Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          dJYwRnjpGE6NpTAaXsqCl3g6CZSe3aixKhVOsA3lBa0=
Subject key identifier:   06:2D:3A:9C:C1:F6:42:21:3E:6A:C3:61:89:3F:34:1F:CF:82:F6:E4
Certificate issuer:       /CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
Certificate serial:       0B6488136891209507E7D3ABDD9185B3C3E6AC41
Authority key identifier: 87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa
Signing time:             Wed 20 Dec 2023 14:14:27 +0000
ROA not before:           Wed 20 Dec 2023 14:09:27 +0000
ROA not after:            Wed 18 Dec 2024 14:14:27 +0000
asID:                     262899
IP address blocks:        45.165.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:64:88:13:68:91:20:95:07:e7:d3:ab:dd:91:85:b3:c3:e6:ac:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
        Validity
            Not Before: Dec 20 14:09:27 2023 GMT
            Not After : Dec 18 14:14:27 2024 GMT
        Subject: CN=062D3A9CC1F642213E6AC361893F341FCF82F6E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:a4:cb:22:0e:7b:80:2b:0f:23:69:1b:d2:
                    2a:4d:0d:da:af:ff:c9:67:37:a0:e0:7c:78:9a:e6:
                    a4:63:58:27:fa:9c:2c:68:db:50:57:5f:8b:c6:36:
                    47:45:85:36:72:1a:d0:ad:d9:43:5f:33:dd:ae:ed:
                    4b:40:a9:6f:43:c5:e6:46:6e:19:18:38:62:27:de:
                    91:03:5f:9c:23:2d:1f:1f:b3:ff:af:61:b7:4d:24:
                    a5:e0:1e:26:ae:66:13:dc:62:a4:6a:fa:1c:ab:e6:
                    fe:d9:c3:c9:db:a1:1f:40:27:30:8b:68:32:9d:66:
                    3a:45:ce:b4:0b:13:fb:fc:39:40:29:00:87:3b:89:
                    8f:40:51:16:47:dc:fb:42:34:7d:f1:b1:73:ca:7f:
                    d4:58:f6:01:67:be:11:81:1d:1e:e3:71:68:2b:4e:
                    9e:ec:5e:19:6d:9b:3d:6c:dd:dd:fb:8e:68:cf:a9:
                    ff:46:e8:b0:ee:a2:ea:b6:6e:6f:eb:a5:14:94:cf:
                    2c:dc:d3:16:f0:76:b5:c0:3d:9a:0d:b0:25:15:74:
                    24:fb:ad:57:99:80:88:91:7d:83:f3:ff:2c:4a:9d:
                    1f:7e:3f:2e:2a:f1:a8:90:64:e3:58:70:a2:01:b3:
                    01:34:12:0b:15:49:cb:47:06:2c:f8:f6:58:b5:4b:
                    8a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2D:3A:9C:C1:F6:42:21:3E:6A:C3:61:89:3F:34:1F:CF:82:F6:E4
            X509v3 Authority Key Identifier:
                keyid:87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:d2:ea:f3:c3:90:4c:08:72:89:ec:80:31:cb:56:4f:6e:94:
         e7:8b:cc:f7:fa:6d:63:19:f4:f7:79:62:1c:6a:5b:3b:c3:1d:
         66:6e:9a:ad:45:0c:6f:cc:fd:6e:f6:0f:81:e1:78:0a:7e:f2:
         56:9f:de:0c:8e:08:a1:c6:65:01:2f:62:07:e6:7e:1d:8e:82:
         57:47:73:7c:2e:9b:82:84:29:bb:0d:10:83:5d:3e:fb:63:15:
         67:ff:3b:62:d0:4c:8f:b8:66:04:a8:dd:58:42:6c:ff:31:ed:
         eb:7b:01:63:fb:4b:2c:c5:f2:c7:5d:10:57:de:85:61:c4:b3:
         02:94:77:18:d0:c7:ce:0e:77:c1:54:f8:c4:74:20:39:e5:dd:
         a8:f5:e6:4a:4c:99:c1:a3:06:74:d4:5a:9d:96:7f:90:f7:fb:
         e6:34:b2:3a:c6:7e:7c:2f:be:ac:59:9e:0a:dc:96:f6:f6:c4:
         30:b2:df:9b:50:cc:83:5e:5d:a3:1a:02:cf:40:0a:10:4c:d6:
         64:fc:76:78:5a:d0:94:fe:4a:eb:36:1f:bf:a7:2f:d7:83:f6:
         b8:f7:02:09:b7:6d:15:7b:bc:29:7d:0b:b4:09:11:24:61:8c:
         51:f7:2a:58:87:28:e2:90:5c:96:4c:67:9c:f2:a1:d9:60:b6:
         aa:14:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org