Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3233312e302f32342d3234203d3e20323632363137.roa
File:                     34352e36352e3233312e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          98A5dscCSvTnkmPmf3fnLgUr6aLfQjNBlCLUG/hdqm8=
Subject key identifier:   B1:FA:90:98:14:F9:86:6C:C4:39:20:F5:B0:6A:86:7F:35:4E:DD:8F
Certificate issuer:       /CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
Certificate serial:       2FEEF9ED111A192A58E72898D74886F7FA3EF75A
Authority key identifier: 03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3233312e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:12:26 +0000
ROA not before:           Thu 03 Aug 2023 13:07:26 +0000
ROA not after:            Thu 01 Aug 2024 13:12:26 +0000
asID:                     262617
IP address blocks:        45.65.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ee:f9:ed:11:1a:19:2a:58:e7:28:98:d7:48:86:f7:fa:3e:f7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
        Validity
            Not Before: Aug  3 13:07:26 2023 GMT
            Not After : Aug  1 13:12:26 2024 GMT
        Subject: CN=B1FA909814F9866CC43920F5B06A867F354EDD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:76:3f:88:74:dd:b1:ad:a8:ea:3c:dc:52:
                    4c:55:37:ef:b8:25:c9:f5:bd:33:70:ae:f9:bf:94:
                    6e:1d:f0:71:6c:2c:36:f1:c4:22:45:9e:65:12:23:
                    bc:16:af:fa:23:7e:1a:f3:3b:01:82:bd:9f:4b:6e:
                    c0:2e:a1:b2:d1:af:a4:a1:05:24:e9:70:f7:77:c5:
                    14:fc:07:66:91:89:00:e1:b7:92:39:8d:b3:3c:54:
                    eb:3f:bb:30:da:64:6c:e8:a5:33:e9:a2:d6:f5:95:
                    e1:6b:e8:91:08:a2:9e:3e:a8:df:87:2b:c5:eb:5c:
                    fc:1b:20:87:73:d0:a8:f0:98:6b:01:89:7e:a3:a7:
                    c8:ea:c5:81:24:a0:aa:b5:16:fc:bb:36:e0:f7:dd:
                    a9:6a:57:17:de:56:a5:02:8d:e4:09:15:74:e3:ce:
                    95:01:e0:2c:42:1d:e3:cf:87:76:8a:77:ee:aa:46:
                    ac:4d:16:64:a7:3e:c8:e9:29:31:8b:6e:3f:44:24:
                    e2:55:16:47:e1:51:59:13:77:f6:cd:94:8c:1b:0e:
                    53:62:f5:c5:fb:47:c3:a8:13:42:b0:ab:c7:2d:26:
                    69:50:26:4b:d2:47:91:e3:cd:fb:ae:20:ad:af:9c:
                    4f:b3:34:27:77:dd:5b:46:69:2f:4f:82:c2:e7:b8:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FA:90:98:14:F9:86:6C:C4:39:20:F5:B0:6A:86:7F:35:4E:DD:8F
            X509v3 Authority Key Identifier:
                keyid:03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3233312e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:be:f7:45:27:12:a7:0e:41:40:7b:4b:f3:3a:45:9d:04:
         dc:29:1d:ce:7c:96:c7:91:67:d3:ca:8b:75:09:dc:d8:d9:36:
         c1:fb:eb:75:f5:0f:a3:d1:04:09:d3:34:60:b4:da:69:a1:db:
         5d:76:c4:9c:61:72:b1:85:97:88:9c:25:89:00:b4:df:3e:61:
         b2:99:8b:79:13:b6:19:ee:2e:b6:26:50:e2:10:a3:20:01:7e:
         2a:e5:18:ce:ed:b8:2c:8e:27:56:3c:3b:b4:03:a6:cf:44:37:
         7b:01:2d:a6:d0:9f:25:8b:1e:ab:40:ca:98:45:c9:f9:0e:82:
         f8:3e:79:fa:db:0c:cb:fd:bd:b9:a5:f2:8a:a5:ee:4f:0f:46:
         97:18:b1:d1:d5:7d:4a:4d:41:8b:96:c4:44:29:54:c7:82:5a:
         82:d8:7b:34:f9:76:31:bd:4d:23:64:e9:60:fd:dc:c9:41:99:
         92:c5:b8:93:12:a2:59:b1:4a:19:5d:41:2a:04:38:7d:5d:5a:
         d3:98:9d:11:4b:ad:1a:b2:39:85:aa:d3:9e:5f:6b:7a:3f:a4:
         96:aa:bc:6b:75:b5:76:a4:96:7d:05:43:a0:3c:10:db:a3:11:
         f5:63:2e:eb:91:8f:bf:7f:14:bd:40:85:5a:0b:d4:42:c7:a7:
         b4:db:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org