Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/34352e3138352e3231362e302f32332d3233203d3e20323639333934.roa
File:                     34352e3138352e3231362e302f32332d3233203d3e20323639333934.roa (raw, json)
Hash identifier:          3rz3yVMV3Up8jKXP7HtpE2bQRQ4bEZRnZcXq45kx0+A=
Subject key identifier:   0F:DD:14:C1:21:41:93:AD:8D:F2:4B:0D:84:7F:64:83:E9:42:85:5A
Certificate issuer:       /CN=23637A3ACBE3FC644CF6846D1612352C519DDA0A
Certificate serial:       0F0AED50C0F85692879B0A0D17928BD917C212C4
Authority key identifier: 23:63:7A:3A:CB:E3:FC:64:4C:F6:84:6D:16:12:35:2C:51:9D:DA:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/34352e3138352e3231362e302f32332d3233203d3e20323639333934.roa
Signing time:             Mon 30 Oct 2023 17:41:24 +0000
ROA not before:           Mon 30 Oct 2023 17:36:24 +0000
ROA not after:            Mon 28 Oct 2024 17:41:24 +0000
asID:                     269394
IP address blocks:        45.185.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0a:ed:50:c0:f8:56:92:87:9b:0a:0d:17:92:8b:d9:17:c2:12:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23637A3ACBE3FC644CF6846D1612352C519DDA0A
        Validity
            Not Before: Oct 30 17:36:24 2023 GMT
            Not After : Oct 28 17:41:24 2024 GMT
        Subject: CN=0FDD14C1214193AD8DF24B0D847F6483E942855A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:78:09:9c:3d:17:d2:4d:10:83:b8:5c:07:
                    77:11:b2:96:98:ce:0b:50:b1:01:25:4c:a8:c0:64:
                    a3:38:e1:76:22:a6:fd:63:4d:14:c0:13:04:e2:7b:
                    9f:60:13:29:32:4a:7a:8b:84:9c:c1:ce:e7:65:ab:
                    77:66:cc:b9:a3:3f:3c:be:2a:74:fe:13:ee:40:8d:
                    65:67:7b:90:cc:9e:0d:e7:70:60:34:a4:dd:d7:45:
                    e6:86:f5:9a:ba:8d:3a:5d:d8:9e:d9:c5:6d:42:6e:
                    64:c1:60:6d:ea:be:02:53:76:12:3b:4a:db:e5:9c:
                    72:c4:a8:8b:06:01:02:bb:ed:e7:f3:ff:b9:bd:4c:
                    ad:80:32:03:db:65:b9:be:56:6c:39:0d:17:82:ea:
                    d1:c9:95:fd:c4:d6:a8:a9:07:44:bd:58:82:7b:79:
                    91:6c:49:98:e2:fc:ca:e5:9f:34:54:54:8e:d2:5a:
                    aa:59:52:2e:d0:a1:38:01:56:fe:e0:4e:c7:9a:a6:
                    20:f0:17:da:2d:f1:47:34:6c:34:82:e1:c0:a8:18:
                    c0:80:fc:d9:ae:ff:b4:05:37:a1:40:cb:ac:3d:91:
                    2c:16:a4:12:c4:d3:7d:74:62:02:fa:7b:ae:de:9d:
                    bf:8e:8f:a1:41:99:a3:b1:0d:9a:ae:0e:d3:2c:aa:
                    6a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DD:14:C1:21:41:93:AD:8D:F2:4B:0D:84:7F:64:83:E9:42:85:5A
            X509v3 Authority Key Identifier:
                keyid:23:63:7A:3A:CB:E3:FC:64:4C:F6:84:6D:16:12:35:2C:51:9D:DA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/34352e3138352e3231362e302f32332d3233203d3e20323639333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:ae:4b:c8:60:c1:b8:cb:e2:d1:09:2b:23:7d:78:07:eb:63:
         73:54:7c:ca:7d:10:bf:77:f1:07:b3:6f:45:81:b5:28:92:8f:
         a7:3d:9d:ad:54:32:51:7f:c7:a7:e8:7b:99:d8:cb:a7:1a:26:
         7a:c7:82:7d:b3:46:2f:84:6a:f5:4e:16:2a:0d:a4:c9:ba:23:
         2b:fc:bb:10:bf:73:79:79:81:59:44:13:b2:f8:57:62:cd:75:
         88:94:57:68:f6:85:52:28:04:90:ef:3b:f3:11:b0:5b:93:6b:
         76:e0:54:19:a2:6f:ef:5c:28:9a:25:9b:19:ad:1e:b1:f5:00:
         41:7d:c3:f2:db:e7:40:e4:e1:fe:f8:24:96:bd:62:c9:c5:02:
         27:3d:cb:70:89:6d:6a:4e:77:d5:bc:9c:fd:ea:13:3f:4a:31:
         18:b0:cc:cc:b6:8d:ad:5a:77:6f:10:aa:8c:28:f7:50:ba:2b:
         f3:1a:f5:80:b6:64:31:2d:65:2d:ef:b0:ec:58:a0:84:ae:ce:
         50:78:a9:a9:e4:46:46:61:d8:bd:bf:eb:1e:20:33:a4:d8:f5:
         8e:ee:b9:4e:b9:00:ab:d8:27:0e:49:b5:f3:0b:a6:44:96:06:
         34:f2:85:af:3d:b5:14:85:fd:ae:86:0c:48:e3:9e:90:37:9c:
         79:36:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org