Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230372e302f32342d3234203d3e20323639343937.roa
File:                     34352e3138372e3230372e302f32342d3234203d3e20323639343937.roa (raw, json)
Hash identifier:          Veri3xgmQ0mJpDu6DbD5Ry5BwzastS70l6nn4FQLW/k=
Subject key identifier:   30:65:EF:46:8E:60:F2:C7:8B:43:01:20:D0:74:81:D6:D2:AB:88:67
Certificate issuer:       /CN=9705DAF862839CC953B88777D3FF774FCD7CFC22
Certificate serial:       2353EDA79C07A5D681A723339C5F5850FE8EEE68
Authority key identifier: 97:05:DA:F8:62:83:9C:C9:53:B8:87:77:D3:FF:77:4F:CD:7C:FC:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9705DAF862839CC953B88777D3FF774FCD7CFC22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230372e302f32342d3234203d3e20323639343937.roa
Signing time:             Sat 09 Dec 2023 14:42:29 +0000
ROA not before:           Sat 09 Dec 2023 14:37:29 +0000
ROA not after:            Sat 07 Dec 2024 14:42:29 +0000
asID:                     269497
IP address blocks:        45.187.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:53:ed:a7:9c:07:a5:d6:81:a7:23:33:9c:5f:58:50:fe:8e:ee:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9705DAF862839CC953B88777D3FF774FCD7CFC22
        Validity
            Not Before: Dec  9 14:37:29 2023 GMT
            Not After : Dec  7 14:42:29 2024 GMT
        Subject: CN=3065EF468E60F2C78B430120D07481D6D2AB8867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:52:08:ac:d7:d7:f7:78:46:8d:17:c7:37:
                    eb:33:05:bb:e2:d3:ac:19:76:39:c6:a4:42:02:ab:
                    33:82:95:2b:7f:22:b4:54:83:bf:01:a5:8f:fb:21:
                    3d:b0:65:12:19:72:12:b7:33:b3:14:df:33:cc:91:
                    df:cb:86:95:b9:7a:b8:7b:79:29:a4:4d:08:08:55:
                    ea:c3:70:eb:80:ab:81:95:78:c7:de:22:72:db:6c:
                    1b:f4:b2:76:ee:0f:42:5e:f2:e7:a3:30:f2:26:2e:
                    b5:3c:9e:34:2c:39:7e:d7:1f:0a:a6:03:e3:91:69:
                    79:1b:c3:df:fc:4d:44:06:4a:96:2c:2f:bb:35:29:
                    de:44:0c:6d:5e:d7:f1:54:23:f1:e7:52:c4:32:c9:
                    c7:fa:b9:aa:db:39:80:9a:46:83:26:f6:fa:54:9b:
                    55:3f:09:4f:38:ec:55:51:50:e6:dd:69:04:41:80:
                    c4:0a:4f:3e:77:ea:95:b8:97:7c:55:18:7b:b9:8a:
                    93:b4:f3:fc:af:fc:49:25:c3:d5:cf:a0:37:87:d1:
                    dd:72:28:18:80:50:d5:6c:41:ca:75:fe:b3:69:f0:
                    0d:94:76:f4:cc:eb:ba:39:77:c1:25:40:24:c6:cc:
                    6e:cf:18:9f:0e:05:d4:bb:9c:e0:7e:1e:00:f6:b6:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:65:EF:46:8E:60:F2:C7:8B:43:01:20:D0:74:81:D6:D2:AB:88:67
            X509v3 Authority Key Identifier:
                keyid:97:05:DA:F8:62:83:9C:C9:53:B8:87:77:D3:FF:77:4F:CD:7C:FC:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/9705DAF862839CC953B88777D3FF774FCD7CFC22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9705DAF862839CC953B88777D3FF774FCD7CFC22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230372e302f32342d3234203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:e7:73:58:cf:24:ff:72:17:4e:2c:be:b0:84:85:bd:16:4b:
         aa:8f:22:d4:86:95:9d:39:48:61:c5:42:1f:6f:c4:56:d3:b2:
         5f:43:09:f1:d0:dc:32:c3:0d:23:bd:67:a0:4b:ac:3d:24:ec:
         02:f9:cc:cc:36:da:62:43:cb:9e:67:80:b5:1a:71:2c:46:b6:
         4a:93:f4:33:b3:b9:d4:c7:c8:2e:d7:63:3c:ae:67:80:44:2c:
         5f:15:02:64:bf:17:42:aa:9d:7c:8d:f9:53:c4:3f:6c:34:e4:
         16:1d:08:f4:2a:c8:b6:b9:49:58:05:9a:c2:0d:a2:43:17:9a:
         bd:bb:ed:fd:5e:83:97:5c:b0:2b:00:b9:37:61:d2:44:9c:a5:
         f4:a4:0c:7f:5e:96:ce:c6:08:39:b5:dd:97:66:de:89:33:9a:
         e2:a7:80:41:8a:3e:63:70:b2:23:31:c1:d8:95:e4:f7:33:69:
         1c:b2:86:1c:bb:65:07:32:82:3d:6a:ee:e0:67:c2:72:f9:c9:
         97:f3:b4:d2:d7:7f:41:93:2b:4c:40:de:d9:c7:df:cd:b2:26:
         4f:f2:b1:70:45:c8:d0:ae:6c:5a:79:57:d2:7e:54:20:74:77:
         89:4b:97:11:75:04:12:b3:47:5c:f5:e6:ed:47:bd:ca:9c:37:
         3d:d9:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org