Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/34352e3138382e38392e302f32342d3234203d3e20323639353237.roa
File:                     34352e3138382e38392e302f32342d3234203d3e20323639353237.roa (raw, json)
Hash identifier:          l1vYS8sxg3PtfIC+elwen9ZaNUssEezOdCt7R3w9jo0=
Subject key identifier:   BD:F3:FB:14:A0:B0:A3:0A:78:30:ED:C1:63:05:D3:48:17:3C:87:C1
Certificate issuer:       /CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
Certificate serial:       1693DE083DFCCCEB9CFD07D3BC988FE92E691132
Authority key identifier: 7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/34352e3138382e38392e302f32342d3234203d3e20323639353237.roa
Signing time:             Tue 09 Jan 2024 19:02:50 +0000
ROA not before:           Tue 09 Jan 2024 18:57:50 +0000
ROA not after:            Tue 07 Jan 2025 19:02:50 +0000
asID:                     269527
IP address blocks:        45.188.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:93:de:08:3d:fc:cc:eb:9c:fd:07:d3:bc:98:8f:e9:2e:69:11:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
        Validity
            Not Before: Jan  9 18:57:50 2024 GMT
            Not After : Jan  7 19:02:50 2025 GMT
        Subject: CN=BDF3FB14A0B0A30A7830EDC16305D348173C87C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:46:d1:9d:18:5e:5b:0c:84:4f:45:64:30:
                    d9:eb:f3:ff:1e:7c:fb:b5:72:b5:d4:bb:71:2b:67:
                    10:dd:80:7d:9a:13:ce:23:be:b4:b0:91:ab:5b:ba:
                    a1:f8:f0:3b:b5:62:5b:1b:d1:17:1b:ac:45:2c:15:
                    84:39:ca:b9:ab:08:8c:db:bd:59:cb:ff:10:6e:c5:
                    92:45:7c:a3:15:d5:a8:1d:1b:fc:de:1c:88:2f:45:
                    8c:91:9e:15:6e:57:87:0c:24:d2:4f:f4:1d:bd:e0:
                    35:63:ac:22:aa:5d:d8:1c:7e:25:20:dc:c4:b2:53:
                    26:a6:86:11:b1:d2:60:73:10:5f:8c:c6:93:8b:b3:
                    eb:58:cb:a8:75:b7:c9:57:60:0f:77:8d:97:b1:43:
                    c4:ed:4a:c8:31:b9:ee:6c:46:d1:0c:3b:e9:95:ae:
                    5f:b9:2c:7c:1a:6d:1a:d7:03:e4:ec:e3:3e:2e:a5:
                    75:80:48:1f:70:f4:c1:12:63:8a:d8:8e:01:14:3a:
                    9c:a5:0b:34:a2:f8:88:81:78:8f:99:76:77:8f:1c:
                    86:68:08:37:29:8d:00:cb:d7:b8:f2:88:7d:7b:0a:
                    f8:e5:fc:a5:c9:ed:a0:6b:07:20:34:60:24:44:74:
                    7a:a1:4e:a9:88:23:a5:cd:e0:ba:2f:33:95:2e:34:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F3:FB:14:A0:B0:A3:0A:78:30:ED:C1:63:05:D3:48:17:3C:87:C1
            X509v3 Authority Key Identifier:
                keyid:7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/34352e3138382e38392e302f32342d3234203d3e20323639353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:57:3d:da:5e:74:e3:48:42:0e:9e:87:d3:22:97:7e:4e:c3:
         44:2b:0a:bd:79:75:d6:20:0c:fd:54:34:c7:bd:14:db:f4:27:
         a7:a3:58:cb:a5:01:8b:2b:79:1a:1d:77:23:63:4d:31:31:2b:
         ce:3b:ba:9f:29:b9:30:39:71:fe:3c:2d:0c:2c:9a:8f:81:49:
         66:2c:4b:fd:6d:b1:f7:41:07:e0:80:85:94:00:db:e1:d7:02:
         a1:4a:91:37:7a:74:61:02:67:94:f2:eb:d7:51:af:81:38:06:
         3e:04:8b:00:5a:fd:a1:8d:9d:fc:e3:98:68:f5:89:98:79:82:
         10:30:92:ab:2a:40:93:8a:2a:71:93:66:83:05:24:cb:f5:7f:
         90:89:0c:3e:23:c1:a1:b3:fc:30:aa:a4:c1:91:fa:30:19:54:
         ea:85:a2:f5:b2:82:17:53:2f:ec:c5:d3:ca:c8:b0:a0:c4:4a:
         b8:05:50:c4:5e:30:cb:1c:ef:29:0d:25:f8:ee:43:2e:e1:0f:
         29:23:c8:93:e8:1f:1e:e0:0e:22:b3:f3:8d:65:84:5d:39:8f:
         f5:9c:fe:03:72:4e:06:49:69:1c:90:8f:81:78:e1:e8:40:13:
         28:0d:be:6a:0e:46:c3:92:66:9e:ab:0d:5e:dc:01:84:e1:5a:
         11:26:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org