Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa
File:                     34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa (raw, json)
Hash identifier:          XWBLbYj9Iw/M3hRrniB1Q08wm0diLAuxLSDwf7MsPGE=
Subject key identifier:   AA:D9:2F:A0:EC:53:3E:E7:72:AD:C5:66:8B:52:7E:F9:4F:56:47:DD
Certificate issuer:       /CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
Certificate serial:       65AC5D4EEB3E97D7E3EC1D97C6F136EE7C88F471
Authority key identifier: 75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa
Signing time:             Thu 09 Nov 2023 23:10:09 +0000
ROA not before:           Thu 09 Nov 2023 23:05:09 +0000
ROA not after:            Thu 07 Nov 2024 23:10:09 +0000
asID:                     269699
IP address blocks:        45.191.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ac:5d:4e:eb:3e:97:d7:e3:ec:1d:97:c6:f1:36:ee:7c:88:f4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7587F597C9C1E2232867D6F1F2C2B5703F7150D1
        Validity
            Not Before: Nov  9 23:05:09 2023 GMT
            Not After : Nov  7 23:10:09 2024 GMT
        Subject: CN=AAD92FA0EC533EE772ADC5668B527EF94F5647DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:86:c7:82:c4:4e:71:ed:ae:57:02:9d:64:
                    ad:71:aa:df:69:17:43:0e:1f:2d:2f:dc:2f:0e:6f:
                    ff:90:a9:9c:89:55:6a:f0:3d:9a:93:e0:78:7a:45:
                    62:a7:2e:af:dd:6a:00:09:a3:00:36:22:85:de:1b:
                    98:b4:3a:f8:32:99:2e:95:42:1d:b7:72:88:c0:32:
                    2f:6b:9f:f8:9d:4c:7e:b6:fc:23:f8:be:c7:08:23:
                    3c:51:49:6c:28:cb:79:2a:cb:22:45:f6:c3:f0:94:
                    ba:96:d1:93:75:44:e4:bd:2b:ac:19:b2:97:f0:4e:
                    42:5e:25:6d:d9:d0:2e:e4:ce:92:fd:d9:dd:f4:55:
                    d1:e2:81:ac:b9:03:09:fd:16:da:ee:65:54:4a:45:
                    55:e9:fe:ae:b1:44:b8:a7:d5:27:e2:dc:a9:dd:67:
                    bc:a0:0a:f8:18:b9:39:af:66:ea:4e:7f:fc:51:21:
                    d2:34:58:3d:63:02:c5:26:43:7e:5a:7c:0f:c6:6e:
                    26:48:1d:86:23:27:96:3a:af:aa:b9:26:73:00:bd:
                    f3:b2:dc:28:c8:ff:e7:41:96:15:e4:2a:96:eb:ae:
                    01:44:33:c7:5a:5d:ae:78:45:00:c6:bf:49:3b:48:
                    0a:b9:ff:1e:a5:a6:d6:18:2a:0d:7c:f6:b6:a6:e7:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D9:2F:A0:EC:53:3E:E7:72:AD:C5:66:8B:52:7E:F9:4F:56:47:DD
            X509v3 Authority Key Identifier:
                keyid:75:87:F5:97:C9:C1:E2:23:28:67:D6:F1:F2:C2:B5:70:3F:71:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7587F597C9C1E2232867D6F1F2C2B5703F7150D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/34352e3139312e3235342e302f32332d3233203d3e20323639363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:c1:b5:bc:68:04:f4:80:3b:d5:9f:f9:a7:51:6d:ad:73:
         62:45:01:38:8b:1b:9d:01:82:9c:2c:69:fc:a5:04:10:93:14:
         02:7d:4f:09:62:3f:b5:84:8d:6d:89:6a:6c:ff:a0:7c:ef:61:
         2f:e6:a7:fc:c9:72:6a:8b:bc:41:3d:4b:67:bd:fd:66:55:d7:
         12:19:a3:9b:cc:6c:7b:82:8a:46:96:c3:05:96:70:2c:7a:61:
         6a:ef:a4:05:a5:c7:ae:54:9e:7b:b6:c8:a5:7b:f8:68:9c:de:
         91:29:2b:65:8e:d2:2a:7a:b0:8f:4f:df:c6:6f:58:4d:76:70:
         8a:0c:99:56:8b:a4:94:41:b6:84:13:f5:75:35:2a:6d:52:c8:
         a7:52:65:e7:fc:51:3b:ae:b3:01:da:d3:0b:b1:8d:f4:37:fd:
         43:e3:89:49:13:03:bd:fc:68:6a:88:70:0d:56:af:42:96:a8:
         73:68:f2:99:57:6c:7d:b7:4b:4a:a2:e4:b2:db:5b:1e:7f:35:
         9a:e4:0b:5a:b1:93:08:2f:eb:d1:eb:5a:81:67:45:19:56:35:
         5b:d3:ce:ce:12:a1:43:fe:eb:5f:e0:29:11:1d:7c:00:e8:fb:
         a2:0c:89:19:c3:48:17:be:2a:60:42:d5:a3:fb:ee:b2:b9:99:
         19:76:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org