Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          bkI5BzPuKHZ/Fo07yM6UADMjnphaJcNMWyEBoWttdhA=
Subject key identifier:   8E:E0:E1:8D:BE:63:98:FD:45:47:E8:86:FD:0B:8A:6C:FC:3E:98:A9
Certificate issuer:       /CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
Certificate serial:       416BE4A0536B063032238706E3328CE93B49DB8A
Authority key identifier: 53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa
Signing time:             Fri 02 Feb 2024 14:20:05 +0000
ROA not before:           Fri 02 Feb 2024 14:15:05 +0000
ROA not after:            Fri 31 Jan 2025 14:20:05 +0000
asID:                     267229
IP address blocks:        45.231.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6b:e4:a0:53:6b:06:30:32:23:87:06:e3:32:8c:e9:3b:49:db:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
        Validity
            Not Before: Feb  2 14:15:05 2024 GMT
            Not After : Jan 31 14:20:05 2025 GMT
        Subject: CN=8EE0E18DBE6398FD4547E886FD0B8A6CFC3E98A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:da:cc:0b:00:da:98:8f:7e:8f:cd:cc:75:5f:
                    0c:46:cc:6a:09:55:d4:73:a8:f8:a9:39:72:88:fd:
                    db:c0:ed:20:b9:0c:73:2e:0e:97:24:d7:85:06:27:
                    1f:0d:24:3a:4c:0e:f1:87:7a:e6:a5:ee:70:2b:7f:
                    24:ca:13:09:21:a8:dc:1d:5e:e8:4b:be:d7:06:12:
                    fc:c8:b5:1e:8b:75:60:72:71:b5:3e:e9:99:65:13:
                    41:11:15:e8:b5:d3:62:78:be:ee:3e:da:54:74:0f:
                    8b:e7:44:5c:ad:a6:0f:1f:99:e1:95:66:15:62:56:
                    45:57:86:e6:14:dc:a7:81:60:6c:39:39:73:0a:8a:
                    c7:4c:6a:0b:14:8c:5e:cb:d2:dd:86:32:41:88:b2:
                    62:3e:28:3b:9d:29:4b:41:51:66:65:70:af:d7:10:
                    30:f4:23:67:8a:d9:55:b1:11:88:bf:94:3e:80:a6:
                    e7:5b:0f:9a:cb:d7:f5:2b:4e:f4:e9:cf:07:47:b9:
                    89:60:15:d9:66:b3:c9:a0:b7:da:e7:3b:58:cf:dd:
                    53:17:89:19:67:a9:52:ce:aa:3c:a2:b3:c6:b3:b0:
                    7b:b5:35:94:e4:34:f6:9b:b2:e7:f1:e0:55:8a:0c:
                    1d:f6:ec:3b:61:21:c5:33:16:59:0c:38:96:f3:c6:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E0:E1:8D:BE:63:98:FD:45:47:E8:86:FD:0B:8A:6C:FC:3E:98:A9
            X509v3 Authority Key Identifier:
                keyid:53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:0b:bd:e6:f6:64:d3:9e:8e:f9:fe:44:e7:eb:90:ec:55:a4:
         1b:57:7b:ef:50:7a:30:18:29:b1:35:c3:df:f3:cc:9f:f9:47:
         a8:c1:76:9e:c1:f7:75:c7:34:98:4a:97:af:84:70:1e:27:c4:
         dd:63:0f:c2:48:f2:02:8e:a8:24:88:e6:0a:c7:0d:dc:68:c4:
         61:02:23:e6:20:36:e1:61:e9:41:52:a9:69:14:0a:a7:76:6a:
         fa:25:86:68:d1:f1:6e:b0:39:7e:71:92:3e:e4:f9:65:ef:b7:
         33:0e:3f:07:5c:29:65:2b:39:99:2a:5e:df:9e:1c:8b:9a:1e:
         37:1d:96:c5:95:df:9e:b8:e5:08:05:7b:db:50:af:1a:96:35:
         6e:23:bb:14:f9:ab:b8:76:5e:e7:e3:e6:22:44:d0:61:d9:0d:
         6f:07:86:f5:d3:47:25:07:b5:d8:2d:f9:52:60:4a:2c:c6:f2:
         46:74:07:da:c3:e9:f7:68:d2:55:5e:be:54:00:c7:a8:42:61:
         50:9e:cb:3c:40:b9:4a:85:98:51:42:74:66:b9:bf:00:32:4e:
         e6:6a:fd:e8:f7:f8:ed:9e:f2:eb:b0:59:59:5d:9d:68:f9:8c:
         02:ce:85:89:2c:ef:cb:a0:e1:6b:2e:a6:e7:1a:6a:dd:e7:91:
         7e:e6:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org