Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3232382e302f32342d3234203d3e20323632363137.roa
File:                     34352e36352e3232382e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          qeXpzwPe1cX95DqDQjIMn178RROslTH9jzO6/ihhomY=
Subject key identifier:   7D:7A:DF:94:8D:C0:5D:D7:AD:F4:32:B4:8D:84:D6:50:66:AF:0E:8D
Certificate issuer:       /CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
Certificate serial:       79FA76CDB8895C3BBEABAAA09DA76518FB8D7A37
Authority key identifier: 03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3232382e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:12:25 +0000
ROA not before:           Thu 03 Aug 2023 13:07:25 +0000
ROA not after:            Thu 01 Aug 2024 13:12:25 +0000
asID:                     262617
IP address blocks:        45.65.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fa:76:cd:b8:89:5c:3b:be:ab:aa:a0:9d:a7:65:18:fb:8d:7a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
        Validity
            Not Before: Aug  3 13:07:25 2023 GMT
            Not After : Aug  1 13:12:25 2024 GMT
        Subject: CN=7D7ADF948DC05DD7ADF432B48D84D65066AF0E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:ad:f0:0a:a5:24:5d:1c:c2:66:7a:9d:1a:
                    cb:3b:37:7a:52:93:48:24:95:34:88:53:a0:4b:b2:
                    11:2d:f7:d2:4a:f1:ab:f6:6d:5c:1f:28:8d:38:de:
                    fa:67:58:93:54:c2:e3:86:60:8f:de:54:0b:8d:00:
                    77:40:eb:03:12:03:19:5e:47:ab:54:18:17:a1:96:
                    b4:84:ef:2e:26:50:4b:77:51:e6:43:0b:9c:d8:55:
                    b8:af:c0:56:da:f8:61:50:1e:94:b6:72:13:c7:ef:
                    e3:44:62:36:94:5d:0b:4e:58:ca:ca:83:28:2d:12:
                    2e:ba:b8:16:d6:0e:66:6b:6e:b3:e3:02:71:0a:9a:
                    24:df:87:d5:e6:8d:9c:a0:07:8e:d5:e2:17:cb:7f:
                    b3:10:54:28:71:15:29:74:69:90:53:f9:1a:ab:2e:
                    bf:63:d4:a4:35:55:c9:5a:e0:4a:85:83:88:ff:2b:
                    88:ae:40:db:26:b3:c4:4c:ed:96:66:fc:44:d0:65:
                    be:75:4f:8d:43:89:84:71:4e:78:2c:02:a3:cf:56:
                    99:a8:74:c1:e7:66:9b:32:57:43:ce:0f:15:de:d7:
                    b0:bf:d8:cc:e5:98:f8:09:04:32:19:21:2e:2b:68:
                    77:6a:34:16:cb:88:59:f1:cb:bb:b3:97:d1:49:5f:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7A:DF:94:8D:C0:5D:D7:AD:F4:32:B4:8D:84:D6:50:66:AF:0E:8D
            X509v3 Authority Key Identifier:
                keyid:03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3232382e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:ed:30:73:79:ed:5f:9a:59:da:d9:8e:d9:e4:90:8c:a3:
         e3:d0:cc:aa:ff:6e:52:c9:9f:df:f2:dc:61:e3:32:41:5e:62:
         27:47:60:8d:25:d3:28:ee:ae:3b:67:91:34:4d:3f:b6:fa:6e:
         b9:07:38:3a:b9:4c:81:56:5f:01:64:7f:ce:a4:eb:14:36:d4:
         19:2e:7c:84:77:18:2b:79:39:19:22:70:eb:fa:73:e3:1d:e3:
         c1:53:08:95:d9:d6:7b:4f:25:38:4c:1e:d5:fd:5f:67:db:97:
         92:f3:92:c1:a8:33:ec:7a:41:73:c8:c0:6c:ce:3c:b7:75:ce:
         b4:29:19:b1:c3:14:13:d1:50:89:6a:ba:8d:b4:8e:e0:20:ef:
         f8:e8:85:02:1b:ea:e3:ee:68:d0:5a:54:df:49:17:2d:26:e8:
         d9:b1:3a:c7:f1:44:13:f4:b4:e9:d8:ea:df:a3:20:0c:93:d9:
         7a:ea:95:d8:c0:d0:6e:ed:77:9c:78:87:55:fe:e2:b6:4c:25:
         53:96:e9:fe:be:7f:b1:cb:3b:88:d6:8e:7f:35:b2:45:95:97:
         d0:9d:75:0e:2e:5f:1d:94:0b:a9:d4:38:4d:a0:66:d2:c3:8b:
         77:49:48:cb:7f:4b:f9:12:cd:9e:2e:10:41:f2:92:06:d2:03:
         1d:63:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org