Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32342d3234203d3e20323636323637.roa
File:                     34352e36352e3139322e302f32342d3234203d3e20323636323637.roa (raw, json)
Hash identifier:          SpZ17TqRXQiqgdsl7CtHInTtMHusPLyr+au14/tAQ8s=
Subject key identifier:   46:D8:92:58:61:AB:38:02:5C:CD:42:2C:E2:6F:0F:92:43:BF:04:0E
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       338CE18FA6DAC9F0CF911FEAB6164F18BF7A2829
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32342d3234203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:35:16 +0000
ROA not before:           Thu 03 Aug 2023 17:30:16 +0000
ROA not after:            Thu 01 Aug 2024 17:35:16 +0000
asID:                     266267
IP address blocks:        45.65.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8c:e1:8f:a6:da:c9:f0:cf:91:1f:ea:b6:16:4f:18:bf:7a:28:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:30:16 2023 GMT
            Not After : Aug  1 17:35:16 2024 GMT
        Subject: CN=46D8925861AB38025CCD422CE26F0F9243BF040E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:63:ed:cc:65:1c:a9:f1:bd:e7:5f:a2:4c:
                    4d:8f:9a:d5:1d:38:7d:6d:40:ee:7c:7f:98:37:2e:
                    ab:84:af:65:6d:00:db:c7:8e:52:5c:8f:94:5c:70:
                    b4:a4:c0:19:e2:3c:ef:52:47:b6:3b:43:82:59:0d:
                    32:e0:42:8c:d0:77:2c:eb:5f:9f:b3:da:b9:97:6b:
                    e7:c8:da:bb:19:8d:f3:d5:73:8f:6d:dd:1f:e1:60:
                    a4:d7:96:1b:c9:68:ed:6f:5c:3f:e0:65:c0:14:a0:
                    81:3f:04:c4:63:57:cc:1b:13:67:5f:e9:12:85:1b:
                    12:f7:8f:2b:e0:98:99:9f:e2:9b:d5:53:32:30:b8:
                    44:4e:43:d8:21:ef:60:de:61:15:05:90:e8:bc:2b:
                    e6:ce:1f:f8:02:82:31:60:98:3d:8b:44:bb:bc:86:
                    26:26:9f:b8:d4:fb:9e:1d:e0:3a:27:b5:a4:a5:34:
                    51:9d:76:45:81:b0:07:c9:99:91:f1:a4:a9:3c:95:
                    40:44:c6:47:ea:52:c5:4b:d2:5f:ff:20:b9:e2:48:
                    52:31:5b:69:29:1c:fd:d9:6f:fe:02:29:2a:10:d0:
                    b5:91:04:2c:68:22:4c:f6:52:9a:fc:ec:bf:dc:36:
                    9e:8e:a8:1b:1b:3f:a2:00:e9:0c:4d:8d:75:39:1c:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D8:92:58:61:AB:38:02:5C:CD:42:2C:E2:6F:0F:92:43:BF:04:0E
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139322e302f32342d3234203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:a3:35:d2:a2:4c:bc:63:3c:a8:b8:a6:22:c9:bd:5d:24:
         ba:69:ae:ef:ab:b5:34:53:07:aa:8a:61:00:9e:41:3c:10:db:
         bc:a2:98:d2:5b:54:9f:21:a8:82:d8:05:f9:d1:6d:a1:6b:8a:
         7b:d5:65:b6:f3:3b:54:f0:ae:7e:b4:64:f0:96:22:ba:b4:08:
         e6:b6:4a:ff:e0:2d:94:7a:3a:c9:1c:f6:32:30:28:1d:d9:77:
         22:59:8d:3c:5b:24:b2:2d:75:e2:ce:eb:a3:7a:b6:93:1e:ae:
         24:a5:c1:14:74:b2:2c:fe:7e:c0:c6:38:e2:f9:2a:67:91:ef:
         7d:88:18:04:b4:75:35:0b:99:e8:95:c8:ff:23:10:31:6e:34:
         6c:01:4b:ec:b9:93:31:77:2b:00:c2:20:47:ad:71:bf:1a:d2:
         62:7d:7b:bb:d3:d9:fd:3e:0f:78:19:b1:ad:29:a3:80:20:77:
         46:96:55:bd:a5:2f:de:3b:95:0a:cf:dc:db:11:f8:02:5f:19:
         52:5a:70:30:6e:54:a5:f2:ba:ae:57:1b:8e:45:58:9e:71:ad:
         b4:e4:35:49:77:fe:f5:02:64:6b:d8:15:0a:25:1c:46:9f:2f:
         3f:da:de:12:8c:7f:16:4f:81:50:47:28:2b:7a:4e:f0:33:eb:
         1d:6b:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org