Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37362e302f32332d3233203d3e20323637353434.roa
File:                     34352e37312e37362e302f32332d3233203d3e20323637353434.roa (raw, json)
Hash identifier:          JxWUNnF0pupIVqqW1GojRxRC2DcMt0G0C9odzt2EZkE=
Subject key identifier:   FE:B1:DE:2A:77:2D:FA:19:08:FA:0E:6E:CB:F2:B2:BD:F8:41:0C:20
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       1FC8F9A9683EA44D9F9275B3BBCD83FCB01EEAD7
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37362e302f32332d3233203d3e20323637353434.roa
Signing time:             Tue 25 Jul 2023 13:30:14 +0000
ROA not before:           Tue 25 Jul 2023 13:25:14 +0000
ROA not after:            Tue 23 Jul 2024 13:30:14 +0000
asID:                     267544
IP address blocks:        45.71.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c8:f9:a9:68:3e:a4:4d:9f:92:75:b3:bb:cd:83:fc:b0:1e:ea:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Jul 25 13:25:14 2023 GMT
            Not After : Jul 23 13:30:14 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:89:43:1d:00:24:4b:15:f4:c2:f8:9a:1b:
                    03:7c:1a:25:82:4b:f4:0c:f0:d4:6f:22:ab:36:d3:
                    b1:cf:2f:9b:d5:08:e7:a0:0e:85:c9:f6:2c:21:4d:
                    df:b3:83:9b:c2:be:07:67:9a:b3:50:ef:01:92:de:
                    7e:72:06:58:f8:38:d9:81:db:fa:7b:1b:c6:9d:d9:
                    9f:18:85:d4:7d:7a:c2:89:03:cd:3b:f5:93:52:3c:
                    cc:fa:93:05:4d:8e:b2:a6:25:15:df:42:00:73:0a:
                    49:bd:35:0b:1d:f2:95:3c:c8:d4:b4:d1:92:52:d3:
                    ad:05:01:f8:d4:5a:c0:29:05:9f:a8:40:58:b2:7b:
                    df:64:12:88:73:d9:59:b6:05:43:3b:78:fd:bb:bd:
                    6c:ea:28:56:e7:e7:07:43:40:fc:2d:2e:aa:a0:f3:
                    48:49:27:69:b8:74:5b:47:f4:7f:a2:c7:ab:6f:82:
                    a0:15:8d:77:51:52:27:05:87:de:22:34:a3:da:af:
                    59:12:44:77:0b:c9:71:c3:2f:ff:69:0d:1f:44:33:
                    c1:73:d5:e8:d4:bd:b5:45:53:6a:a3:22:da:7d:c9:
                    2f:ba:f3:dd:56:ba:8c:b1:06:77:00:7a:2c:35:f1:
                    af:c9:b6:1b:30:4e:a5:14:b3:b9:ad:5d:90:47:73:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B1:DE:2A:77:2D:FA:19:08:FA:0E:6E:CB:F2:B2:BD:F8:41:0C:20
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37362e302f32332d3233203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:62:ae:0b:c9:2c:a9:e2:b5:8d:71:6c:1e:85:05:71:c4:34:
         ec:97:0c:17:9a:d8:bf:4a:15:77:64:c6:ae:7b:31:e4:de:c1:
         da:0b:85:59:9e:6f:c5:45:e9:1a:73:9e:db:a9:4d:56:99:ef:
         23:30:b2:b2:f5:ef:f6:30:8c:39:e1:f9:90:3f:36:fb:83:6b:
         f0:9c:ad:85:7d:c9:07:00:20:e0:8b:56:0e:4f:75:20:d1:7c:
         31:28:6b:b6:32:3d:03:08:6c:ad:d3:7e:06:9d:a5:15:3c:76:
         04:5e:dd:17:f2:b6:23:05:c5:92:f1:5e:8b:cb:1b:7c:18:2b:
         6a:89:56:37:b9:d3:da:51:3e:96:a5:d7:23:8f:14:eb:e5:62:
         88:32:f0:b0:33:10:57:da:cb:c1:4c:88:3f:47:88:d7:45:24:
         c0:3f:a7:e9:ab:75:78:75:df:5c:f0:e8:aa:17:32:4c:d4:90:
         e9:17:c7:b0:61:90:fd:e9:24:e9:96:f0:a1:21:3a:22:29:71:
         6f:e2:77:dc:78:bf:58:1e:53:35:96:1d:43:f4:2b:25:3a:2c:
         8d:9f:1d:ca:8f:aa:6b:92:75:e8:f8:81:aa:a7:32:48:71:57:
         85:23:2d:3f:e3:37:e2:08:9a:cf:00:b3:bc:16:11:10:e5:65:
         1e:9f:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org