Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa
File:                     34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa (raw, json)
Hash identifier:          H1+RoDmhmb3L2H5NmcikoYYTo0abXoMc/GnD+93h5vw=
Subject key identifier:   2F:AE:D4:BC:2B:71:C3:F4:97:CE:FF:4E:D4:E4:84:E4:8B:D7:EE:70
Certificate issuer:       /CN=BBFE20962257408769607F1ABD1CADD22ED820AB
Certificate serial:       1CDFF323E9EFDC46A8CFD708D7CBBE3E014FDBC1
Authority key identifier: BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBFE20962257408769607F1ABD1CADD22ED820AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa
Signing time:             Tue 05 Dec 2023 20:02:51 +0000
ROA not before:           Tue 05 Dec 2023 19:57:51 +0000
ROA not after:            Tue 03 Dec 2024 20:02:51 +0000
asID:                     269282
IP address blocks:        45.183.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:df:f3:23:e9:ef:dc:46:a8:cf:d7:08:d7:cb:be:3e:01:4f:db:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBFE20962257408769607F1ABD1CADD22ED820AB
        Validity
            Not Before: Dec  5 19:57:51 2023 GMT
            Not After : Dec  3 20:02:51 2024 GMT
        Subject: CN=2FAED4BC2B71C3F497CEFF4ED4E484E48BD7EE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:6e:81:97:35:c4:02:cb:4d:14:32:2c:d2:
                    0b:32:2d:be:db:30:5c:e9:59:c9:fa:f1:2c:6c:e1:
                    20:fd:66:65:95:d6:97:8c:24:99:da:23:06:b0:0b:
                    c1:66:c8:7f:0b:82:d6:3c:76:af:f6:39:12:2c:15:
                    68:f6:e2:07:cc:9f:f4:82:94:e7:4d:37:21:68:c5:
                    0f:50:5a:d5:22:96:fa:80:5b:7e:31:c5:11:c0:c5:
                    49:2a:27:0c:0f:d8:08:a8:1e:2b:da:fd:17:e4:92:
                    e2:18:33:23:ac:cd:81:ce:52:c4:f4:9a:ab:a8:72:
                    00:d1:0f:35:10:a2:18:fa:3f:f1:61:29:73:e4:b3:
                    a7:53:df:f5:e5:bb:83:05:6c:96:d2:02:83:d1:0a:
                    5d:69:8d:ab:aa:f1:7d:cf:99:86:c0:31:ab:4a:34:
                    13:fd:e6:35:b1:b1:4e:42:8d:3e:f5:16:53:2c:7b:
                    d0:3a:2f:4f:66:85:55:3a:70:ec:7b:24:ee:f7:71:
                    1d:c4:91:da:21:d9:1f:13:64:25:9f:7c:fc:db:27:
                    ab:d1:fe:7f:9d:d6:e2:3e:59:9e:35:46:0a:ba:aa:
                    94:0c:d1:6a:57:de:97:29:2a:4d:ef:b5:e1:ae:a2:
                    a5:a3:58:5a:4a:e2:78:54:12:4c:3d:3f:92:47:e6:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AE:D4:BC:2B:71:C3:F4:97:CE:FF:4E:D4:E4:84:E4:8B:D7:EE:70
            X509v3 Authority Key Identifier:
                keyid:BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/BBFE20962257408769607F1ABD1CADD22ED820AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBFE20962257408769607F1ABD1CADD22ED820AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133342e302f32342d3234203d3e20323639323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:df:d7:b7:ca:8b:29:72:d6:4f:66:4d:4d:e7:1d:d3:22:
         12:60:ad:71:8c:c5:6d:4c:ee:e9:8c:6d:59:48:b8:e4:06:c8:
         39:de:c1:0a:07:bd:10:c4:3f:31:a0:da:1f:f2:6f:3e:9b:d1:
         8b:d4:b7:1e:60:41:fe:81:55:83:07:db:f2:63:ea:f4:95:25:
         b5:8d:79:7a:4f:a5:1e:27:dc:93:ea:cd:d4:e8:0a:e8:a8:cb:
         d2:d2:5e:e6:44:45:dc:c0:43:ce:3b:f9:3b:0c:00:36:87:32:
         6e:21:71:87:8b:71:fd:7c:bd:63:fe:8b:f7:f9:86:dd:f5:56:
         f3:be:fa:51:8e:6a:51:b7:be:4b:e7:53:16:30:cc:03:c5:72:
         20:7f:cf:e7:31:1a:03:9b:d8:39:99:12:6c:61:4d:8c:a9:0c:
         33:fb:1c:16:af:2b:c7:a0:fd:ab:7c:6e:31:52:62:3d:0c:7a:
         3e:c4:5e:4b:64:8b:10:60:1c:7c:4d:56:f1:6f:be:31:f5:9f:
         b8:df:42:8b:39:5f:d2:0b:c9:2a:f0:ab:ea:a7:a3:3d:8a:20:
         71:2f:8d:b6:06:0c:f4:88:df:7b:72:3d:b3:5d:27:71:a7:0a:
         43:cd:c5:4c:40:3b:62:f6:36:ad:6d:c1:5b:64:49:e7:36:5d:
         14:b5:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org