Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          WysUaHXA5XJ1x/p1XQwNQtTHr/3gUtp7pFpHhEknyPY=
Subject key identifier:   6A:82:04:0C:99:4A:97:B8:F2:CB:8B:D6:8E:BE:0F:78:E2:D7:0B:2F
Certificate issuer:       /CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
Certificate serial:       656C8B4897464D7C854578DD10CBBCB814713A03
Authority key identifier: 87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa
Signing time:             Wed 20 Dec 2023 14:14:27 +0000
ROA not before:           Wed 20 Dec 2023 14:09:27 +0000
ROA not after:            Wed 18 Dec 2024 14:14:27 +0000
asID:                     262899
IP address blocks:        45.165.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6c:8b:48:97:46:4d:7c:85:45:78:dd:10:cb:bc:b8:14:71:3a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
        Validity
            Not Before: Dec 20 14:09:27 2023 GMT
            Not After : Dec 18 14:14:27 2024 GMT
        Subject: CN=6A82040C994A97B8F2CB8BD68EBE0F78E2D70B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2e:14:79:4b:f3:65:1b:e5:52:bf:93:9e:26:
                    56:85:c9:18:47:c7:29:89:26:53:08:18:d3:d8:41:
                    51:e2:1d:d7:71:c2:e1:c6:b1:21:85:ec:1a:a4:2f:
                    c7:94:ef:6b:27:74:dd:94:92:2f:b7:07:e2:06:30:
                    dc:1d:91:75:28:72:6d:46:e1:26:ec:5b:9f:21:ff:
                    29:94:bb:45:55:0d:d0:10:93:8d:ba:35:01:c6:87:
                    60:1e:86:18:c4:15:24:17:67:c0:f8:3f:d2:d0:f3:
                    5a:7d:68:88:68:fe:5e:dc:59:d9:70:6f:fb:6a:19:
                    1c:e2:f3:fc:1a:bb:62:a2:62:19:7c:5b:87:8b:70:
                    aa:24:ec:12:df:e2:bf:07:08:c3:07:a5:90:b1:3e:
                    ba:d7:5a:6e:82:b0:a5:1a:f5:14:6f:fa:c6:55:ba:
                    4b:72:25:e6:ff:17:ea:00:7e:9d:8f:50:3e:7b:a0:
                    05:9d:92:2f:a3:e3:4a:36:79:bb:94:45:86:3a:c8:
                    cc:e2:6f:d6:e2:f2:76:6b:7b:34:72:3d:b2:04:dd:
                    53:13:ad:78:4a:75:60:e1:c3:8a:6d:53:63:f5:8e:
                    e2:db:55:4e:d7:15:88:14:d4:39:04:4e:f0:23:0c:
                    05:81:7c:10:83:0e:37:20:8a:a3:e3:4c:50:4c:29:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:04:0C:99:4A:97:B8:F2:CB:8B:D6:8E:BE:0F:78:E2:D7:0B:2F
            X509v3 Authority Key Identifier:
                keyid:87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:f2:a8:ca:e3:b0:b6:a3:ca:0f:65:42:24:47:33:e2:a6:
         1c:84:af:b0:d6:12:80:ef:ef:23:a2:56:ec:4a:71:b0:9c:d9:
         93:03:ad:d7:e7:20:0c:96:cf:20:ad:91:8f:a6:33:9a:da:7d:
         2a:e8:76:11:3c:7f:f5:0a:1c:ea:0e:41:19:b4:df:8f:b9:20:
         99:9b:5c:37:6a:f0:82:2f:f6:17:35:dc:c3:27:f5:c1:8a:5a:
         f9:d3:1d:2d:a8:64:e7:61:bc:13:35:c5:15:45:70:ce:df:57:
         21:0b:46:40:bc:7b:64:2e:eb:46:f2:a2:36:8e:60:8e:f0:73:
         ca:9a:9d:03:c9:89:fb:a2:b7:c5:8e:fe:7c:8c:a2:95:ae:c2:
         4f:32:b0:f7:08:4a:2f:04:fd:f0:92:92:63:a4:b5:4b:de:5c:
         12:8b:01:e7:27:74:02:63:b3:59:dd:04:0b:6d:c7:2e:98:9d:
         09:73:21:7e:15:de:c0:fa:a7:36:c0:d0:ff:cf:60:c5:e2:49:
         c4:0b:47:37:d2:7d:8e:80:fc:6f:13:50:96:d8:0d:1e:a1:1c:
         3f:d1:12:bc:db:10:58:7d:dd:16:3c:39:4f:b6:d0:fa:d5:3c:
         8c:68:21:ea:c9:10:68:53:2a:a7:a7:7f:69:bf:2e:6e:69:f0:
         c1:d8:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org