Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/34352e3138382e39312e302f32342d3234203d3e20323639353237.roa
File:                     34352e3138382e39312e302f32342d3234203d3e20323639353237.roa (raw, json)
Hash identifier:          PVvVGlc7gfW8sPpLRWFPAOoeJ9jWCB4Syi+Ajs3B5yA=
Subject key identifier:   67:27:4C:37:12:05:68:E1:21:54:F7:65:39:6C:F5:8E:5F:8F:8B:79
Certificate issuer:       /CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
Certificate serial:       59F21F7A09DD00902A74DB04230646E73D3F0289
Authority key identifier: 7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/34352e3138382e39312e302f32342d3234203d3e20323639353237.roa
Signing time:             Tue 09 Jan 2024 19:02:55 +0000
ROA not before:           Tue 09 Jan 2024 18:57:55 +0000
ROA not after:            Tue 07 Jan 2025 19:02:55 +0000
asID:                     269527
IP address blocks:        45.188.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f2:1f:7a:09:dd:00:90:2a:74:db:04:23:06:46:e7:3d:3f:02:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
        Validity
            Not Before: Jan  9 18:57:55 2024 GMT
            Not After : Jan  7 19:02:55 2025 GMT
        Subject: CN=67274C37120568E12154F765396CF58E5F8F8B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:5f:55:f9:d8:a5:b8:76:e0:b7:af:16:ea:
                    01:dc:51:5f:37:0f:f6:75:27:ab:09:81:9f:1a:e6:
                    3a:26:28:49:31:e8:0b:1a:bc:a4:da:0c:6b:7b:c6:
                    a2:b1:7a:0b:1f:e0:90:ae:bc:e5:35:3d:cd:95:67:
                    3d:93:0a:52:b8:cb:1a:19:5e:c3:82:55:38:4d:37:
                    36:26:32:72:53:7f:9a:5d:da:6c:e8:3c:a9:e2:ef:
                    64:23:56:37:5b:a5:9b:cb:10:9c:4d:69:cc:a9:97:
                    33:e9:66:8a:bf:2b:94:a7:08:f1:82:dc:45:12:4a:
                    13:79:09:3e:1f:2e:dd:8c:78:55:62:ee:43:ec:6f:
                    8a:14:3d:b5:b6:d9:90:2e:8f:a4:dd:ae:fc:d9:2b:
                    3b:57:d9:df:fc:cd:6d:eb:61:db:f0:a8:09:34:43:
                    fc:3a:48:60:a3:a1:0b:cd:dc:47:a7:69:5e:99:df:
                    d3:9f:8c:31:5d:95:0b:83:3a:05:f5:08:74:fa:6e:
                    60:d1:7d:ca:f7:3f:8c:1c:b1:6a:94:e0:b9:67:e1:
                    59:4c:f6:d7:87:c9:a1:a7:4c:2c:ce:7c:7e:54:84:
                    6b:9a:73:e0:0b:1c:54:d9:f8:ac:30:68:b4:7c:90:
                    9e:0b:01:66:a7:3c:3d:19:96:7c:22:e3:14:9c:53:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:27:4C:37:12:05:68:E1:21:54:F7:65:39:6C:F5:8E:5F:8F:8B:79
            X509v3 Authority Key Identifier:
                keyid:7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/34352e3138382e39312e302f32342d3234203d3e20323639353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ef:99:a9:91:87:62:72:05:2e:00:e6:c9:d2:87:99:8c:c3:
         4e:ee:3a:6c:5b:15:99:a9:e7:60:80:f9:ea:ec:99:9e:b5:b2:
         c2:d7:ab:5c:8b:4d:e1:e7:e1:75:c4:97:ec:ba:19:12:36:2c:
         7b:64:c2:b9:3c:44:1c:d4:5f:84:c5:0d:31:0d:3a:f0:42:78:
         d4:d2:23:c5:80:62:87:c1:68:2b:ad:fb:77:b9:36:e5:58:53:
         34:87:33:4e:b6:72:03:cb:a2:80:c3:d8:ec:f2:58:b5:bf:0f:
         c2:d9:17:38:7b:13:39:4b:db:80:16:f1:33:d1:69:90:2b:04:
         88:ce:45:89:4e:65:6f:59:4c:19:95:bd:af:11:af:13:78:50:
         28:6c:69:40:9c:8b:fb:39:40:b9:4c:fd:dd:f1:cf:ac:8c:a6:
         2b:bb:9f:ff:ad:3f:e7:ba:22:82:05:c5:39:79:0c:4e:62:5f:
         1a:1c:7e:62:0f:ae:b7:5c:2d:f5:bc:7b:7b:01:a7:a3:45:4b:
         8b:b0:b3:d0:64:db:e6:6b:7d:4a:47:95:d7:e7:f5:8a:9d:94:
         8f:4f:b0:87:39:d5:7e:e5:1c:2e:ed:f6:f1:ed:26:2f:9e:3f:
         14:ef:38:c3:42:5a:aa:98:0c:5c:cd:dc:6b:6d:96:70:e8:83:
         14:2e:38:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org