Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134312e302f32342d3234203d3e20323638393434.roa
File:                     34352e3137362e3134312e302f32342d3234203d3e20323638393434.roa (raw, json)
Hash identifier:          LLWKG6JZ5vTATxlkceJk9mj8AClqcD9bSWzooiZb01U=
Subject key identifier:   3C:40:34:29:04:BB:19:E1:B6:D0:4A:A3:BF:76:CB:EA:8F:C3:72:19
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       7B37F4D2639994F1FAA37FAB838B05E5D3343FB6
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134312e302f32342d3234203d3e20323638393434.roa
Signing time:             Mon 24 Jul 2023 17:48:46 +0000
ROA not before:           Mon 24 Jul 2023 17:43:46 +0000
ROA not after:            Mon 22 Jul 2024 17:48:46 +0000
asID:                     268944
IP address blocks:        45.176.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:37:f4:d2:63:99:94:f1:fa:a3:7f:ab:83:8b:05:e5:d3:34:3f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: Jul 24 17:43:46 2023 GMT
            Not After : Jul 22 17:48:46 2024 GMT
        Subject: CN=3C40342904BB19E1B6D04AA3BF76CBEA8FC37219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:86:68:1d:8b:16:0f:72:06:15:a2:44:74:f7:
                    ae:ed:32:c9:49:27:a1:51:fb:de:cf:77:1b:f8:e4:
                    92:bc:19:94:aa:c2:e7:58:d2:c9:57:d7:2c:73:9e:
                    02:77:cc:d2:74:30:6c:de:f4:f6:d5:90:e3:df:95:
                    27:c6:33:af:ac:59:a9:69:e7:e1:db:ae:db:f0:51:
                    e1:18:93:12:5e:b8:bf:b0:7d:38:d9:3e:08:a0:6f:
                    14:61:77:80:a9:99:be:97:3c:b2:ad:a5:0e:a7:6d:
                    32:e6:94:5d:a8:53:ca:d6:ed:aa:51:fc:6c:fb:1b:
                    c8:ce:fe:ef:4d:9c:0d:19:98:8c:2a:7e:f8:82:8a:
                    18:af:25:82:fd:76:76:14:4a:73:32:05:ea:30:03:
                    ce:23:3d:f2:c8:6b:8a:a1:8d:0e:dd:a3:81:ec:c8:
                    10:97:c6:a1:4a:9b:af:63:c4:a7:ff:97:7c:bd:09:
                    8d:d1:7a:e4:24:85:f0:23:73:b5:fc:58:f4:f3:7f:
                    1f:b9:89:b4:e7:dd:ef:6f:40:a3:9f:a7:d6:55:9c:
                    15:a1:e8:0a:ae:69:18:d3:ea:15:e7:74:d3:71:e2:
                    0c:09:1a:b0:9c:7a:cf:48:26:d2:2a:ae:bb:5f:bc:
                    f5:49:9d:e8:eb:5a:68:52:d9:52:2a:0f:ff:6a:7b:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:40:34:29:04:BB:19:E1:B6:D0:4A:A3:BF:76:CB:EA:8F:C3:72:19
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134312e302f32342d3234203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7c:0d:41:b5:bd:05:98:3a:f8:3c:c2:54:02:50:7b:3c:c9:
         aa:42:2c:fc:7d:bc:89:5d:a3:49:fd:01:7c:c9:49:a0:01:1c:
         62:37:24:76:ad:93:0f:7d:02:40:91:45:64:0a:36:aa:85:f5:
         e9:5a:95:4e:7a:60:cb:97:98:c4:29:97:1e:63:c6:d3:1f:d9:
         ab:cb:9e:8d:ef:d2:5d:c9:ec:17:36:20:f1:de:3f:7b:22:95:
         96:7a:23:3b:43:81:74:76:71:d4:c9:5c:22:66:55:2f:c4:5e:
         cb:23:66:44:92:28:b8:72:3e:4c:89:a8:f4:71:28:8d:f5:6c:
         0b:80:c5:42:e1:8f:40:a9:41:90:f3:97:fa:b2:e5:b0:bf:be:
         bc:f8:17:c0:56:7f:eb:c3:01:dc:95:16:41:ba:15:d5:b0:98:
         28:1f:ca:6a:81:66:fd:7b:e6:3e:9b:f0:b6:75:7a:15:82:da:
         e3:59:82:26:6f:a7:bc:e5:ac:fa:0a:18:d9:6f:58:c0:47:c4:
         36:8a:d0:8d:99:19:3e:3d:13:b6:40:2a:67:10:e1:b2:dc:69:
         0c:af:d2:33:16:21:33:a1:60:9e:e5:24:b6:e5:fe:f5:34:c7:
         58:78:b6:0e:dd:98:26:02:69:bd:cd:fe:c6:fd:95:7f:e4:ec:
         75:15:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org