Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35392e302f32342d3234203d3e20323637323439.roa
File:                     34352e3233322e35392e302f32342d3234203d3e20323637323439.roa (raw, json)
Hash identifier:          0dsrFyyfPpiD8z4d+/06VOBPG0MhhcZwGngWJnW1JGw=
Subject key identifier:   1F:24:32:9C:CF:88:2E:1A:0C:39:10:4C:21:B1:5C:EE:67:BB:EC:BB
Certificate issuer:       /CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
Certificate serial:       79BBCD6C0FEF4A75D1C1D32FB68531544CAAB270
Authority key identifier: E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35392e302f32342d3234203d3e20323637323439.roa
Signing time:             Thu 15 Feb 2024 13:49:28 +0000
ROA not before:           Thu 15 Feb 2024 13:44:28 +0000
ROA not after:            Thu 13 Feb 2025 13:49:28 +0000
asID:                     267249
IP address blocks:        45.232.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bb:cd:6c:0f:ef:4a:75:d1:c1:d3:2f:b6:85:31:54:4c:aa:b2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D860B422ECC27B0FE4672C6254D3D122E15F60
        Validity
            Not Before: Feb 15 13:44:28 2024 GMT
            Not After : Feb 13 13:49:28 2025 GMT
        Subject: CN=1F24329CCF882E1A0C39104C21B15CEE67BBECBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:ef:aa:d1:8e:e5:27:ac:6f:47:41:8d:92:
                    fd:7c:a9:a3:20:bd:7a:7b:05:21:e8:53:1c:59:f8:
                    b6:ea:6b:d1:96:d1:a2:ac:b2:3c:ab:95:a6:6a:33:
                    89:31:eb:68:4f:9d:86:a0:fc:2f:0c:c3:fd:b7:88:
                    ef:2b:9c:4a:fc:83:37:e2:16:8e:65:73:a8:bb:9f:
                    6c:22:01:7e:71:f1:66:9f:62:25:18:1d:cb:79:9f:
                    d6:83:07:21:48:08:08:3e:c6:0d:ca:47:ff:e3:fb:
                    43:9b:80:7d:95:72:87:98:fa:02:d2:94:fb:8f:1c:
                    b2:6c:42:2a:b2:14:31:4b:4d:65:53:82:20:8d:59:
                    b0:f6:5b:49:bd:ad:92:d9:53:21:28:be:dd:47:cd:
                    11:b2:08:ca:78:d5:4b:ae:83:5e:36:23:71:5a:7e:
                    c2:3a:83:e5:ec:6b:ac:33:21:bd:4a:c6:3b:89:9a:
                    69:24:49:65:14:68:6d:21:05:b2:cc:5f:be:cd:d7:
                    a5:cf:c1:80:f4:e1:03:1e:d8:62:db:54:35:d7:9a:
                    6c:32:a9:8b:85:7e:2f:f9:e5:df:54:68:84:fc:26:
                    f1:ad:87:3a:cb:cf:aa:38:9f:5a:55:d3:ba:55:59:
                    bd:7e:46:dc:9f:46:98:90:15:a6:68:ce:5c:58:e8:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:24:32:9C:CF:88:2E:1A:0C:39:10:4C:21:B1:5C:EE:67:BB:EC:BB
            X509v3 Authority Key Identifier:
                keyid:E8:D8:60:B4:22:EC:C2:7B:0F:E4:67:2C:62:54:D3:D1:22:E1:5F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D860B422ECC27B0FE4672C6254D3D122E15F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/0/34352e3233322e35392e302f32342d3234203d3e20323637323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:8f:3e:bf:10:bb:5a:ef:71:b7:76:9d:dd:9a:92:49:91:08:
         f4:83:29:14:c9:88:d8:62:65:ee:d1:26:9e:1a:81:6e:2e:a1:
         be:3f:37:6d:4e:e7:12:4d:4d:d7:eb:35:e9:bb:41:1f:3e:8b:
         7e:38:3a:39:e2:5b:bb:da:8a:52:25:f5:b7:5b:d6:b4:8d:08:
         11:c4:94:bf:ac:77:af:2f:91:a5:c0:4f:35:16:49:28:29:37:
         28:0b:b9:c9:fe:1b:ad:17:09:f8:4b:c9:4f:a0:c5:dd:db:2e:
         f4:49:1f:7d:6d:5e:1c:e4:b6:67:27:66:d1:88:eb:8a:4a:c9:
         e9:ec:fb:94:42:dc:3f:96:26:df:e5:4c:d9:be:79:52:4c:8f:
         1b:98:22:0c:5c:f9:ee:c3:f6:60:6b:9e:2d:0b:19:67:68:db:
         8e:5f:93:0c:2b:da:24:a9:f8:fa:ed:de:b5:a2:6f:48:68:eb:
         32:8a:7b:a9:95:99:88:aa:b7:a5:b2:61:e2:14:8a:5d:8a:bb:
         32:87:f1:8a:45:b6:fe:22:c0:b1:10:8a:12:cb:d2:75:b0:44:
         24:b1:7e:da:4b:98:bd:4d:5e:36:41:3a:b4:c7:c9:51:94:e1:
         c6:95:af:77:3f:84:21:d3:fb:41:e2:5c:a4:bc:29:2d:93:5b:
         b1:c8:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org