Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32332d3233203d3e20323636303636.roa
File:                     34352e342e3132362e302f32332d3233203d3e20323636303636.roa (raw, json)
Hash identifier:          zy3qELIRvvwS/oEFqQRcMlnCaI+pOnSQWP4P8HVAHBM=
Subject key identifier:   73:20:26:16:2F:1D:61:BC:0B:98:94:B8:C9:1C:74:F0:6B:06:11:DA
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       0F90CA2DB2908730C90382B450AF00C09D17AA76
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32332d3233203d3e20323636303636.roa
Signing time:             Fri 20 Oct 2023 23:32:07 +0000
ROA not before:           Fri 20 Oct 2023 23:27:07 +0000
ROA not after:            Fri 18 Oct 2024 23:32:07 +0000
asID:                     266066
IP address blocks:        45.4.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:90:ca:2d:b2:90:87:30:c9:03:82:b4:50:af:00:c0:9d:17:aa:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Oct 20 23:27:07 2023 GMT
            Not After : Oct 18 23:32:07 2024 GMT
        Subject: CN=732026162F1D61BC0B9894B8C91C74F06B0611DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:de:0e:9f:c6:7a:7b:d2:d7:4d:0a:73:15:
                    86:9b:b8:f9:4e:2c:f0:16:c1:d9:ad:f7:85:d1:16:
                    66:55:8f:80:86:e4:d6:d6:f4:86:27:c1:6d:40:48:
                    5e:39:83:41:e8:c4:d2:ac:ab:de:96:ed:5d:0a:3b:
                    a9:8e:dd:11:81:5b:c1:e1:36:7b:df:14:45:72:93:
                    c9:c9:0c:fe:18:f8:76:c5:79:41:21:20:b7:ba:28:
                    53:37:ea:ab:a6:f9:15:c1:97:34:84:97:f0:82:42:
                    57:c5:1b:03:2d:8b:0c:d0:47:1f:bb:5c:34:28:ae:
                    b1:8f:81:df:4e:e6:3b:fc:c0:03:0d:7e:7e:33:69:
                    b4:00:f6:3f:a0:10:1b:e2:88:d3:83:fa:a2:36:82:
                    fa:f8:61:d1:50:fb:76:8f:76:7a:30:c2:77:d7:52:
                    39:db:a7:04:54:1b:56:a3:d0:98:b5:af:58:1d:2c:
                    35:9d:c8:a2:b2:7e:66:1a:00:30:cb:df:4e:1c:ac:
                    90:c2:29:41:4e:ba:a0:c0:e2:54:d8:ae:9d:71:9e:
                    c0:54:9f:6b:4c:98:df:8e:72:5c:52:a5:72:b4:0b:
                    69:aa:d9:fc:f4:b3:92:36:91:97:0a:5a:0d:8d:c1:
                    d4:84:b3:ae:6a:e5:fc:be:e4:a1:70:e5:28:5f:5f:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:20:26:16:2F:1D:61:BC:0B:98:94:B8:C9:1C:74:F0:6B:06:11:DA
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32332d3233203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:52:e6:a2:e0:68:bf:b6:8e:65:c8:cd:72:63:52:9a:64:
         82:99:2a:eb:42:d3:b1:19:65:48:b3:cf:34:22:15:70:37:cc:
         14:8c:43:21:59:ec:77:3e:d7:9d:f6:6f:5a:ce:2b:8f:bb:63:
         7b:bd:70:cb:42:12:c2:9e:b7:ba:99:d5:b1:78:c4:c7:9e:17:
         2a:34:f1:46:f3:4f:3a:a6:f6:26:3a:da:5e:bc:bd:c8:a0:03:
         17:25:4a:ba:3c:1e:08:5e:e7:46:c9:f1:7d:18:f6:34:0e:41:
         82:4f:56:fd:41:dd:3f:06:dc:ca:b2:ec:9e:48:62:d8:6c:05:
         9b:2f:f8:5f:e9:1a:c9:f3:30:f1:41:13:ce:ac:06:ed:73:ab:
         25:24:e5:f8:f2:28:37:3c:49:5d:bb:c8:84:1e:c3:93:7f:d5:
         6b:06:27:c0:4c:3a:fb:9a:5d:b2:59:f2:bf:c9:50:29:b8:3d:
         59:a3:ad:39:03:af:1a:f7:9e:9f:15:e2:70:1b:1e:1d:24:ca:
         90:9e:09:eb:73:9a:b6:e5:de:3d:cc:5c:db:1e:82:39:ff:0c:
         1a:0b:29:37:b4:80:f2:da:e8:6a:ff:11:2b:e0:88:07:94:f2:
         7b:52:9f:01:c9:01:ca:e6:a4:68:60:6c:3d:3d:45:73:dd:f3:
         d8:86:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org