Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203631353935.roa
File:                     34352e3136352e38302e302f32322d3234203d3e203631353935.roa (raw, json)
Hash identifier:          BTtj2ckecd0WfcBfbRa5uUNhI9sJAe7ZrhW3DCOtUOE=
Subject key identifier:   F7:E9:55:09:ED:E8:F1:F5:B3:84:3F:A9:5F:52:BB:AC:85:A6:C8:43
Certificate issuer:       /CN=74095406777C3BC0D9D7B0005026B8A7919DB649
Certificate serial:       7B9D442BA062E9EF5610E652B3151638EC4852C0
Authority key identifier: 74:09:54:06:77:7C:3B:C0:D9:D7:B0:00:50:26:B8:A7:91:9D:B6:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74095406777C3BC0D9D7B0005026B8A7919DB649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203631353935.roa
Signing time:             Thu 14 Sep 2023 20:18:05 +0000
ROA not before:           Thu 14 Sep 2023 20:13:05 +0000
ROA not after:            Thu 12 Sep 2024 20:18:05 +0000
asID:                     61595
IP address blocks:        45.165.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9d:44:2b:a0:62:e9:ef:56:10:e6:52:b3:15:16:38:ec:48:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74095406777C3BC0D9D7B0005026B8A7919DB649
        Validity
            Not Before: Sep 14 20:13:05 2023 GMT
            Not After : Sep 12 20:18:05 2024 GMT
        Subject: CN=F7E95509EDE8F1F5B3843FA95F52BBAC85A6C843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f1:12:57:f1:d0:9e:f2:cc:e2:a7:d9:1a:85:
                    9c:fb:8c:46:a8:7e:09:48:98:0b:dc:c9:2b:17:2b:
                    2f:64:35:32:57:05:d1:99:bd:96:6b:3c:0f:a5:3e:
                    05:b3:d7:76:2b:c2:55:0c:a8:27:18:08:45:50:1a:
                    b8:7b:d7:d8:fb:80:a4:34:ad:65:80:cf:3e:33:3a:
                    1b:1e:59:bb:b3:39:67:87:d2:42:a4:fe:65:52:c0:
                    ff:36:c7:a5:da:6d:86:4d:63:98:6d:b5:e1:90:ad:
                    b5:77:3b:8a:a7:e0:ea:4f:2c:d4:3b:96:3a:1d:43:
                    cb:38:f3:bf:c1:ff:88:bb:a7:5c:43:90:62:20:fe:
                    e4:d2:55:e0:99:65:a6:8d:fd:d2:a6:23:51:76:ee:
                    70:ac:bf:46:ca:cf:91:bb:a5:29:6d:b6:cc:e8:a9:
                    c0:42:f1:b5:9e:d8:71:b5:ce:d1:ed:82:19:82:0d:
                    79:08:ff:62:9d:16:9c:04:88:96:3b:15:be:58:ea:
                    d6:f9:71:89:1c:1a:a3:42:46:a8:8b:1e:15:e6:a4:
                    df:4f:21:a7:d5:9c:64:c8:0f:83:e7:6d:41:c0:d8:
                    ec:21:63:88:1a:b2:eb:e9:36:e5:12:e5:3b:71:f9:
                    58:d0:fd:99:b3:b2:55:db:5d:13:0e:50:a0:b3:82:
                    8e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E9:55:09:ED:E8:F1:F5:B3:84:3F:A9:5F:52:BB:AC:85:A6:C8:43
            X509v3 Authority Key Identifier:
                keyid:74:09:54:06:77:7C:3B:C0:D9:D7:B0:00:50:26:B8:A7:91:9D:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/74095406777C3BC0D9D7B0005026B8A7919DB649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74095406777C3BC0D9D7B0005026B8A7919DB649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/34352e3136352e38302e302f32322d3234203d3e203631353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:bc:6d:04:dd:f5:f6:48:9b:b3:e4:86:64:a7:81:1d:bd:cd:
         11:07:28:e7:7e:39:fd:cf:c3:07:d5:51:c3:a7:18:52:0d:ee:
         f0:c0:13:ea:72:01:56:34:29:14:1c:6a:2f:82:d9:24:d4:73:
         f2:1e:40:f3:17:d5:4e:bb:76:1a:86:a4:4c:4b:e5:c7:90:13:
         ff:b6:29:be:05:67:28:32:42:da:4b:f8:04:86:61:e3:15:ce:
         d7:e6:fa:1c:9d:3c:d4:04:4e:ce:ab:8a:e0:4d:e0:1d:77:83:
         e8:8e:f0:35:d9:0d:44:df:ff:21:1c:71:45:3d:7c:c0:8c:13:
         5c:6a:4e:9f:9c:66:a2:db:62:ec:dc:51:da:e9:57:43:30:44:
         7e:ad:40:a6:e7:7e:09:39:fa:69:f4:b2:83:98:10:6e:17:98:
         d3:09:d6:40:71:64:e5:72:66:0b:ff:ea:91:64:ce:70:0d:a7:
         22:f0:2f:01:3d:1a:c2:b5:3f:27:fc:05:9e:29:13:92:6a:f6:
         c0:13:7b:2a:05:60:0f:b8:01:86:ac:8e:29:3d:9a:f1:07:5b:
         c9:38:d7:f9:21:37:a0:79:49:b6:ea:0d:52:bb:81:d9:9a:47:
         c8:72:d3:9f:d5:5e:c3:d6:4a:65:9d:00:d2:0f:36:9b:c3:f2:
         11:56:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org