Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132352e302f32342d3234203d3e20323636303636.roa
File:                     34352e342e3132352e302f32342d3234203d3e20323636303636.roa (raw, json)
Hash identifier:          GE841lnne2m4KpkDFAqs7mp5rEt8y0rv3HRe7X8rdZ8=
Subject key identifier:   95:92:EA:86:6E:5C:8F:47:07:88:DD:68:25:69:02:80:22:52:C5:1D
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       117368B25325289809288131D16BE0A322307C38
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132352e302f32342d3234203d3e20323636303636.roa
Signing time:             Sat 18 Nov 2023 00:20:22 +0000
ROA not before:           Sat 18 Nov 2023 00:15:22 +0000
ROA not after:            Sat 16 Nov 2024 00:20:22 +0000
asID:                     266066
IP address blocks:        45.4.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:73:68:b2:53:25:28:98:09:28:81:31:d1:6b:e0:a3:22:30:7c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Nov 18 00:15:22 2023 GMT
            Not After : Nov 16 00:20:22 2024 GMT
        Subject: CN=9592EA866E5C8F470788DD68256902802252C51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:38:db:e7:7f:ca:20:1b:0e:5d:27:85:2f:
                    79:93:46:66:57:32:18:85:f4:c2:c3:f3:9b:a5:c6:
                    d0:e7:c7:92:68:a8:f8:5d:21:17:03:fd:40:6a:0e:
                    4f:0f:0d:4a:57:1f:53:04:c9:9d:49:ca:b2:e5:e3:
                    a4:1c:e9:60:89:df:75:68:31:85:f8:66:ff:38:ed:
                    42:95:a1:f3:d1:2e:3c:c1:d7:32:37:2c:d0:64:7c:
                    be:f2:de:73:13:c7:76:cb:aa:01:07:be:18:24:b2:
                    60:7e:4f:19:bc:06:33:ee:de:f0:36:83:88:18:1b:
                    2f:79:0e:ce:7d:60:3b:00:ed:81:78:f6:ae:42:70:
                    1d:6a:14:f4:c6:8a:2d:31:82:d8:d6:47:4f:de:30:
                    3b:61:65:62:25:1f:f6:5d:df:6f:37:00:37:68:1a:
                    66:7a:fc:45:ad:ca:04:2f:c6:a5:5f:06:e7:f7:09:
                    92:80:c8:f7:42:77:0d:9c:8b:0d:94:4d:45:49:eb:
                    c5:44:7a:e4:a2:12:4d:60:47:e6:cd:4a:09:76:d7:
                    bc:a8:09:9a:35:57:fc:df:3a:db:14:4f:14:53:28:
                    c7:7c:44:74:b6:4f:8a:2c:7d:b7:7d:a9:28:a2:57:
                    3b:aa:b0:44:8b:5c:53:f7:6d:0a:0c:24:1c:e8:7b:
                    06:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:92:EA:86:6E:5C:8F:47:07:88:DD:68:25:69:02:80:22:52:C5:1D
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132352e302f32342d3234203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:5e:ab:99:dd:dd:15:40:88:0e:c6:cc:f0:a6:2f:99:d3:49:
         57:cc:7c:7e:0f:c0:6b:13:ef:11:78:79:57:c6:7c:38:37:d7:
         38:55:d8:6a:c0:91:bf:40:c1:7b:09:2b:40:92:8f:a2:17:dd:
         fb:57:05:6c:8f:4c:07:fc:24:9d:41:95:18:46:56:5d:b3:92:
         b4:8e:61:94:98:75:52:e4:f0:af:06:ce:ec:bd:dc:44:be:c9:
         43:79:27:da:ac:9d:00:a1:2a:17:25:b9:11:de:d5:29:63:df:
         82:51:ca:4c:f1:35:73:30:7a:9d:be:68:3d:04:f0:52:30:3c:
         1f:17:0b:42:3b:bd:00:76:69:39:59:e2:80:49:11:38:65:80:
         15:10:31:de:c2:07:92:5b:64:83:6f:1c:d0:16:15:d2:fd:3e:
         50:14:fb:3d:d8:31:59:24:56:ba:f9:a8:78:4e:3d:5d:0f:3e:
         0e:79:87:cd:15:32:f7:d1:88:78:9b:4e:ac:36:16:5f:1a:68:
         2f:30:bf:56:c8:a8:4e:00:65:dd:d9:2a:4f:50:b4:86:8b:82:
         89:9b:2b:31:3b:8e:af:13:99:2c:9e:dd:0d:19:68:2a:6b:e6:
         c9:76:88:42:b0:a5:b6:a0:6e:42:a1:32:90:82:dc:fd:87:21:
         c5:bb:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org