Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39382e302f32342d3234203d3e20323639313238.roa
File:                     34352e3138302e39382e302f32342d3234203d3e20323639313238.roa (raw, json)
Hash identifier:          +0IH9tSleX9pUeJTYyF8HlifozjxUlKE3CMyaSlOMo8=
Subject key identifier:   FE:6E:B9:60:A5:A9:42:85:3A:C7:64:DF:9F:94:0C:F1:30:B7:44:4F
Certificate issuer:       /CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
Certificate serial:       213ADBC25FB01D3BBAD19E26C50843ECF7206C65
Authority key identifier: BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39382e302f32342d3234203d3e20323639313238.roa
Signing time:             Tue 16 May 2023 02:18:56 +0000
ROA not before:           Tue 16 May 2023 02:13:56 +0000
ROA not after:            Tue 14 May 2024 02:18:56 +0000
asID:                     269128
IP address blocks:        45.180.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3a:db:c2:5f:b0:1d:3b:ba:d1:9e:26:c5:08:43:ec:f7:20:6c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
        Validity
            Not Before: May 16 02:13:56 2023 GMT
            Not After : May 14 02:18:56 2024 GMT
        Subject: CN=FE6EB960A5A942853AC764DF9F940CF130B7444F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d6:e9:1e:28:8a:f2:4c:cc:4b:b7:7e:dd:04:
                    b7:bd:b3:63:23:ec:78:cd:79:eb:8c:fc:e3:ff:32:
                    fd:d0:44:f9:94:ea:f3:56:cf:65:dc:7e:29:d6:a3:
                    8d:aa:8c:aa:34:97:f7:f3:13:f7:06:16:62:a5:96:
                    af:02:c9:17:39:3f:84:c1:ae:1a:5e:8f:92:6c:86:
                    bf:d6:92:6b:7b:5f:d6:24:a8:08:c6:88:48:af:3a:
                    5a:72:3a:5c:51:b4:d1:df:fa:36:db:87:75:f7:b4:
                    0e:d1:3a:2c:4a:7a:66:78:df:37:aa:55:75:d4:d8:
                    11:8a:3b:78:41:02:79:38:77:b8:9e:de:55:60:68:
                    f9:ec:0c:4d:a2:71:ba:d4:41:af:6a:f8:e2:91:3a:
                    41:42:b7:aa:98:06:d5:84:bf:b3:9c:0f:7e:7c:26:
                    e6:3a:48:05:e0:ed:ae:5d:ad:9c:6b:18:a4:6c:ae:
                    ae:79:09:b0:20:29:fd:aa:2a:75:aa:c1:5c:6e:da:
                    1d:3c:23:55:d4:92:ed:5a:34:83:95:06:fe:bf:2a:
                    62:bd:09:21:60:a7:b2:ba:bc:60:35:42:66:7c:c2:
                    18:ad:77:e3:a3:16:c1:fc:38:8a:ac:0b:a5:fa:71:
                    9f:2c:da:ac:0e:0d:fe:9a:70:3c:36:87:04:99:24:
                    41:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6E:B9:60:A5:A9:42:85:3A:C7:64:DF:9F:94:0C:F1:30:B7:44:4F
            X509v3 Authority Key Identifier:
                keyid:BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39382e302f32342d3234203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:6f:1a:41:c4:df:a2:29:3b:cd:8f:fd:5a:fc:b7:b4:ec:4c:
         ab:a6:9e:04:97:70:88:df:b0:3e:70:02:3c:49:90:13:7f:0f:
         df:82:72:b7:d3:1f:31:80:9a:5b:61:b5:49:44:a7:63:2e:52:
         07:d7:ed:15:c4:49:0a:8a:bc:3b:46:c6:48:78:25:2b:ea:ad:
         bb:b3:31:7b:9c:37:c6:46:2c:2a:ea:7a:a4:6a:fb:bd:e5:9a:
         86:b1:1a:d1:32:98:6b:3b:34:3b:2b:21:32:07:0a:02:5c:0c:
         c6:2e:f5:ed:57:79:fa:72:03:a6:40:e0:d6:c6:e1:ae:64:81:
         f8:67:ff:11:d2:f8:35:5c:f7:10:0f:a4:34:93:d6:73:04:16:
         53:4f:aa:14:20:82:e7:52:c5:23:5e:3e:a6:9b:dd:27:1c:cf:
         c8:43:1b:d7:a0:91:2d:51:1c:b9:30:a0:c2:90:b8:ac:97:ed:
         2c:09:05:28:6d:f1:d7:39:bf:f8:6a:e3:ce:e1:07:1a:90:58:
         b2:64:b4:72:7b:46:ab:4e:14:35:0b:ab:66:0b:10:d3:14:5c:
         a6:86:89:9e:f6:db:22:40:bb:bf:e9:b2:89:ea:8a:6a:26:74:
         fb:b1:a7:bc:e4:c3:55:dd:2b:4c:39:a6:96:4d:0b:d3:2a:a0:
         48:f3:ee:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org