Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133342e302f32342d3234203d3e20323731323733.roa
File:                     34352e3232392e3133342e302f32342d3234203d3e20323731323733.roa (raw, json)
Hash identifier:          fzrchTRSVBf7UwaupIyOKbEtVhq3IkQMJfm2SVnKUMo=
Subject key identifier:   90:04:27:12:C3:35:55:47:7B:91:1B:9E:B6:6F:E0:C2:79:35:E2:52
Certificate issuer:       /CN=45B91BE0F81348BD8D38FDD7887981473CE3720E
Certificate serial:       578A88618EAFBBF7BCACED146F60001E7D96137A
Authority key identifier: 45:B9:1B:E0:F8:13:48:BD:8D:38:FD:D7:88:79:81:47:3C:E3:72:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45B91BE0F81348BD8D38FDD7887981473CE3720E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133342e302f32342d3234203d3e20323731323733.roa
Signing time:             Thu 26 Oct 2023 11:54:32 +0000
ROA not before:           Thu 26 Oct 2023 11:49:32 +0000
ROA not after:            Thu 24 Oct 2024 11:54:32 +0000
asID:                     271273
IP address blocks:        45.229.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8a:88:61:8e:af:bb:f7:bc:ac:ed:14:6f:60:00:1e:7d:96:13:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45B91BE0F81348BD8D38FDD7887981473CE3720E
        Validity
            Not Before: Oct 26 11:49:32 2023 GMT
            Not After : Oct 24 11:54:32 2024 GMT
        Subject: CN=90042712C33555477B911B9EB66FE0C27935E252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:40:1f:76:f8:8a:1f:1d:20:ab:4d:5c:90:95:
                    95:03:d8:c3:aa:18:44:12:da:03:27:3d:28:1a:f3:
                    ec:37:61:42:82:2d:c8:0b:c3:b4:4b:a8:c6:da:74:
                    ff:37:a1:48:80:51:0f:a0:fc:21:66:4e:33:af:af:
                    8b:81:6f:98:5d:90:98:20:ee:53:69:bd:74:ba:7e:
                    83:ef:b4:99:2c:c3:30:34:ff:6f:28:93:71:73:ac:
                    aa:ae:81:7d:f8:ae:cf:81:c8:0b:8a:bb:a1:29:18:
                    0a:1f:7c:37:cd:c7:1a:f6:3e:3e:a9:f1:2f:5a:9a:
                    f5:8b:ec:1e:8c:e8:27:6f:c9:17:76:1b:5a:81:8b:
                    da:a1:e2:11:20:98:66:ee:22:df:2c:29:1f:1b:3a:
                    ce:ec:61:15:e1:31:42:a0:58:d2:4a:f5:ae:52:2f:
                    b3:a9:04:4f:1d:e4:a8:12:ec:3f:ca:d6:31:e2:65:
                    c8:97:f1:4a:63:bb:bf:82:4d:85:f9:58:4d:f0:e3:
                    05:ce:09:09:3b:27:ee:00:e7:55:0f:0f:86:73:3d:
                    60:88:82:5e:82:fd:ea:3f:77:ed:d7:08:87:f9:2f:
                    47:37:a3:12:f0:aa:f1:fa:c8:3e:45:85:18:75:7b:
                    c4:e4:e3:cc:6b:48:de:44:18:10:7f:19:9d:f2:88:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:04:27:12:C3:35:55:47:7B:91:1B:9E:B6:6F:E0:C2:79:35:E2:52
            X509v3 Authority Key Identifier:
                keyid:45:B9:1B:E0:F8:13:48:BD:8D:38:FD:D7:88:79:81:47:3C:E3:72:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/45B91BE0F81348BD8D38FDD7887981473CE3720E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45B91BE0F81348BD8D38FDD7887981473CE3720E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133342e302f32342d3234203d3e20323731323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:bf:58:a5:f2:43:fa:be:b0:96:bb:be:1f:5e:84:69:3a:a3:
         ed:09:c9:55:00:64:b7:c3:77:43:8e:8a:a0:34:6e:0a:b9:bf:
         ac:d5:e1:cc:c1:fa:81:50:1c:62:fc:49:b6:cd:0e:78:ac:a2:
         b9:b4:53:a6:be:e5:a8:70:e7:21:38:9b:42:a6:b9:7c:bb:2c:
         64:e4:38:de:97:99:72:7f:09:99:e0:27:07:b7:ed:7c:35:9c:
         f6:40:82:ee:cc:0d:32:97:23:12:e4:3a:de:55:ba:32:08:73:
         68:2d:62:52:b2:78:ac:a1:80:a2:e3:38:13:a3:cc:51:f8:a0:
         f9:d5:f5:c0:2d:a8:9c:a7:df:98:d1:6c:bc:ee:ab:fa:29:44:
         b6:ef:57:e8:5a:62:58:b5:a5:62:dc:43:c6:66:24:10:15:21:
         1e:b4:7f:1c:44:57:28:c5:93:8d:db:cb:d4:42:0f:db:74:3f:
         f5:ac:52:a0:d7:de:7f:7e:33:50:a3:8f:c7:13:13:e6:99:2e:
         cf:80:cd:57:f3:0b:e8:39:76:60:59:8b:00:79:e1:c3:3f:cd:
         da:ed:90:55:65:1a:be:c3:17:e3:a5:a6:95:fa:50:43:2c:1e:
         93:13:3d:e1:ed:06:37:1a:3f:83:db:1e:95:c3:18:b5:91:24:
         00:f6:52:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org