Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37382e302f32342d3234203d3e20323639373030.roa
File:                     34352e3139312e37382e302f32342d3234203d3e20323639373030.roa (raw, json)
Hash identifier:          5iEkdfI1lO1oELc/Gpci+0AkKCPMvWJMgngm+ZJbzPI=
Subject key identifier:   E9:76:A0:CC:A0:91:26:D2:D0:07:5D:4E:23:A5:17:9D:59:E1:78:72
Certificate issuer:       /CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
Certificate serial:       1AA0D12C9163396C5A147BBBFDFD5EF1117900FB
Authority key identifier: F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37382e302f32342d3234203d3e20323639373030.roa
Signing time:             Fri 03 Nov 2023 20:21:53 +0000
ROA not before:           Fri 03 Nov 2023 20:16:53 +0000
ROA not after:            Fri 01 Nov 2024 20:21:53 +0000
asID:                     269700
IP address blocks:        45.191.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a0:d1:2c:91:63:39:6c:5a:14:7b:bb:fd:fd:5e:f1:11:79:00:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA
        Validity
            Not Before: Nov  3 20:16:53 2023 GMT
            Not After : Nov  1 20:21:53 2024 GMT
        Subject: CN=3082010A0282010100A4CF59A97037197214908AF7ED8D289D8C232AA87CE0C7157E7FADC2A91D6BFEFEC055D50FE06AB0695D94119E99F49794440902ED7D5D6F3CB8BD2DF8F280512980C8D7AE53331D8E195A84FBFDDC617A876F11E1D8A74C294CF2424D6C3220BEE2467E2B1EB93ECFC80F4A90E29C19D63063BFFFABA35697443364AAF937FE8D6D8D5B97C7F5A1738FFD8BF2E926D38C95D87496165B867244AD8929065B989C47D769F2596FFBE65F537065CA3DDF39A80C709F824272034C8124B38F346C28EA6303EEDB47CC92BE1C28822205E70C201340DB9F2154DD23E94F278BC368851719177EFB1337891E72A6FE471DD77DECAD95F49526CF4287415699A935EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:59:a9:70:37:19:72:14:90:8a:f7:ed:8d:
                    28:9d:8c:23:2a:a8:7c:e0:c7:15:7e:7f:ad:c2:a9:
                    1d:6b:fe:fe:c0:55:d5:0f:e0:6a:b0:69:5d:94:11:
                    9e:99:f4:97:94:44:09:02:ed:7d:5d:6f:3c:b8:bd:
                    2d:f8:f2:80:51:29:80:c8:d7:ae:53:33:1d:8e:19:
                    5a:84:fb:fd:dc:61:7a:87:6f:11:e1:d8:a7:4c:29:
                    4c:f2:42:4d:6c:32:20:be:e2:46:7e:2b:1e:b9:3e:
                    cf:c8:0f:4a:90:e2:9c:19:d6:30:63:bf:ff:ab:a3:
                    56:97:44:33:64:aa:f9:37:fe:8d:6d:8d:5b:97:c7:
                    f5:a1:73:8f:fd:8b:f2:e9:26:d3:8c:95:d8:74:96:
                    16:5b:86:72:44:ad:89:29:06:5b:98:9c:47:d7:69:
                    f2:59:6f:fb:e6:5f:53:70:65:ca:3d:df:39:a8:0c:
                    70:9f:82:42:72:03:4c:81:24:b3:8f:34:6c:28:ea:
                    63:03:ee:db:47:cc:92:be:1c:28:82:22:05:e7:0c:
                    20:13:40:db:9f:21:54:dd:23:e9:4f:27:8b:c3:68:
                    85:17:19:17:7e:fb:13:37:89:1e:72:a6:fe:47:1d:
                    d7:7d:ec:ad:95:f4:95:26:cf:42:87:41:56:99:a9:
                    35:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:76:A0:CC:A0:91:26:D2:D0:07:5D:4E:23:A5:17:9D:59:E1:78:72
            X509v3 Authority Key Identifier:
                keyid:F9:B6:71:29:BD:C3:BD:0C:FB:B3:A4:E6:93:BA:A3:40:76:22:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9B67129BDC3BD0CFBB3A4E693BAA3407622FDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/0/34352e3139312e37382e302f32342d3234203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:fb:b9:54:0e:23:ab:e9:16:d1:4a:ce:e5:db:59:71:0e:39:
         a8:9e:05:fc:9a:68:f6:18:99:5c:45:3e:f8:96:3e:e9:b1:a6:
         7b:c3:c1:14:52:0c:f2:37:2b:00:b7:b2:b4:28:ba:c8:36:f0:
         3e:e1:b6:b5:b3:dc:e0:03:bc:2e:5a:76:14:c1:83:82:d6:f3:
         b8:1e:77:ca:a5:dd:e4:ad:09:d5:fe:fc:16:81:db:5d:f7:11:
         e5:b6:a2:86:f1:fe:78:1e:7f:54:cc:50:24:7b:84:44:ec:41:
         ac:fe:bf:c4:b7:6e:b6:2c:26:e7:96:05:ce:32:6e:c1:51:a9:
         a0:d9:5d:45:e7:09:a6:9f:e7:d8:56:37:2c:c4:03:9e:1e:93:
         68:fb:53:6d:62:39:6c:85:39:4d:7e:4b:a2:57:d9:50:29:72:
         58:88:43:51:bd:d3:79:f4:a5:55:02:9a:c8:cc:4c:05:55:dc:
         c5:a6:35:e6:77:00:79:7d:22:11:37:72:de:04:cd:5a:8b:d6:
         19:0b:9c:64:30:09:da:02:a9:7c:85:d4:eb:cb:06:36:ad:d4:
         94:ea:e4:ec:1e:e3:0c:3f:c5:ef:a7:45:ca:20:1a:74:d9:a0:
         6a:dd:d3:ac:67:af:de:fb:eb:e9:b8:2c:f0:16:25:af:1a:04:
         cc:a4:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org