Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134322e302f32332d3233203d3e20323638393434.roa
File:                     34352e3137362e3134322e302f32332d3233203d3e20323638393434.roa (raw, json)
Hash identifier:          nYGwjqiEPIW/CYp26CmKDpc9ymYatv/aMc+ntG7bdp8=
Subject key identifier:   AF:3B:2B:C3:27:9D:7A:05:12:1B:F0:88:1E:08:FB:3C:1E:77:AC:1E
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       71D0AA367A6F3EE58B62591BD5A96BAE1EB5A931
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134322e302f32332d3233203d3e20323638393434.roa
Signing time:             Mon 22 May 2023 18:46:34 +0000
ROA not before:           Mon 22 May 2023 18:41:34 +0000
ROA not after:            Mon 20 May 2024 18:46:34 +0000
asID:                     268944
IP address blocks:        45.176.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d0:aa:36:7a:6f:3e:e5:8b:62:59:1b:d5:a9:6b:ae:1e:b5:a9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: May 22 18:41:34 2023 GMT
            Not After : May 20 18:46:34 2024 GMT
        Subject: CN=AF3B2BC3279D7A05121BF0881E08FB3C1E77AC1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:de:6f:e8:04:6d:80:eb:2e:d2:28:78:f2:
                    8a:6d:e2:8a:b3:e1:71:a9:8c:93:37:40:3b:5a:9f:
                    d3:9d:ef:f8:8e:b6:96:21:a6:70:ce:59:ab:a2:ef:
                    7c:5d:1e:26:bf:b1:12:6f:73:36:49:1f:45:2e:50:
                    93:96:c9:92:a4:2f:a6:b3:ac:50:a5:8c:73:34:8d:
                    cc:2f:2a:13:99:2b:72:45:d5:f1:56:79:1a:38:b1:
                    6f:8a:af:1a:b8:f5:5d:09:27:41:cf:0e:f4:92:6a:
                    03:ed:4b:4a:1d:7c:f9:b3:8f:ea:08:e5:cc:fe:f9:
                    84:5d:4f:06:c2:cc:49:de:21:57:91:10:f8:0a:11:
                    64:20:23:99:12:81:d2:23:58:2e:bf:50:f8:c9:d9:
                    40:8c:5c:a8:64:ab:7b:96:b3:b5:9f:76:80:b8:73:
                    c1:a4:95:f0:ae:32:30:39:38:c6:1c:42:d6:d5:b1:
                    40:93:37:ec:a9:c7:65:5c:ac:92:8c:8c:11:6e:af:
                    9f:14:62:a4:c4:7d:30:a5:a4:59:d0:98:ce:06:b8:
                    2f:fe:0a:c7:8a:c2:a8:19:8f:05:e0:36:93:dc:58:
                    a2:6a:eb:9e:76:70:37:f4:5e:ac:28:10:2a:06:6f:
                    95:74:b8:cf:2f:00:5f:33:e4:b0:f2:2b:2d:5e:48:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3B:2B:C3:27:9D:7A:05:12:1B:F0:88:1E:08:FB:3C:1E:77:AC:1E
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134322e302f32332d3233203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:1e:86:38:ec:b9:bf:9b:9f:6c:89:f5:7f:e5:fe:f4:1d:
         77:2b:eb:03:11:60:e0:22:3d:a1:d2:ce:2c:47:68:b9:00:e8:
         3e:01:4a:db:06:8a:f9:08:0f:76:a7:c9:27:fb:8d:9f:2b:c4:
         60:8e:16:ec:81:10:20:53:fd:64:69:d0:f3:7f:db:b1:6b:07:
         af:2a:e5:ee:e1:73:bd:3f:b1:af:97:61:8e:0a:f0:07:08:3a:
         13:f2:e5:d5:95:64:f4:6f:69:2c:41:1e:9e:2b:bf:bf:d3:0d:
         e7:04:45:e7:f6:7b:9f:88:8d:c2:cc:a0:1c:3d:60:bb:7d:31:
         47:d0:0f:71:1d:c2:be:8f:b9:23:83:83:6e:2b:05:26:52:74:
         f9:d1:37:85:93:fa:b2:45:56:6a:54:27:52:90:ac:cb:52:67:
         e5:77:d2:09:72:05:65:cb:30:43:8a:e7:04:6c:34:a9:35:80:
         ae:f5:04:87:d8:99:77:4a:32:ce:7f:04:5f:0a:8b:01:f3:4d:
         44:24:c9:d3:4b:81:2f:16:61:58:a5:70:98:ac:1b:07:07:e0:
         11:f2:1f:43:6b:93:65:0f:65:b3:c0:0d:a5:51:3b:d6:5b:53:
         5d:cd:48:1e:73:9d:88:b1:da:94:11:a8:1c:1d:d0:11:32:a0:
         6e:1e:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org