Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37382e302f32332d3233203d3e20323637353434.roa
File:                     34352e37312e37382e302f32332d3233203d3e20323637353434.roa (raw, json)
Hash identifier:          lefCKBiN9patWSpYqm4o41pEAryBM2c6dQ6buRk3VKg=
Subject key identifier:   54:25:D7:F2:E7:49:8C:F4:42:FC:4F:AE:E1:D3:84:28:83:16:6C:96
Certificate issuer:       /CN=AE65C1064954B88FFF832DCC11EDAA389432A623
Certificate serial:       30143637800A3BEC2512F06FF758D9D891575367
Authority key identifier: AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37382e302f32332d3233203d3e20323637353434.roa
Signing time:             Tue 25 Jul 2023 13:30:32 +0000
ROA not before:           Tue 25 Jul 2023 13:25:32 +0000
ROA not after:            Tue 23 Jul 2024 13:30:32 +0000
asID:                     267544
IP address blocks:        45.71.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:14:36:37:80:0a:3b:ec:25:12:f0:6f:f7:58:d9:d8:91:57:53:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE65C1064954B88FFF832DCC11EDAA389432A623
        Validity
            Not Before: Jul 25 13:25:32 2023 GMT
            Not After : Jul 23 13:30:32 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:29:72:40:ad:b8:4f:14:e8:05:5c:a7:9f:
                    f4:bd:37:74:91:23:ca:31:81:86:db:e1:4a:af:ff:
                    a9:2c:f9:4d:20:66:76:22:6f:8f:bd:1c:cc:df:3d:
                    86:83:b6:f4:31:b1:4e:58:47:ab:8b:76:f1:d4:78:
                    2e:80:7b:d3:05:5e:1f:e1:26:53:e4:eb:0e:d0:06:
                    0a:79:22:a3:02:9d:c0:95:2e:4e:a6:6c:9f:b6:ca:
                    c7:06:ea:05:fe:76:1e:16:2f:1a:e7:8f:79:3c:78:
                    1a:3e:49:21:b1:a5:ef:f6:5c:e0:1f:58:83:56:1e:
                    10:c8:b9:00:ba:24:1b:a3:d7:25:89:d7:c5:24:b0:
                    82:1c:a0:6e:5f:88:a0:43:1d:42:00:2e:8f:16:10:
                    8c:21:50:83:b7:46:db:80:87:6c:f0:d8:1a:31:0a:
                    64:4f:83:c1:88:7f:22:54:bd:f2:01:05:2f:ea:43:
                    69:05:85:fc:06:51:aa:a7:38:78:5b:c9:50:2c:35:
                    6b:01:71:1e:0d:bf:83:34:2b:28:ff:f5:ea:38:88:
                    25:52:f3:a9:98:48:99:b9:cd:ec:41:cf:f2:36:6f:
                    71:21:1a:90:1b:e8:29:04:24:9e:2c:e3:30:6c:50:
                    e5:1e:b6:79:84:7e:50:54:d7:54:a8:55:9e:4c:42:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:25:D7:F2:E7:49:8C:F4:42:FC:4F:AE:E1:D3:84:28:83:16:6C:96
            X509v3 Authority Key Identifier:
                keyid:AE:65:C1:06:49:54:B8:8F:FF:83:2D:CC:11:ED:AA:38:94:32:A6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/AE65C1064954B88FFF832DCC11EDAA389432A623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE65C1064954B88FFF832DCC11EDAA389432A623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/0/34352e37312e37382e302f32332d3233203d3e20323637353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:0e:ac:4d:42:13:ef:1e:ef:09:77:3a:28:b1:d1:d9:3a:
         b2:88:c6:4b:15:21:dc:e9:b2:20:ce:75:1a:eb:e2:ee:d0:64:
         39:d0:55:55:f8:6d:68:be:6b:ee:08:54:e4:49:9d:cc:ff:ce:
         5f:91:ff:cd:d3:c5:91:0d:33:fe:d5:8a:58:9c:37:74:69:58:
         dc:72:d1:20:e9:a4:03:85:de:9b:e7:92:33:ea:92:28:f5:9d:
         27:a8:27:42:bf:f5:83:e5:87:ce:1b:1e:7c:90:06:8e:dd:91:
         af:60:5f:36:4f:80:36:01:a5:00:3c:ef:61:fe:75:6f:7d:fe:
         a2:f8:f8:a1:84:36:85:8b:1d:f8:4c:22:bd:cb:db:c3:2a:88:
         94:89:5d:79:51:1d:e7:5f:f3:83:06:e3:87:f3:fb:32:a3:ce:
         30:b9:75:33:29:76:28:7b:3b:2e:97:23:94:fe:1c:8a:2e:6c:
         3d:e3:ec:70:f4:0e:81:3b:46:ef:83:71:2a:f3:9a:00:59:70:
         76:5e:3d:e2:ad:12:73:e5:e0:db:47:88:e9:79:9b:8d:97:08:
         41:92:d8:cb:98:0f:50:32:59:e2:4a:3d:18:6f:29:c0:5c:f1:
         36:ae:b4:3f:dd:3a:cb:44:fe:25:25:ae:d6:a0:ee:47:7a:67:
         ec:d6:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org