Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32322d3232203d3e20323636353238.roa
File:                     34352e36352e3132382e302f32322d3232203d3e20323636353238.roa (raw, json)
Hash identifier:          FU6ALJjX6T6YWvN94kPdlnrG2KyuHc3ThmcyPeCiINc=
Subject key identifier:   76:20:11:0A:C6:A6:53:74:1A:94:B6:5D:04:BA:90:7F:DC:A7:70:9C
Certificate issuer:       /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial:       66A8965AF56FFE88F038DFBA86F82B0854EAEE1C
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32322d3232203d3e20323636353238.roa
Signing time:             Wed 31 May 2023 00:02:55 +0000
ROA not before:           Tue 30 May 2023 23:57:55 +0000
ROA not after:            Wed 29 May 2024 00:02:55 +0000
asID:                     266528
IP address blocks:        45.65.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a8:96:5a:f5:6f:fe:88:f0:38:df:ba:86:f8:2b:08:54:ea:ee:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
        Validity
            Not Before: May 30 23:57:55 2023 GMT
            Not After : May 29 00:02:55 2024 GMT
        Subject: CN=7620110AC6A653741A94B65D04BA907FDCA7709C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:5b:a3:d8:5d:94:a6:74:3a:0a:3c:63:1f:
                    2b:83:5f:63:f0:f0:ec:e1:86:9b:f2:0a:e5:56:4a:
                    db:a1:ed:cb:1b:79:88:81:c4:af:79:d2:55:55:f7:
                    b2:b8:61:59:22:7f:4e:00:28:9f:58:31:44:fc:21:
                    68:85:b9:14:9f:2f:05:5f:f4:c9:e6:fc:68:fb:85:
                    96:2d:1f:19:81:9c:9f:44:93:84:47:e8:f8:73:fc:
                    d6:7b:c8:8c:31:fe:84:16:82:49:ac:f5:20:1a:df:
                    f2:99:b2:a9:dc:15:ee:ea:1c:41:d1:d9:c0:fd:09:
                    1c:26:9e:ef:02:34:08:40:e9:71:89:4e:0a:fb:11:
                    8f:6f:06:72:ab:6b:30:f0:b3:16:59:10:ad:51:59:
                    93:c9:33:1c:8a:50:22:59:c2:22:53:9a:df:b5:7a:
                    8b:12:49:bb:96:46:a2:14:95:ab:8f:45:8d:ba:64:
                    40:d2:7d:19:b1:89:0a:01:c4:28:68:6e:4c:26:de:
                    b8:38:7d:94:cf:7f:d4:fe:83:f9:d7:b0:ad:5b:d4:
                    e5:0e:65:6e:f8:af:e8:bc:f8:7f:d5:77:25:60:22:
                    51:8c:ca:7d:95:55:07:65:71:1e:41:2e:91:56:6c:
                    f9:51:b9:3d:fb:5e:d1:2a:47:be:cc:66:31:1a:b4:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:20:11:0A:C6:A6:53:74:1A:94:B6:5D:04:BA:90:7F:DC:A7:70:9C
            X509v3 Authority Key Identifier:
                keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32322d3232203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:33:f5:26:36:16:81:50:7b:21:65:d5:d4:c1:a0:90:3b:0a:
         39:8d:a2:92:e7:0f:6e:e9:32:64:6e:ff:41:0f:7c:c5:9b:95:
         15:9c:e0:d9:69:df:30:ff:24:f7:98:5c:0a:d0:74:41:29:0b:
         6e:e3:2d:e2:3a:3f:43:f6:65:ea:33:86:2c:26:05:70:22:7a:
         e5:e1:9e:10:96:9c:a4:ee:28:06:8b:34:cc:80:06:9e:1e:7a:
         10:ef:ad:a6:6c:1f:17:85:df:21:fe:0f:7d:41:bd:6f:09:7e:
         93:53:09:79:d9:64:4e:99:2a:55:57:be:17:b4:08:ee:41:34:
         1d:6f:12:0a:d7:35:ad:50:26:bf:a3:18:19:47:19:23:74:df:
         3f:ec:8b:61:aa:e3:32:88:c8:92:13:05:4f:5a:a9:88:89:76:
         f8:79:3d:10:92:8e:55:b8:ff:ac:3f:81:ed:0f:50:ed:61:3c:
         55:5f:cf:b5:9f:b9:3d:da:f9:b6:42:6b:df:b0:8e:7d:8a:81:
         7d:fb:eb:5d:1c:64:c5:73:c7:63:bd:01:b2:45:06:69:b8:f1:
         7d:b9:33:38:9e:06:d9:c6:73:81:d4:6a:12:6d:99:12:fd:3e:
         8b:f6:0a:37:d3:5f:b0:c1:60:9d:53:c1:5a:59:93:0d:dd:6c:
         80:a0:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org