Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39372e302f32342d3234203d3e20323639333732.roa
File:                     34352e3138352e39372e302f32342d3234203d3e20323639333732.roa (raw, json)
Hash identifier:          4+qTVfCn1l21zmdOFJA8bNgliKBjySbWvk2yXnOm5Ow=
Subject key identifier:   FB:62:4D:91:4A:96:92:94:3E:61:87:D4:41:04:38:AB:C7:AC:00:28
Certificate issuer:       /CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
Certificate serial:       3A9AC317A1B4FCF3A97A62D24F176969B28AA013
Authority key identifier: B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39372e302f32342d3234203d3e20323639333732.roa
Signing time:             Mon 18 Dec 2023 19:14:58 +0000
ROA not before:           Mon 18 Dec 2023 19:09:58 +0000
ROA not after:            Mon 16 Dec 2024 19:14:58 +0000
asID:                     269372
IP address blocks:        45.185.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9a:c3:17:a1:b4:fc:f3:a9:7a:62:d2:4f:17:69:69:b2:8a:a0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0DB8E204286BBFA4692145BA2D8CFAB9D810F29
        Validity
            Not Before: Dec 18 19:09:58 2023 GMT
            Not After : Dec 16 19:14:58 2024 GMT
        Subject: CN=FB624D914A9692943E6187D4410438ABC7AC0028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:9d:87:40:de:84:49:ec:07:6b:26:ac:a5:
                    95:b3:8a:3c:eb:22:76:27:31:8b:90:89:53:01:5f:
                    d8:bd:18:64:38:fc:dc:a5:95:69:85:31:9a:e8:a2:
                    1e:73:5f:1c:86:d1:fe:44:af:25:7a:12:04:7c:9e:
                    fa:08:36:86:f6:53:d4:f6:92:85:d9:ee:05:7c:f8:
                    a3:c0:82:f9:a9:5b:7b:e9:95:54:4f:d1:69:1c:5b:
                    08:57:66:2e:aa:89:9f:ad:e8:9d:8e:26:25:35:4b:
                    80:04:b1:87:38:bb:1d:c7:d5:da:eb:dc:c9:b0:d0:
                    cb:d5:6d:db:f2:e0:af:da:60:8b:ff:2e:2a:de:95:
                    4d:6b:dd:34:ad:35:40:58:41:14:08:76:68:10:1e:
                    d1:79:66:f4:11:55:96:1b:18:82:05:12:bf:20:b1:
                    1c:04:28:07:6d:b7:3d:bb:85:d1:d5:ea:bc:b6:c6:
                    c4:0d:c6:43:fc:01:55:a6:12:35:2f:d8:47:f6:79:
                    03:0a:34:87:e2:a4:ee:99:39:1e:8e:2d:1e:b4:a8:
                    07:cb:66:02:a0:32:f5:1f:10:4a:db:58:e2:41:14:
                    21:36:c3:9f:09:7c:41:87:43:86:c2:b4:d7:50:e2:
                    b2:15:59:79:a5:0f:1d:a7:0d:06:ec:e7:3b:00:1c:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:62:4D:91:4A:96:92:94:3E:61:87:D4:41:04:38:AB:C7:AC:00:28
            X509v3 Authority Key Identifier:
                keyid:B0:DB:8E:20:42:86:BB:FA:46:92:14:5B:A2:D8:CF:AB:9D:81:0F:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0DB8E204286BBFA4692145BA2D8CFAB9D810F29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/34352e3138352e39372e302f32342d3234203d3e20323639333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:46:b9:7c:10:be:66:4b:57:e0:87:76:02:97:75:93:d5:fd:
         94:ea:84:05:f4:95:e0:41:8f:32:4d:30:cf:ba:1b:ca:d0:0a:
         6e:5a:53:93:1d:a8:45:ea:b8:1e:89:a9:f4:f1:0f:f5:e3:a8:
         73:f8:dd:64:6a:4e:80:73:9a:53:f2:c3:c1:ee:d6:2f:d1:a0:
         2b:52:08:c7:cf:01:47:c7:a3:88:3c:d1:d4:67:41:10:42:cd:
         25:87:df:ac:f3:a7:dc:f6:fa:b6:4c:cb:4a:64:2c:ee:25:3d:
         1f:d3:6c:22:61:59:dd:19:6e:d8:2b:3a:4e:80:a7:b4:ee:af:
         95:cf:ac:92:3b:b3:8c:44:e2:34:0d:a5:b4:b7:d0:df:e7:d6:
         39:8c:c1:15:e8:fd:67:47:8c:3a:9c:77:b3:4b:a3:f6:c8:24:
         44:9b:70:51:5a:22:c3:9e:0e:33:9b:d8:c4:6b:c4:78:af:77:
         e7:d0:45:08:ba:92:85:56:25:59:61:6d:32:1c:dc:1d:d7:a8:
         10:d7:da:86:cf:61:a9:3a:d2:1a:2b:18:2f:f8:42:32:43:0c:
         8c:70:97:b3:bc:ca:63:cf:b6:9c:2a:92:76:14:4f:37:d6:07:
         fd:da:41:01:79:d9:3d:88:d1:38:03:a8:be:c0:67:4b:9f:84:
         ce:42:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:33 2024 by rpki-client on console-fra.rpki-client.org