:99:dd:
                    2d:d3:ea:2f:ab:36:2e:25:2e:6d:42:05:7b:e9:46:
                    c3:8b:71:3f:af:a2:6c:0a:40:fe:4c:c8:86:d7:4b:
                    2d:ff:3f:60:82:7c:1e:89:b3:fc:4a:59:3a:f3:48:
                    83:91:aa:98:0a:c2:b1:20:3a:bc:0b:5c:ec:a8:d3:
                    f6:b9:3f:5e:82:3a:38:91:2b:da:61:44:ca:ce:11:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:52:E0:AE:D9:F0:FC:A3:A1:46:F0:5F:25:D0:32:11:FD:86:26:BD
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32342d3234203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:00:d1:ea:42:20:89:ac:bc:38:d8:2c:5b:1b:75:01:14:89:
         3a:b7:93:10:68:d4:55:3c:f1:94:d9:13:2d:7a:40:be:7e:ad:
         78:af:38:1e:f3:da:2a:44:0a:f9:eb:bf:58:ef:78:5b:b7:03:
         95:7c:3f:de:6a:30:56:84:52:e9:7f:8c:7e:ab:a4:ab:43:f1:
         8d:52:ea:d3:8c:85:ae:d3:64:e1:c5:5e:10:3e:31:50:02:46:
         97:6e:a3:41:00:16:3a:79:ef:ae:7d:e9:01:db:42:6b:6d:ca:
         5f:8e:98:05:c8:6d:54:dc:21:df:e6:9d:4e:85:90:b9:d8:6b:
         f2:56:6e:7d:f3:e8:8d:cf:51:aa:b6:f5:04:54:1e:9d:76:40:
         a5:18:2f:e1:aa:8c:c3:af:54:81:91:2f:d8:ec:80:e4:ad:17:
         b1:7d:a9:1c:da:87:24:1f:28:a5:a4:a1:12:4c:3c:13:5c:af:
         09:91:5f:b7:7c:bb:1a:1d:95:cf:81:ea:84:63:04:26:2c:3f:
         56:e6:27:01:03:28:33:d8:1a:9a:85:83:30:f0:ae:2e:fc:1c:
         78:de:f2:4e:e1:2b:85:4d:40:e2:2c:90:71:66:26:e6:62:10:
         7b:83:80:9d:dc:87:1f:c8:1c:59:90:81:13:de:77:3c:70:f7:
         61:f4:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org