Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134332e302f32342d3234203d3e20323638393434.roa
File:                     34352e3137362e3134332e302f32342d3234203d3e20323638393434.roa (raw, json)
Hash identifier:          WXf+BoeAp/rB9HM6NP8348+vkUHgyocPDb8oFQjEX04=
Subject key identifier:   E9:F6:DB:C5:6C:B7:1C:BA:EA:C8:C3:DF:5D:C8:B0:F5:35:68:FE:6F
Certificate issuer:       /CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
Certificate serial:       6BB88608F8A731753EB9EF7E096A6BA36FE9FD18
Authority key identifier: D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134332e302f32342d3234203d3e20323638393434.roa
Signing time:             Mon 24 Jul 2023 17:49:12 +0000
ROA not before:           Mon 24 Jul 2023 17:44:12 +0000
ROA not after:            Mon 22 Jul 2024 17:49:12 +0000
asID:                     268944
IP address blocks:        45.176.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b8:86:08:f8:a7:31:75:3e:b9:ef:7e:09:6a:6b:a3:6f:e9:fd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1DA329465F62BCE99280EB16F4260FB32AE9DED
        Validity
            Not Before: Jul 24 17:44:12 2023 GMT
            Not After : Jul 22 17:49:12 2024 GMT
        Subject: CN=E9F6DBC56CB71CBAEAC8C3DF5DC8B0F53568FE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cc:bc:b7:50:e7:ac:c8:c6:1b:fd:66:7c:f2:
                    f2:84:74:eb:ea:2a:d8:c6:bd:fe:71:a4:4b:0d:e9:
                    83:85:b7:04:f6:be:85:be:15:21:20:95:fb:2a:44:
                    5b:72:64:23:d7:94:a9:17:93:d2:cc:3b:5c:ad:fa:
                    3a:a7:c1:7b:14:c1:4d:5b:66:93:f3:c4:2c:c6:45:
                    4c:0e:b5:62:26:2e:7d:b3:31:66:a1:1d:c4:10:33:
                    ed:12:06:5e:6e:2d:73:fb:29:8b:81:52:07:07:b8:
                    0f:9d:41:bf:8a:76:75:1d:57:85:76:8c:24:89:17:
                    72:40:f6:fe:ba:cb:92:8d:33:0d:cc:0d:2d:2d:3e:
                    2f:30:4c:b8:98:ef:e2:1a:03:02:4d:5b:b8:73:5b:
                    b7:0c:53:08:e1:79:ab:e1:b7:2e:11:d4:8c:e2:48:
                    8e:7d:8e:72:6e:25:a3:81:67:bf:40:7b:a5:fc:7e:
                    13:6e:c8:11:7e:92:f1:2d:65:fc:b2:9f:83:16:bd:
                    46:41:e7:07:09:16:8e:46:6d:c2:3b:93:cd:17:1c:
                    dd:29:36:bd:ac:05:8e:c5:e4:62:d0:2c:08:36:49:
                    70:2c:ee:3d:47:26:b1:ff:54:21:eb:01:c2:f4:7a:
                    36:68:70:f4:57:c8:88:38:4c:25:18:9b:99:e2:0b:
                    1a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F6:DB:C5:6C:B7:1C:BA:EA:C8:C3:DF:5D:C8:B0:F5:35:68:FE:6F
            X509v3 Authority Key Identifier:
                keyid:D1:DA:32:94:65:F6:2B:CE:99:28:0E:B1:6F:42:60:FB:32:AE:9D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1DA329465F62BCE99280EB16F4260FB32AE9DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134332e302f32342d3234203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:38:d3:09:12:79:55:73:2f:63:16:b5:a1:84:a1:a1:44:
         a4:1f:82:25:79:b3:4e:72:62:cc:37:5f:73:50:97:19:ec:48:
         6f:fd:96:8c:11:dc:fe:12:a6:2d:84:bc:58:db:0c:39:08:8a:
         cc:73:40:4e:a2:0d:2b:d4:67:32:33:44:b3:1b:a9:2b:5d:66:
         1d:1d:7c:1d:4d:cb:c9:c2:87:2f:ee:4b:d2:04:7c:3f:4a:a7:
         8e:60:81:77:76:28:c8:43:4a:c3:dd:1a:eb:70:b4:2b:99:8b:
         b7:6e:18:d3:21:4b:af:96:9c:cd:69:19:d6:c4:01:8a:94:22:
         95:fa:5a:a3:9f:88:fc:b3:b6:79:25:fe:d1:6f:4a:fd:1a:82:
         9a:52:3a:bc:53:89:85:18:eb:b3:bd:09:b8:4d:96:6b:13:eb:
         ac:cc:1d:0d:89:5c:8e:4a:fe:4a:d9:3a:18:ee:1f:3a:24:d6:
         8b:e9:67:16:f8:ab:55:a3:5a:7c:4e:4c:b2:71:5b:9e:95:2a:
         61:91:4f:7f:98:26:43:16:9e:6f:6f:fc:be:5a:90:58:43:e4:
         c2:ca:ed:3c:d5:3a:a6:da:f8:f9:47:2b:a4:1e:93:71:0c:fd:
         f5:2c:63:d9:3a:bd:ed:37:95:ca:75:fc:d8:c5:e1:bc:86:ae:
         88:98:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org