Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32332d3233203d3e20323636353238.roa
File:                     34352e36352e3132382e302f32332d3233203d3e20323636353238.roa (raw, json)
Hash identifier:          VyDIFVoX2B81G301E/Bjh4AZVqxf0UaFjdKtMaI5zW8=
Subject key identifier:   AE:58:BE:A3:ED:F0:A8:D2:43:C9:82:E3:6B:3C:E1:F1:7D:BF:BA:04
Certificate issuer:       /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial:       69166C298167ECB4B5891BAB175DDEDC9989B0B2
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32332d3233203d3e20323636353238.roa
Signing time:             Wed 31 May 2023 00:02:55 +0000
ROA not before:           Tue 30 May 2023 23:57:55 +0000
ROA not after:            Wed 29 May 2024 00:02:55 +0000
asID:                     266528
IP address blocks:        45.65.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:16:6c:29:81:67:ec:b4:b5:89:1b:ab:17:5d:de:dc:99:89:b0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
        Validity
            Not Before: May 30 23:57:55 2023 GMT
            Not After : May 29 00:02:55 2024 GMT
        Subject: CN=AE58BEA3EDF0A8D243C982E36B3CE1F17DBFBA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:4a:b1:8e:59:30:d0:6d:44:fa:eb:46:8f:
                    3a:8e:d9:4b:a2:d3:67:b8:7b:9b:36:c6:67:a8:53:
                    e3:02:c5:a7:71:4a:d2:7a:22:2e:41:64:6a:0a:e1:
                    01:ad:2d:90:33:8a:38:ff:f1:43:6d:d0:ea:ed:aa:
                    b0:40:b3:e6:f9:52:fe:1a:0b:1d:7a:a5:19:35:48:
                    97:7f:ee:13:51:8a:04:67:45:ee:8a:77:ec:b3:17:
                    69:78:fb:cb:28:82:db:b3:ef:4d:5d:9d:4b:3c:b2:
                    6b:e4:8b:d3:e4:c2:1e:ac:36:31:ea:d6:3c:9a:23:
                    56:bf:cc:0a:99:0c:7d:c0:20:c0:d5:51:fd:96:8d:
                    af:08:c6:45:c0:88:0d:4f:5e:f8:29:bf:fa:c2:87:
                    99:90:1a:40:07:6e:a8:56:95:6b:71:44:9c:a1:b2:
                    05:c4:ad:8b:08:31:22:01:47:fe:0d:96:e0:c0:a5:
                    4c:14:32:7e:c5:1d:a3:8d:d9:17:e1:1f:69:16:84:
                    e5:de:1e:aa:cc:02:6c:47:ed:15:bb:7c:ed:6b:30:
                    1c:60:4a:25:3d:1b:bb:28:60:3d:64:ba:1f:c7:e9:
                    c6:77:f9:4b:e8:90:a5:4b:ce:1e:d7:83:67:43:ca:
                    82:80:12:63:a7:df:78:18:73:bb:5b:bd:81:26:f6:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:58:BE:A3:ED:F0:A8:D2:43:C9:82:E3:6B:3C:E1:F1:7D:BF:BA:04
            X509v3 Authority Key Identifier:
                keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32332d3233203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:98:c0:a8:14:c7:f3:f8:46:a6:cc:ee:40:fe:69:7f:9c:59:
         43:93:b9:d9:b3:84:26:81:f4:b4:df:fc:fe:ed:93:c2:f9:11:
         73:dc:ea:36:74:1a:9d:4d:e4:91:78:19:22:1e:68:21:23:89:
         81:7c:3e:0f:ec:71:88:2e:d3:04:e9:95:75:a6:58:17:20:f6:
         cb:c5:07:24:58:a0:7a:4f:e5:5b:5c:94:f2:e3:90:75:c1:b7:
         01:4f:18:46:37:44:ec:98:ce:6d:20:cb:18:35:17:92:4e:3b:
         03:f3:33:c2:4a:bc:67:b3:85:c0:db:01:71:5f:43:f1:27:33:
         b9:3e:cb:7f:36:63:97:b8:ff:7a:2e:a4:d6:78:d6:c6:93:2a:
         7b:71:62:22:20:74:26:05:9b:cc:a9:ba:77:6e:0d:4e:be:43:
         31:64:de:0c:27:63:58:8c:b3:19:07:80:19:9c:fe:69:9b:43:
         be:2b:80:54:e5:c5:01:70:1c:07:6f:57:12:59:40:67:f5:0c:
         f3:ce:2c:de:87:3f:26:f2:a1:35:c8:a8:23:76:db:31:23:3a:
         3a:66:17:a0:ee:ec:8e:70:38:fa:c1:e9:cf:22:d3:38:28:0e:
         39:ad:e0:0f:17:70:f7:4a:54:c4:cc:f3:0c:b9:af:65:3c:b2:
         96:01:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org