Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32322d3234203d3e20323636323637.roa
File:                     34352e36352e3139322e302f32322d3234203d3e20323636323637.roa (raw, json)
Hash identifier:          Arwt7bmvIXpLhZo3YYQj1SMgOR4ObwJ9pkLLW+7y0bw=
Subject key identifier:   96:33:D3:A5:14:2A:4C:37:EB:2B:C9:31:B6:E8:80:D8:3C:50:70:D0
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       7AC13FA887C1CE5B343C7294595C1DE6F116EDD2
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32322d3234203d3e20323636323637.roa
Signing time:             Fri 19 Jan 2024 15:56:40 +0000
ROA not before:           Fri 19 Jan 2024 15:51:40 +0000
ROA not after:            Fri 17 Jan 2025 15:56:40 +0000
asID:                     266267
IP address blocks:        45.65.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c1:3f:a8:87:c1:ce:5b:34:3c:72:94:59:5c:1d:e6:f1:16:ed:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Jan 19 15:51:40 2024 GMT
            Not After : Jan 17 15:56:40 2025 GMT
        Subject: CN=9633D3A5142A4C37EB2BC931B6E880D83C5070D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:cd:46:59:cd:b7:41:e1:98:da:bd:79:1e:
                    d6:e9:26:c3:4c:3f:eb:06:3a:93:09:e9:e9:fa:ff:
                    df:1c:5b:f0:3e:17:30:97:1c:65:54:8b:12:3f:de:
                    38:c1:92:88:84:56:d9:fd:62:bb:e9:18:52:20:6a:
                    13:f5:b4:04:f9:e8:05:fd:f7:42:09:b3:84:4b:01:
                    32:ae:82:44:e5:5a:39:76:d7:83:82:97:68:3a:0b:
                    ad:6e:c1:61:ff:80:dd:4e:38:e6:75:c0:f4:97:e9:
                    00:2e:9c:97:ec:8f:f6:c3:71:cf:c7:03:67:ba:af:
                    58:26:bb:13:6f:1a:4d:11:53:b8:57:cc:f9:6e:79:
                    d2:20:0c:cf:bd:39:01:30:c6:e3:9e:aa:a8:b4:eb:
                    d6:5f:27:b4:62:14:ed:4b:3b:7e:c3:39:17:7a:18:
                    0c:1c:32:1f:cf:b8:e1:90:6c:98:e5:ac:31:c7:52:
                    76:ee:ac:bc:1a:83:35:f5:d6:1a:22:18:0c:af:43:
                    0a:16:41:32:79:91:e9:0f:e8:40:10:31:9f:70:91:
                    60:89:a1:dc:fd:cc:a6:6a:f0:da:96:05:73:f9:f8:
                    3f:97:94:1d:f2:0c:83:90:87:2a:7d:cb:ed:eb:b1:
                    55:4b:ec:a1:fb:31:ed:ee:bd:10:ed:a0:63:49:a8:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:33:D3:A5:14:2A:4C:37:EB:2B:C9:31:B6:E8:80:D8:3C:50:70:D0
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32322d3234203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:02:9c:71:40:3c:ce:fe:2c:8e:85:a1:c4:6e:71:3e:48:c9:
         85:9f:83:e0:f0:98:07:15:6f:e7:a2:e3:41:53:2f:a7:1b:36:
         3d:3d:d4:4c:ea:8e:7b:c5:03:9c:13:6a:2e:da:2b:af:1e:e4:
         64:02:21:29:eb:9a:b0:c6:d5:05:bf:01:ee:b2:98:77:35:6e:
         95:cf:10:47:16:c2:a4:da:8e:99:49:dc:51:c7:1e:49:0f:2b:
         31:47:e2:56:c9:3a:3a:1f:d8:92:02:09:55:47:fc:5c:09:df:
         12:3f:55:44:c4:87:04:25:df:a7:27:6b:45:ef:ae:af:22:da:
         cf:35:b0:c8:21:fd:77:a9:fd:63:ea:89:10:0d:3d:db:33:23:
         d2:fd:60:77:0e:46:aa:c1:2c:77:70:3f:8f:7a:c4:f6:b0:ef:
         0a:58:69:14:a2:70:ff:df:6a:e5:03:b9:b0:5b:f5:d8:1c:2e:
         35:e1:79:31:e0:20:0b:24:cd:bf:0e:6d:f5:85:53:1a:87:66:
         83:42:0c:8e:d3:7c:6f:64:44:30:a4:89:55:ca:ad:39:cc:0d:
         fd:d3:34:d1:02:5e:a7:2a:0f:c5:be:e9:72:97:c7:06:58:b8:
         c3:76:fe:82:1c:90:69:a6:41:2b:db:9b:93:3c:c2:ae:f9:13:
         d0:d5:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org