Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37362e302f32322d3234203d3e20323637353434.roa
File:                     34352e37312e37362e302f32322d3234203d3e20323637353434.roa (raw, json)
Hash identifier:          JHb3YiEtUevjq8GhSDGiEj/EJo90jfyox4LKmyiuo1o=
Subject key identifier:   7E:9A:D7:EC:FE:6A:65:F7:2F:45:24:35:BA:C0:A4:C8:6D:8A:A3:4A
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       72C5495227FC53213A920F3B8BABB25AD8889F4E
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37362e302f32322d3234203d3e20323637353434.roa
Signing time:             Tue 25 Jul 2023 20:51:27 +0000
ROA not before:           Tue 25 Jul 2023 20:46:27 +0000
ROA not after:            Tue 23 Jul 2024 20:51:27 +0000
asID:                     267544
IP address blocks:        45.71.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c5:49:52:27:fc:53:21:3a:92:0f:3b:8b:ab:b2:5a:d8:88:9f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Jul 25 20:46:27 2023 GMT
            Not After : Jul 23 20:51:27 2024 GMT
        Subject: CN=3082010A0282010100AB5B88C0C0990DEB91C983C13C3818F5914881B5BF73D55A55E6F3C0E65D5C201C20313BA86A80B273B9E61C374467D2463181B9B8BF6245F44DBACE649E29ACE97C0DFC515E335182EEEE31DA3DF3606ED200809122D90BF39FC30A8AD3890BCAA7A4DCD9DDD61D5BE71A29CD0E7888133C6BBC46DC4775D905F6DFD2CCB77144E3F324F9AB0D2EE5A2620C5634CD75105B1495E24104AE93872450A707DB86F402BB4587DF22FF580815A34FDB3CC1940B99CB9E3095D70D2D2DEE34C6982B921AF2CF9D0DD64FE7438118662D86B6A13E812AF91104F1E68D6F3B9C1B1438CDEC91B2F02289D1388ACC1FD34F5515F00FC4282DB4137B72EA4DFFE67BD2950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:88:c0:c0:99:0d:eb:91:c9:83:c1:3c:38:
                    18:f5:91:48:81:b5:bf:73:d5:5a:55:e6:f3:c0:e6:
                    5d:5c:20:1c:20:31:3b:a8:6a:80:b2:73:b9:e6:1c:
                    37:44:67:d2:46:31:81:b9:b8:bf:62:45:f4:4d:ba:
                    ce:64:9e:29:ac:e9:7c:0d:fc:51:5e:33:51:82:ee:
                    ee:31:da:3d:f3:60:6e:d2:00:80:91:22:d9:0b:f3:
                    9f:c3:0a:8a:d3:89:0b:ca:a7:a4:dc:d9:dd:d6:1d:
                    5b:e7:1a:29:cd:0e:78:88:13:3c:6b:bc:46:dc:47:
                    75:d9:05:f6:df:d2:cc:b7:71:44:e3:f3:24:f9:ab:
                    0d:2e:e5:a2:62:0c:56:34:cd:75:10:5b:14:95:e2:
                    41:04:ae:93:87:24:50:a7:07:db:86:f4:02:bb:45:
                    87:df:22:ff:58:08:15:a3:4f:db:3c:c1:94:0b:99:
                    cb:9e:30:95:d7:0d:2d:2d:ee:34:c6:98:2b:92:1a:
                    f2:cf:9d:0d:d6:4f:e7:43:81:18:66:2d:86:b6:a1:
                    3e:81:2a:f9:11:04:f1:e6:8d:6f:3b:9c:1b:14:38:
                    cd:ec:91:b2:f0:22:89:d1:38:8a:cc:1f:d3:4f:55:
                    15:f0:0f:c4:28:2d:b4:13:7b:72:ea:4d:ff:e6:7b:
                    d2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9A:D7:EC:FE:6A:65:F7:2F:45:24:35:BA:C0:A4:C8:6D:8A:A3:4A
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37362e302f32322d3234203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:d3:c3:d9:bc:8b:41:01:9b:86:03:35:2f:32:ba:85:c4:e2:
         2d:da:5a:85:2b:f0:e6:1b:08:88:a0:b0:f7:95:1c:56:51:a6:
         d3:8e:55:94:31:3b:e3:cf:be:a7:bc:bf:a2:1c:ef:49:d4:4f:
         b3:28:cb:d3:d7:db:4c:76:af:a4:4d:08:45:08:1e:cc:96:79:
         d8:d2:e4:77:f3:1e:d3:94:71:6f:d8:a4:36:fb:6d:5d:4d:49:
         a1:7b:f9:16:f6:fb:7d:5c:2f:1f:13:af:18:fc:51:4f:6e:8e:
         02:18:8e:e0:1b:c0:2b:66:6f:38:07:ab:eb:35:4e:75:2f:85:
         b5:5f:36:20:fa:aa:9c:9b:49:5c:5e:16:da:2f:aa:5b:4c:46:
         9e:4f:5c:25:79:17:74:d1:a8:c6:6a:37:d4:0e:fb:a8:35:d7:
         96:b9:9b:e0:32:9a:f5:50:17:0e:35:0a:bb:8d:49:82:bf:0a:
         ab:31:e9:49:95:45:36:62:62:65:f8:01:87:e7:b7:91:e7:80:
         9e:aa:c1:68:d7:75:dc:c5:59:38:ae:17:5b:17:31:5f:eb:56:
         02:3b:8a:00:77:39:c2:43:3b:ec:16:89:d2:08:01:2a:2e:18:
         ab:1e:d5:05:29:4d:32:fc:b0:ec:94:c1:20:70:c0:56:ab:ea:
         b3:f6:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org