Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3231312e302f32342d3234203d3e20323636323638.roa
File:                     34352e36352e3231312e302f32342d3234203d3e20323636323638.roa (raw, json)
Hash identifier:          42ru3tGp1lIzgfKEfxlJFfgqvc4T/83m0TxZJZn0/ms=
Subject key identifier:   96:C0:D8:C4:BF:06:4E:9E:B1:B9:DD:BD:DC:81:55:BC:E8:B4:EB:26
Certificate issuer:       /CN=FA48EF12356C5AD0E3D01AA17F6B30133FB7095D
Certificate serial:       34A227D63027FE6DC2031115DC453C16D0D16B20
Authority key identifier: FA:48:EF:12:35:6C:5A:D0:E3:D0:1A:A1:7F:6B:30:13:3F:B7:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA48EF12356C5AD0E3D01AA17F6B30133FB7095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3231312e302f32342d3234203d3e20323636323638.roa
Signing time:             Sun 11 Feb 2024 15:19:27 +0000
ROA not before:           Sun 11 Feb 2024 15:14:27 +0000
ROA not after:            Sun 09 Feb 2025 15:19:27 +0000
asID:                     266268
IP address blocks:        45.65.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a2:27:d6:30:27:fe:6d:c2:03:11:15:dc:45:3c:16:d0:d1:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA48EF12356C5AD0E3D01AA17F6B30133FB7095D
        Validity
            Not Before: Feb 11 15:14:27 2024 GMT
            Not After : Feb  9 15:19:27 2025 GMT
        Subject: CN=96C0D8C4BF064E9EB1B9DDBDDC8155BCE8B4EB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:93:f6:8c:a6:8e:3c:10:b9:fd:d5:2e:5b:
                    01:93:62:4c:2e:5f:8d:5e:49:b6:76:9d:98:9c:7f:
                    7f:51:5c:5a:1f:c4:fc:9b:a3:86:f7:78:d3:9f:e5:
                    5d:f8:a2:7f:01:73:ed:ac:2d:42:80:74:40:82:15:
                    7b:5e:f2:77:41:d9:68:49:4a:83:07:58:8a:9f:bb:
                    15:d9:2d:3d:6f:b3:29:f3:77:85:f6:8b:64:e4:a4:
                    ae:22:7d:5b:bc:57:4d:3d:d5:2d:79:0c:a5:db:4e:
                    de:92:5c:8f:58:89:be:9d:97:4e:c8:16:28:e7:41:
                    3b:54:d6:de:34:13:9b:64:36:1b:bf:90:66:69:25:
                    2c:41:39:cd:f1:35:7d:fe:04:c6:f8:fb:cf:c2:3b:
                    df:df:66:24:aa:5e:84:0b:bd:95:75:c4:9e:b4:be:
                    a6:fe:b5:b3:4c:c4:e3:ba:c0:ca:af:d8:51:b8:85:
                    b9:c5:ae:20:c0:a5:ac:42:28:e2:88:14:41:4a:85:
                    5d:48:d4:19:7e:3f:b4:8d:41:05:d2:ae:74:88:63:
                    95:1d:c8:69:79:ef:c3:20:0a:d8:99:28:3b:f0:44:
                    a2:4f:81:b3:44:1d:3a:9f:a1:a2:bb:bd:61:48:52:
                    79:47:9f:da:01:ca:8a:17:ef:e8:3a:ef:5e:d3:e9:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C0:D8:C4:BF:06:4E:9E:B1:B9:DD:BD:DC:81:55:BC:E8:B4:EB:26
            X509v3 Authority Key Identifier:
                keyid:FA:48:EF:12:35:6C:5A:D0:E3:D0:1A:A1:7F:6B:30:13:3F:B7:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/FA48EF12356C5AD0E3D01AA17F6B30133FB7095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA48EF12356C5AD0E3D01AA17F6B30133FB7095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/34352e36352e3231312e302f32342d3234203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:05:5f:a9:21:9b:d8:5d:27:ab:78:51:67:14:e9:dc:32:
         74:79:9c:56:b7:21:c2:5d:cd:d7:d8:5f:c3:37:0b:b2:81:a5:
         4d:9b:e4:54:81:db:1c:4f:6d:38:8e:ac:8e:f1:c5:2d:6a:bf:
         5c:de:59:21:43:a3:08:c7:ee:a0:f4:f8:67:ca:e2:2c:da:5a:
         39:35:f8:75:07:f0:8e:6b:60:89:5a:ec:f2:ae:b7:a1:25:c3:
         ff:7b:85:0a:92:b8:80:65:0d:d6:91:96:be:75:bf:f0:d9:a2:
         b1:14:0c:b4:6c:ea:dd:ff:bc:d1:f3:e2:b2:b8:a6:b9:76:3d:
         35:5b:09:31:19:9c:ad:09:74:e2:35:5f:36:9b:38:ff:f5:c0:
         cc:86:ff:35:0f:b6:3d:bd:15:6b:9b:f2:bf:29:b4:1e:db:07:
         40:de:5d:b1:2c:1c:5c:cc:63:a6:98:69:ce:78:cb:fc:1a:0b:
         7b:a5:54:8b:73:3a:8a:36:fb:42:95:8c:e5:22:b2:64:7c:9f:
         b8:80:7c:86:78:4b:0f:01:72:c9:61:1b:52:ec:be:87:c4:57:
         11:41:9e:ba:5e:b1:75:bf:c5:75:68:5d:9a:f1:0c:67:d3:1b:
         9c:15:ad:90:cf:cc:2c:c0:4e:a2:6c:ff:0e:5c:76:67:1c:1c:
         3e:06:f7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org