Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32332d3233203d3e20323636323637.roa
File:                     34352e36352e3139322e302f32332d3233203d3e20323636323637.roa (raw, json)
Hash identifier:          hUsQDkrB3LI6ix8TOFLCA/7KF3N1FmDeJQD2AYPV6b0=
Subject key identifier:   77:EC:A3:42:6D:0F:6F:3B:75:42:DD:95:39:E4:89:10:5E:93:01:F3
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       4B9B894CA9319839483BC4AE8B1CA6C431BC95D3
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32332d3233203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:35:18 +0000
ROA not before:           Thu 03 Aug 2023 17:30:18 +0000
ROA not after:            Thu 01 Aug 2024 17:35:18 +0000
asID:                     266267
IP address blocks:        45.65.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9b:89:4c:a9:31:98:39:48:3b:c4:ae:8b:1c:a6:c4:31:bc:95:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:30:18 2023 GMT
            Not After : Aug  1 17:35:18 2024 GMT
        Subject: CN=77ECA3426D0F6F3B7542DD9539E489105E9301F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:2b:e3:dd:21:d1:b5:f8:a1:ff:a5:cb:9a:
                    d7:2c:c5:b9:f0:62:f1:01:e2:90:b9:bf:2a:f4:7c:
                    53:23:92:60:ec:7c:7d:04:7f:0a:75:83:b3:82:8a:
                    2b:c3:26:e8:a5:40:97:bb:1b:1f:bd:24:d3:36:28:
                    6b:2f:30:b1:f0:13:72:13:dd:ca:8b:ce:4e:cd:73:
                    ca:e4:ad:e2:71:a3:ec:22:f4:16:b6:a2:55:b6:c8:
                    9b:e3:9a:5e:be:cc:18:bb:66:60:4d:14:fb:2a:e4:
                    f6:79:32:c6:d1:d7:5e:7d:9e:d4:23:2a:c6:ca:30:
                    9b:10:39:df:f6:4c:00:43:4e:48:ed:31:ec:cb:60:
                    60:3b:d2:f6:4f:a0:46:25:87:2d:a2:c0:fc:47:14:
                    be:0f:ec:56:ee:01:62:c8:28:0d:97:e7:ff:fc:22:
                    7f:f6:54:4a:4f:d8:d3:69:d4:4a:6d:b3:1a:ce:d5:
                    2b:3c:db:49:f9:ba:21:ba:ba:f1:9d:6d:7c:9b:7b:
                    14:bf:a9:dc:43:fc:cb:04:8a:63:9c:28:50:d8:3b:
                    e1:7d:b9:71:c6:b6:1d:dd:e9:d5:3b:42:09:a4:cb:
                    fb:0e:4f:f4:ea:a0:63:d3:43:07:ea:89:07:73:57:
                    58:88:5d:6b:bc:0e:66:96:d0:8a:93:80:59:5b:ba:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EC:A3:42:6D:0F:6F:3B:75:42:DD:95:39:E4:89:10:5E:93:01:F3
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32332d3233203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:0a:a8:40:ad:31:db:6c:e4:fe:5b:17:3f:5e:2e:94:4e:1f:
         d7:5e:26:aa:59:83:23:6e:78:83:c4:d1:a1:b6:53:2b:62:fb:
         ca:a3:70:8a:62:d7:e7:7f:46:70:c6:53:a6:56:fa:33:51:7d:
         da:0a:ef:f1:01:fc:17:91:19:3e:3e:b0:a8:18:ed:82:b8:55:
         03:e9:30:46:97:44:34:4d:51:96:de:97:41:2b:50:e9:0f:f2:
         79:ec:8c:85:26:5e:c8:9a:21:8d:25:13:16:96:b7:55:28:3b:
         4e:47:ff:50:a2:81:a7:ae:47:a8:6c:b0:bd:98:af:b4:e5:c5:
         b9:38:82:21:1b:e3:8e:a5:57:ae:f3:cf:f9:08:9b:aa:30:ef:
         1e:ff:ea:2a:94:73:1d:3c:64:28:4a:f5:a8:1f:a8:26:3b:45:
         3b:de:be:cc:70:0d:7f:80:ad:f1:83:40:71:36:94:58:70:c1:
         75:a7:47:5f:db:99:aa:ac:0c:37:92:09:bb:e8:dd:89:0e:f4:
         79:33:95:86:f5:77:03:04:49:7c:bf:96:ac:10:0f:16:92:bf:
         a3:41:24:6f:4c:5e:b4:73:8b:f2:25:8c:8f:9c:25:0b:c3:86:
         93:f9:13:57:34:5a:4c:7c:90:e9:ab:0d:e3:d7:2b:90:23:00:
         ab:37:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org