Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa
File:                     34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa (raw, json)
Hash identifier:          +0YZleYrijIfbgNEYxDkgTBiMLLaNJi7dc0Vhp0hLhk=
Subject key identifier:   E2:F5:04:A9:1E:72:00:1E:CB:17:73:A7:A4:72:46:C5:6A:EC:21:CC
Certificate issuer:       /CN=BBFE20962257408769607F1ABD1CADD22ED820AB
Certificate serial:       64C19E3B584C95DCD6E6556950BC26BA6FF4BD0C
Authority key identifier: BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBFE20962257408769607F1ABD1CADD22ED820AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa
Signing time:             Tue 05 Dec 2023 20:02:58 +0000
ROA not before:           Tue 05 Dec 2023 19:57:58 +0000
ROA not after:            Tue 03 Dec 2024 20:02:58 +0000
asID:                     269282
IP address blocks:        45.183.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c1:9e:3b:58:4c:95:dc:d6:e6:55:69:50:bc:26:ba:6f:f4:bd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBFE20962257408769607F1ABD1CADD22ED820AB
        Validity
            Not Before: Dec  5 19:57:58 2023 GMT
            Not After : Dec  3 20:02:58 2024 GMT
        Subject: CN=E2F504A91E72001ECB1773A7A47246C56AEC21CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:d2:3d:64:2a:bb:98:1f:5e:1b:c0:a4:9e:
                    7a:2c:6e:61:87:af:d9:d9:ae:fc:db:e5:af:0c:34:
                    0c:41:6e:d4:20:6f:c2:0a:f8:4e:35:a6:97:68:ee:
                    f9:14:12:58:8d:a6:be:00:75:5c:f3:eb:5a:41:76:
                    a8:dd:a8:45:cf:67:75:9d:c8:a8:fc:6e:81:bd:29:
                    b2:ed:9e:21:1b:69:27:77:8f:d9:c9:f5:46:30:d8:
                    89:c3:60:ee:0a:16:2e:5c:9a:0a:7b:33:c1:66:a0:
                    bf:1c:aa:8e:a3:20:02:2a:50:62:1a:0a:71:e0:7f:
                    dc:8f:7f:80:e7:d2:8e:96:c3:69:3f:f3:20:ef:3a:
                    c3:ce:d7:9b:69:57:5b:5e:78:39:ee:35:42:b7:af:
                    7a:c1:fc:4e:8d:7f:50:bc:44:31:96:98:c0:e4:7c:
                    81:3d:65:87:af:de:f8:c4:e2:52:98:6b:18:7a:ce:
                    c2:a6:61:ea:69:1b:d0:20:bd:d3:31:9d:46:63:97:
                    08:16:cb:ab:f5:2c:08:f5:36:d1:5f:f7:91:3a:d5:
                    8c:af:2d:23:4e:e7:13:89:09:93:3a:f5:af:19:45:
                    df:c1:34:c5:dc:19:7a:65:d9:84:76:38:ae:2c:9b:
                    86:e4:7b:69:de:85:47:03:1a:b4:b3:c3:8b:3c:d2:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:04:A9:1E:72:00:1E:CB:17:73:A7:A4:72:46:C5:6A:EC:21:CC
            X509v3 Authority Key Identifier:
                keyid:BB:FE:20:96:22:57:40:87:69:60:7F:1A:BD:1C:AD:D2:2E:D8:20:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/BBFE20962257408769607F1ABD1CADD22ED820AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBFE20962257408769607F1ABD1CADD22ED820AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xn7yf9mLCo3smP9hdHZCHLrfSQKmyhAzaNTpgmZPL37/0/34352e3138332e3133352e302f32342d3234203d3e20323639323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:85:12:5c:98:5c:35:ec:6e:54:82:f0:95:af:91:b9:79:7e:
         ec:c1:e7:35:eb:e9:0a:5a:0d:32:fd:a8:f6:1f:bd:e9:63:48:
         b6:9b:14:31:af:1b:8a:6f:c8:0e:e9:e5:4e:0b:64:dd:a2:b6:
         47:3b:bf:0f:f8:99:0d:18:a0:19:66:dc:94:8a:c6:97:06:41:
         2a:4f:0e:bc:b6:97:c1:e5:37:6a:e6:21:fc:7a:5b:fd:b6:c2:
         92:52:51:56:34:e8:6d:1c:60:c4:30:51:67:4d:e1:39:67:83:
         4e:1b:48:a7:a4:57:d9:35:ed:08:73:59:a8:dc:d7:74:cd:40:
         d1:f4:58:4c:b2:9f:30:8a:89:c6:cc:eb:09:10:a5:26:e3:3c:
         63:57:93:d7:98:11:ee:6d:4e:b2:6d:56:77:12:e9:4d:b3:20:
         b3:57:e6:3d:fc:79:35:89:fb:61:be:98:26:15:7a:52:54:0d:
         46:30:38:08:97:0f:55:e9:6b:90:7d:81:b7:ed:23:76:22:6f:
         5a:d6:6e:40:a8:c6:74:99:c9:6f:d2:3d:af:3c:4b:8e:01:ec:
         19:57:ff:41:69:8f:a6:95:ab:c1:e6:2e:f8:e0:f5:3d:ff:32:
         e7:bf:6e:55:df:dd:8b:ca:b8:3f:ba:ed:86:e1:20:6c:25:e4:
         11:ba:bd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org