Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa
File:                     34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa (raw, json)
Hash identifier:          iHqlZwVtEX6z+w1wZaZ/HDJWcBRNvulwlkUCuEz9uOc=
Subject key identifier:   A7:F8:56:BC:AF:AE:BE:C9:F0:FE:13:0D:9C:37:4D:99:69:52:9D:A8
Certificate issuer:       /CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
Certificate serial:       4E67CA95860EE3EEED09D35B56581C412BCE5A19
Authority key identifier: 87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa
Signing time:             Wed 20 Dec 2023 14:14:27 +0000
ROA not before:           Wed 20 Dec 2023 14:09:27 +0000
ROA not after:            Wed 18 Dec 2024 14:14:27 +0000
asID:                     262899
IP address blocks:        45.165.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:67:ca:95:86:0e:e3:ee:ed:09:d3:5b:56:58:1c:41:2b:ce:5a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
        Validity
            Not Before: Dec 20 14:09:27 2023 GMT
            Not After : Dec 18 14:14:27 2024 GMT
        Subject: CN=A7F856BCAFAEBEC9F0FE130D9C374D9969529DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:e9:b9:1d:f3:3e:8c:05:ec:80:43:28:0e:
                    6d:6a:b7:12:57:08:3b:88:f8:74:85:e3:9e:09:7b:
                    1d:91:c7:1c:61:e9:db:42:7f:b1:7b:40:36:f8:de:
                    e2:b6:a4:03:b9:32:e7:3a:8a:08:1d:2c:46:2a:b6:
                    08:5a:15:f3:e5:4c:c3:07:47:1f:f5:0c:81:f3:c3:
                    39:b6:d7:54:c6:a1:69:58:80:7b:ed:fd:26:9e:f8:
                    47:48:86:2d:1a:e6:ae:e7:3f:2b:26:49:ad:f1:40:
                    b8:d2:da:01:1a:48:39:66:8d:a3:6b:b3:7b:fd:24:
                    74:6a:a5:83:e8:89:08:43:64:b5:07:a6:0a:b1:f2:
                    ed:cf:5c:d9:1e:cb:eb:78:82:42:48:07:e6:2e:bc:
                    ad:73:e8:f9:a2:13:43:b2:81:0f:1d:37:8e:49:35:
                    1b:41:eb:72:3d:cf:ce:55:dd:04:de:d7:ae:45:1c:
                    54:6f:90:b8:03:80:44:77:3f:50:53:4a:8f:65:e1:
                    ff:31:09:e8:16:41:82:82:23:f9:fa:10:2b:03:57:
                    3d:ff:08:8a:36:7b:a9:6b:f5:7a:60:9f:85:c0:ca:
                    76:cf:99:ff:56:e3:9a:aa:b5:2b:1a:8e:1d:d8:c9:
                    5e:62:47:bb:cb:f1:56:fb:4c:0d:19:f7:a9:77:fd:
                    b9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F8:56:BC:AF:AE:BE:C9:F0:FE:13:0D:9C:37:4D:99:69:52:9D:A8
            X509v3 Authority Key Identifier:
                keyid:87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:a1:01:42:c0:c9:93:ac:b8:8f:00:a9:7a:0e:89:b9:b2:8c:
         20:17:c1:25:74:72:4b:ca:62:86:14:c1:e3:a4:42:2f:03:5a:
         90:e1:cd:14:cc:78:20:b3:80:62:97:dd:d3:01:f2:5b:5c:3c:
         49:73:c9:db:41:87:23:59:06:5e:c9:8e:94:75:a0:e9:04:6a:
         25:66:fb:cb:55:88:e8:64:c0:3b:df:04:96:bb:c5:dc:d8:21:
         ba:56:8f:d7:1b:7e:bf:bc:1a:4e:8b:89:08:8c:64:d6:77:71:
         cd:de:18:8c:ea:25:f3:84:fe:71:3f:6c:83:0e:ed:eb:d7:8f:
         fd:1e:2b:91:23:44:a6:f1:d4:15:45:57:8f:6b:8a:6c:97:28:
         08:3c:64:22:42:b1:5c:d6:08:32:7e:c2:2c:b7:26:32:26:82:
         9c:49:65:12:0d:57:4f:25:14:5a:c4:c9:47:42:5a:d5:25:a1:
         1a:a5:51:6c:37:39:ae:fe:40:c2:de:2e:17:43:b1:db:52:70:
         2b:99:fc:1f:1d:92:1a:d8:94:1d:9d:5a:ee:7d:8c:e2:2d:ec:
         71:ca:3f:8d:9a:9a:e7:4c:55:13:ae:10:7f:a4:20:0e:87:7a:
         6f:48:7a:70:2f:f4:ae:66:21:54:d2:37:c0:0e:e1:c8:33:07:
         76:d2:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org