Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37302e33322e302f32322d3234203d3e20323637353434.roa
File:                     34352e37302e33322e302f32322d3234203d3e20323637353434.roa (raw, json)
Hash identifier:          iHnSAO8Y4KenJIMFErI+9RgnC8AZsLXGuqs1nX3CXE4=
Subject key identifier:   E9:22:94:F3:F9:5B:A8:4C:9E:08:19:06:94:14:0D:7D:C2:B3:F4:F3
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       219289D6D9C92A4C0E86C67ACDB8791BD8865418
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37302e33322e302f32322d3234203d3e20323637353434.roa
Signing time:             Wed 23 Aug 2023 19:00:00 +0000
ROA not before:           Wed 23 Aug 2023 18:55:00 +0000
ROA not after:            Wed 21 Aug 2024 19:00:00 +0000
asID:                     267544
IP address blocks:        45.70.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:92:89:d6:d9:c9:2a:4c:0e:86:c6:7a:cd:b8:79:1b:d8:86:54:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Aug 23 18:55:00 2023 GMT
            Not After : Aug 21 19:00:00 2024 GMT
        Subject: CN=3082010A0282010100B0F9B419081E862DE916185944954985528C1E23B69416EB51B48E4ECF1B1C8B2E21206A60877387717B7F1F90C7631548CA13CB9C1E00F5FD90B572BA33CBE312E7BCC825ECF60DA9C86A48BE460216E14ECCB5B593960B864EF6CF7DC90DD1918874D65AEC17DD7B0515E48082AF4B294E500BFF5EEF33FA97CAF3C9FCF3CF446604AA33953A72F406FDB0B5D3051E53A8CB6FE4D1C8790EEF7EDE98993BD00F4B507A100943A426D58BB0535C3C48F4BD9727A6DBE7CF46F08330616FFF4D12C81AB1DBDE5B60BF37AF02FA56E8EB979C33808847BAA9BCB37BF972DB5CE97888F95BD75AA443E0700055D5EB60FE5BD53015E25B522DE5918F8298D1D9D50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:b4:19:08:1e:86:2d:e9:16:18:59:44:95:
                    49:85:52:8c:1e:23:b6:94:16:eb:51:b4:8e:4e:cf:
                    1b:1c:8b:2e:21:20:6a:60:87:73:87:71:7b:7f:1f:
                    90:c7:63:15:48:ca:13:cb:9c:1e:00:f5:fd:90:b5:
                    72:ba:33:cb:e3:12:e7:bc:c8:25:ec:f6:0d:a9:c8:
                    6a:48:be:46:02:16:e1:4e:cc:b5:b5:93:96:0b:86:
                    4e:f6:cf:7d:c9:0d:d1:91:88:74:d6:5a:ec:17:dd:
                    7b:05:15:e4:80:82:af:4b:29:4e:50:0b:ff:5e:ef:
                    33:fa:97:ca:f3:c9:fc:f3:cf:44:66:04:aa:33:95:
                    3a:72:f4:06:fd:b0:b5:d3:05:1e:53:a8:cb:6f:e4:
                    d1:c8:79:0e:ef:7e:de:98:99:3b:d0:0f:4b:50:7a:
                    10:09:43:a4:26:d5:8b:b0:53:5c:3c:48:f4:bd:97:
                    27:a6:db:e7:cf:46:f0:83:30:61:6f:ff:4d:12:c8:
                    1a:b1:db:de:5b:60:bf:37:af:02:fa:56:e8:eb:97:
                    9c:33:80:88:47:ba:a9:bc:b3:7b:f9:72:db:5c:e9:
                    78:88:f9:5b:d7:5a:a4:43:e0:70:00:55:d5:eb:60:
                    fe:5b:d5:30:15:e2:5b:52:2d:e5:91:8f:82:98:d1:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:22:94:F3:F9:5B:A8:4C:9E:08:19:06:94:14:0D:7D:C2:B3:F4:F3
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37302e33322e302f32322d3234203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:08:8e:5d:99:b0:c3:09:3a:ba:a2:f8:cc:e0:8e:3c:a0:65:
         7b:07:a8:c0:a6:52:f6:b0:5d:c3:6c:81:7f:9b:5d:b5:9c:34:
         b3:a6:c6:24:0e:46:1f:3a:ad:6a:ab:92:35:a0:9a:f7:bf:9d:
         4e:d8:c3:ba:68:cd:e9:91:e4:b3:f0:ca:57:ea:fa:5f:e4:5f:
         d7:9a:88:bc:f0:81:35:a5:b1:65:6e:b1:1c:6d:ce:a4:62:8b:
         7a:d1:2f:98:cf:57:ef:72:79:7d:8b:2e:6b:0d:81:4e:ac:e5:
         61:48:eb:45:97:a4:d3:34:9e:16:d1:8c:31:19:55:18:d8:13:
         19:18:70:f7:f1:b2:10:a3:93:7a:53:91:c9:25:51:98:9b:1f:
         5c:1b:17:c8:33:50:1f:06:42:08:d9:57:b7:50:c5:27:eb:be:
         a3:d8:35:77:77:c3:6c:c2:6a:15:55:42:24:8d:8a:d1:d4:86:
         20:a3:c4:0b:e7:20:ea:69:72:78:a4:9c:f3:0b:f5:de:34:c9:
         6e:1c:d6:71:2c:77:4e:ef:db:32:7d:2b:71:ed:1c:2a:98:c0:
         f3:fb:b9:0f:96:46:4b:d5:d1:77:9f:3d:ca:ce:29:40:61:68:
         50:55:8a:84:e8:c9:0d:9e:7d:bd:c8:da:44:87:48:03:b2:34:
         09:ba:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org