Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/34352e3138342e382e302f32322d3332203d3e20323639333037.roa
File:                     34352e3138342e382e302f32322d3332203d3e20323639333037.roa (raw, json)
Hash identifier:          Pp+fLlKiee5b8Wk+t1a8mljFD4xVry7lG0v1sey1RCc=
Subject key identifier:   00:5F:36:7F:08:74:8D:40:71:92:86:1A:08:69:79:7B:D2:53:A2:B0
Certificate issuer:       /CN=AF81B7592843B25D7FF58DE673BB55B14E953EA0
Certificate serial:       4BA4B7C13876668C432F6D07EF230CAF838D882C
Authority key identifier: AF:81:B7:59:28:43:B2:5D:7F:F5:8D:E6:73:BB:55:B1:4E:95:3E:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF81B7592843B25D7FF58DE673BB55B14E953EA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/34352e3138342e382e302f32322d3332203d3e20323639333037.roa
Signing time:             Fri 11 Aug 2023 20:03:09 +0000
ROA not before:           Fri 11 Aug 2023 19:58:09 +0000
ROA not after:            Fri 09 Aug 2024 20:03:09 +0000
asID:                     269307
IP address blocks:        45.184.8.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a4:b7:c1:38:76:66:8c:43:2f:6d:07:ef:23:0c:af:83:8d:88:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF81B7592843B25D7FF58DE673BB55B14E953EA0
        Validity
            Not Before: Aug 11 19:58:09 2023 GMT
            Not After : Aug  9 20:03:09 2024 GMT
        Subject: CN=005F367F08748D407192861A0869797BD253A2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:89:11:5a:fe:e0:1f:68:07:40:41:d8:72:
                    2e:5a:a5:86:49:78:e1:bd:a5:de:0c:c8:57:35:65:
                    8b:1b:37:43:25:14:6a:a4:f0:6c:a1:11:e2:8d:4b:
                    93:8f:8f:b1:5f:52:19:04:b6:2a:0e:1b:dd:00:e0:
                    93:b2:20:2d:13:11:e9:88:8f:b0:30:0b:e3:07:95:
                    d1:16:db:f0:a9:56:13:00:ae:a9:57:14:d5:04:5f:
                    8f:21:6c:68:10:c1:2e:78:4c:2e:da:5f:b7:10:8d:
                    bd:eb:63:18:97:40:6d:cf:05:e3:78:70:e0:7e:0b:
                    97:16:39:f7:97:b8:0b:02:14:b3:b9:e3:2f:d7:76:
                    b8:fa:f2:99:f6:6b:c5:b9:29:49:25:4c:63:a5:bb:
                    f9:50:e2:74:ca:4d:ac:31:25:68:e1:a2:71:43:47:
                    0e:a8:38:e9:2f:5b:a4:71:b2:5e:4f:2e:c3:5e:1f:
                    3e:f6:c7:44:fc:00:39:8c:d4:9c:ad:ba:74:c4:a7:
                    24:95:ac:d9:a1:b4:96:53:48:d0:15:32:d2:2f:2e:
                    fd:e6:53:22:13:84:be:be:0d:bc:e1:ef:73:b9:6d:
                    16:40:4e:55:12:b5:c0:fc:0a:13:f2:83:e1:27:9a:
                    15:cf:fa:e4:82:5f:1f:d5:27:f6:fd:ed:d9:f5:67:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5F:36:7F:08:74:8D:40:71:92:86:1A:08:69:79:7B:D2:53:A2:B0
            X509v3 Authority Key Identifier:
                keyid:AF:81:B7:59:28:43:B2:5D:7F:F5:8D:E6:73:BB:55:B1:4E:95:3E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/AF81B7592843B25D7FF58DE673BB55B14E953EA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF81B7592843B25D7FF58DE673BB55B14E953EA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/34352e3138342e382e302f32322d3332203d3e20323639333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:11:58:c4:7b:18:8e:6e:2b:2d:77:c1:35:de:d4:a8:e0:
         14:ba:f7:a5:58:02:e0:2c:87:9a:81:69:e4:30:b3:c4:13:fb:
         2f:65:67:57:2c:44:0b:bc:cb:f9:57:8e:0a:78:b6:33:f5:85:
         62:fa:a4:70:e5:85:70:19:7a:ab:53:d5:2a:0f:20:86:68:c2:
         66:e8:9a:4f:61:0e:b9:61:71:97:00:c8:c3:41:e8:d2:08:02:
         fe:29:01:80:11:51:40:81:81:76:66:a3:5e:34:5f:8e:ce:5b:
         15:57:b4:b9:37:d6:27:c3:49:3e:3c:ef:89:e4:b3:d5:7a:79:
         15:dc:fe:f2:db:b3:16:0f:d3:e4:76:7d:1a:7d:11:b3:76:fd:
         10:0b:c3:5c:a1:89:50:55:0c:94:21:85:a4:ce:78:e0:55:a8:
         2e:7c:44:5b:bc:bc:99:34:51:31:a3:04:57:c4:ec:32:8d:5c:
         01:e2:fe:f3:cf:09:d4:93:5d:ec:47:1b:e8:77:a5:0d:7a:03:
         9f:64:58:d3:15:bb:df:ea:22:80:db:7d:a8:57:27:42:1b:98:
         dd:1e:c0:dc:cd:5e:8e:da:e8:2c:f3:ab:6a:dd:ba:e8:aa:3e:
         b9:ba:a4:54:fa:14:89:92:74:30:bc:75:d9:f5:d3:9a:45:55:
         fc:01:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org