Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa
File:                     34352e3138302e39362e302f32332d3233203d3e20323639313238.roa (raw, json)
Hash identifier:          dfXVvPb519jOCu4xjJQAufxD5/K0+EcPzF9QEjswqL4=
Subject key identifier:   F3:27:33:98:C7:8B:D9:F8:B6:81:26:31:F2:E9:99:F5:8E:01:45:42
Certificate issuer:       /CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
Certificate serial:       183202CDEC35E340EA1FDD2D371386304876E54E
Authority key identifier: BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa
Signing time:             Tue 16 May 2023 02:18:56 +0000
ROA not before:           Tue 16 May 2023 02:13:56 +0000
ROA not after:            Tue 14 May 2024 02:18:56 +0000
asID:                     269128
IP address blocks:        45.180.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:32:02:cd:ec:35:e3:40:ea:1f:dd:2d:37:13:86:30:48:76:e5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
        Validity
            Not Before: May 16 02:13:56 2023 GMT
            Not After : May 14 02:18:56 2024 GMT
        Subject: CN=F3273398C78BD9F8B6812631F2E999F58E014542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:27:b5:e5:ac:cb:a1:95:9f:e6:3c:a4:a5:
                    2e:f9:c6:a2:18:28:ce:dd:de:22:bb:ca:c0:85:1e:
                    0c:df:b8:de:c1:bf:ce:d0:db:2a:a5:c7:09:1d:a2:
                    5f:11:01:97:17:9a:58:ab:55:31:a5:7f:99:72:3e:
                    72:5e:8a:44:44:c4:51:97:4b:1c:c6:35:e5:66:80:
                    83:e1:57:2e:bb:22:01:db:69:2f:c1:30:e8:71:05:
                    2c:5e:90:fe:d7:4a:ee:eb:ff:f9:b7:6e:d4:f6:7b:
                    d7:5d:8b:ad:ad:0d:77:ea:03:8d:e3:b5:c4:1c:48:
                    ce:91:30:77:24:23:97:23:2a:e7:3a:ad:fd:0d:6f:
                    33:20:5d:d1:7b:f9:60:32:48:8d:80:dd:10:00:1a:
                    4e:d3:e1:86:8f:78:52:bc:87:e1:75:50:44:77:a4:
                    7e:7c:a8:5b:fe:9b:53:e4:60:7b:e9:30:f3:c0:13:
                    2d:ae:d2:9b:85:68:ed:92:a0:60:bb:a6:cf:78:6d:
                    17:94:40:08:59:36:1e:7c:29:e1:6c:a2:29:fb:1f:
                    f8:73:9b:77:97:f5:5d:62:08:6c:e8:15:04:8c:bb:
                    ad:af:5e:9f:ad:7d:8b:24:9a:08:cb:c9:09:9c:9b:
                    5e:23:32:fe:8f:cc:64:e7:16:50:27:89:b0:d7:0e:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:27:33:98:C7:8B:D9:F8:B6:81:26:31:F2:E9:99:F5:8E:01:45:42
            X509v3 Authority Key Identifier:
                keyid:BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39362e302f32332d3233203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:f3:ff:3e:5f:64:03:b2:52:fe:60:14:e6:75:d2:0f:db:
         dd:09:21:6b:2c:12:7a:19:00:da:3c:22:34:50:77:4e:b8:bd:
         3a:10:2c:93:99:df:f0:d4:03:dd:e8:02:a6:5c:8c:26:2b:db:
         60:a3:75:2f:8b:d6:0a:cc:f0:1e:16:05:9c:c9:69:e1:24:f0:
         1e:b3:23:dc:f1:c1:0b:57:ce:99:c3:59:86:df:2d:ed:5d:f9:
         f3:6d:fb:39:7c:c6:92:70:3a:2a:ad:13:8e:a5:38:c9:02:30:
         cb:cd:80:a3:fa:f6:53:ad:4f:15:c3:95:0e:34:6f:a0:b1:9c:
         f0:58:b6:bd:93:a4:93:26:d5:a7:9f:8b:dd:b2:ce:ff:19:12:
         b5:66:82:fc:76:9e:e8:a8:09:e7:a4:97:53:1e:cb:89:db:6c:
         f4:03:d6:5e:53:c3:df:6f:d8:18:60:1a:b7:f3:bc:78:e9:22:
         ac:eb:96:38:c1:ad:84:64:2f:30:d1:ba:d0:b9:1b:3e:7c:e1:
         72:b2:58:90:c8:8a:19:e5:8e:2e:3f:04:38:f5:ce:5e:ad:58:
         bb:fe:58:40:39:f9:39:7e:6e:97:03:fe:26:ee:36:ab:cf:9b:
         1b:fb:99:7b:4c:96:40:71:62:fb:98:99:5d:c7:77:4a:07:63:
         a7:c1:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org