Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          bracTHcQiGH7kEAeCE59twepKxMjq8YlzM/dxAusoo0=
Subject key identifier:   33:DC:6E:76:85:7F:FC:71:F3:1D:3F:FE:D8:08:07:E2:78:9A:C1:A8
Certificate issuer:       /CN=4C3458A01AC950A9DE1A8367C6F3E96BAF09B332
Certificate serial:       5E2B3501CF60BF03F852CFF38E14EDB27187EEB7
Authority key identifier: 4C:34:58:A0:1A:C9:50:A9:DE:1A:83:67:C6:F3:E9:6B:AF:09:B3:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
Signing time:             Mon 04 Dec 2023 21:49:37 +0000
ROA not before:           Mon 04 Dec 2023 21:44:37 +0000
ROA not after:            Mon 02 Dec 2024 21:49:37 +0000
asID:                     262899
IP address blocks:        45.165.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2b:35:01:cf:60:bf:03:f8:52:cf:f3:8e:14:ed:b2:71:87:ee:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3458A01AC950A9DE1A8367C6F3E96BAF09B332
        Validity
            Not Before: Dec  4 21:44:37 2023 GMT
            Not After : Dec  2 21:49:37 2024 GMT
        Subject: CN=33DC6E76857FFC71F31D3FFED80807E2789AC1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:8b:41:6a:9d:94:5e:39:9d:47:a5:58:f9:
                    91:fb:cb:cb:da:af:e1:41:8c:3f:ce:f0:92:93:5c:
                    d3:3b:f2:89:81:c1:d6:3e:97:96:2c:da:4e:49:d5:
                    92:0d:65:58:00:7c:f0:07:a7:c9:3e:5e:fd:c8:ae:
                    cf:48:b1:70:44:6e:c8:b0:12:fd:6b:78:95:fe:ff:
                    6d:53:79:d3:94:b1:03:7f:dd:a1:c7:e1:32:18:d3:
                    c7:0d:eb:5b:e9:70:0d:b8:34:db:7c:af:4f:20:40:
                    ff:bd:71:94:2d:13:44:7c:13:27:94:c4:a7:fe:62:
                    da:5b:ca:6c:e0:38:e7:26:91:0e:59:69:9b:67:d8:
                    bd:a6:f7:33:fa:0c:57:21:df:ba:12:3f:65:b2:21:
                    3d:54:c2:6c:78:c1:f1:68:70:3d:93:8c:ac:7d:48:
                    1c:9b:0f:2d:e7:ea:3e:7d:12:3e:51:dc:81:17:60:
                    63:9f:ca:60:2e:db:c9:43:5a:38:7e:7c:28:cd:c1:
                    d1:15:1e:b5:55:78:5e:f1:17:76:5f:66:1c:5c:0e:
                    77:7c:50:61:8b:35:82:f0:d1:81:e4:a9:3b:e9:27:
                    ed:85:48:62:cb:1a:60:5b:e9:fa:64:7c:29:50:c3:
                    40:c1:45:d7:8c:1d:d4:ca:84:17:a2:06:ee:7e:fb:
                    2b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:6E:76:85:7F:FC:71:F3:1D:3F:FE:D8:08:07:E2:78:9A:C1:A8
            X509v3 Authority Key Identifier:
                keyid:4C:34:58:A0:1A:C9:50:A9:DE:1A:83:67:C6:F3:E9:6B:AF:09:B3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3458A01AC950A9DE1A8367C6F3E96BAF09B332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:bb:84:02:1b:3c:31:3c:80:45:c8:4c:a8:1d:8a:33:d5:29:
         42:c9:4c:93:1c:96:a4:14:f9:61:8f:59:19:91:a1:df:df:1f:
         db:f7:82:e5:b5:53:d5:04:25:72:a4:86:b6:f6:4e:8f:23:86:
         53:fd:45:58:8b:e8:a2:17:ac:33:a5:60:5a:16:86:65:34:e8:
         d7:99:5a:a1:64:2c:ce:01:19:5f:17:33:58:20:7f:23:41:69:
         64:95:a1:55:44:b7:73:68:7e:be:e2:58:c1:f6:2d:11:13:90:
         ad:6c:8d:4b:3c:b4:07:10:c8:20:d2:65:f9:36:db:54:5d:6c:
         6a:25:a5:f1:d4:cf:b0:f3:cf:7c:33:2e:78:78:85:8d:26:1e:
         f6:3a:05:fd:e1:6c:bd:fe:f0:89:79:35:2b:cf:1d:82:b2:85:
         87:07:7b:d9:4d:a3:d6:34:e6:58:dc:52:88:c5:d5:88:67:a8:
         9e:18:75:35:92:a0:d4:e7:bf:85:87:b7:b6:bd:6e:ef:66:48:
         e2:6f:0f:75:e7:eb:04:6f:30:aa:8b:1e:04:6f:87:86:9d:1f:
         c6:3a:f8:08:ae:86:6a:07:ae:55:de:37:9d:1f:26:bc:87:42:
         a3:0c:b1:e4:a4:d7:90:d2:20:50:85:84:25:a1:bd:95:a5:87:
         ca:7b:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org