Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3233302e302f32342d3234203d3e20323632363137.roa
File:                     34352e36352e3233302e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          6uJBlHLDrmlyhJib5eGn4V/wMzBM5Io0E+Tg3JTR3I8=
Subject key identifier:   26:69:88:90:F2:3E:40:D9:87:B1:B4:46:2B:0B:33:E8:A2:70:EC:61
Certificate issuer:       /CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
Certificate serial:       75495B4C1F282631D428AA070E76A9BA34E68A09
Authority key identifier: 03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3233302e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:12:28 +0000
ROA not before:           Thu 03 Aug 2023 13:07:28 +0000
ROA not after:            Thu 01 Aug 2024 13:12:28 +0000
asID:                     262617
IP address blocks:        45.65.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:49:5b:4c:1f:28:26:31:d4:28:aa:07:0e:76:a9:ba:34:e6:8a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
        Validity
            Not Before: Aug  3 13:07:28 2023 GMT
            Not After : Aug  1 13:12:28 2024 GMT
        Subject: CN=26698890F23E40D987B1B4462B0B33E8A270EC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:c5:2d:cf:19:9d:4f:87:fa:30:13:45:43:
                    d2:ba:6b:02:3e:54:df:ad:21:38:ae:f2:55:ba:11:
                    ae:da:5a:f1:11:d1:3d:f1:f2:f5:61:2f:ff:54:41:
                    95:80:09:54:09:6d:17:ea:46:17:d1:60:ba:1b:21:
                    24:6e:f0:77:5c:61:53:72:99:fd:16:f4:9a:50:f8:
                    3c:a9:a7:4b:62:f0:2e:8e:22:a6:ef:47:60:e4:53:
                    ef:9b:06:82:dd:ed:77:b7:57:d0:2f:ca:a1:3d:1c:
                    17:f5:17:54:b7:ed:be:ae:44:61:3d:14:8e:7c:90:
                    10:69:9b:a4:f2:7a:9a:40:2c:9e:65:f6:10:43:94:
                    2b:11:bd:04:e4:8b:b0:79:3d:9a:f6:41:86:3e:65:
                    12:67:cc:e9:1f:5e:27:5f:c9:05:59:8e:a5:4f:b1:
                    87:28:07:3f:20:8e:1b:ee:57:fe:56:57:14:82:76:
                    af:13:ce:79:41:b0:bc:45:2a:e4:4e:63:c4:ee:fe:
                    45:bd:a1:50:f7:f4:aa:68:6d:c9:b0:f9:ef:1c:f2:
                    68:e7:a1:0e:29:a1:be:f5:26:14:e8:83:b2:42:55:
                    c3:d5:83:f2:10:c0:d3:18:d6:5a:24:d3:1f:24:91:
                    1a:e6:58:1d:37:bc:58:43:99:27:5b:ce:87:25:4f:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:69:88:90:F2:3E:40:D9:87:B1:B4:46:2B:0B:33:E8:A2:70:EC:61
            X509v3 Authority Key Identifier:
                keyid:03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3233302e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:c1:f9:12:ec:86:67:12:e4:62:d5:3e:a2:b9:d6:d6:c7:64:
         2e:52:99:90:60:8d:1d:58:9a:26:aa:06:9b:e1:bf:c8:41:ae:
         95:bf:fe:59:a3:3e:3b:6a:f4:2a:67:7b:11:af:2e:fc:23:76:
         c3:f7:3b:d4:8c:bd:05:bd:c7:66:0b:a7:f4:cf:28:88:52:a0:
         2e:6f:1a:64:3e:0b:9d:ac:c0:73:c3:5d:2e:40:00:97:58:4b:
         37:4d:73:89:4e:5d:00:09:19:33:50:5f:b8:de:42:38:19:e8:
         0d:c9:09:60:bb:88:da:5b:24:20:d3:b3:ec:14:ce:95:f0:f1:
         f1:b7:05:59:b8:8b:c6:89:0f:aa:08:be:b7:fc:6b:ad:e8:0c:
         e4:af:93:e9:50:f1:e4:f8:b2:f8:ae:d3:88:dd:d7:44:32:56:
         a3:75:7d:bd:78:94:46:e3:f6:14:5e:68:82:bf:fc:52:0d:e5:
         e9:c7:03:be:ce:0a:32:89:3c:14:33:42:2d:56:e4:5b:8a:c0:
         1c:ae:75:2f:1e:44:09:5d:03:d2:b5:9a:e4:3a:43:4d:7c:22:
         0e:38:49:0b:37:45:07:2c:4e:4d:73:df:d1:ab:49:57:99:cb:
         dc:1c:46:90:bb:eb:49:ec:a8:f8:4a:65:2d:72:f4:46:07:df:
         c9:74:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org