Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139332e302f32342d3234203d3e20323636323637.roa
File:                     34352e36352e3139332e302f32342d3234203d3e20323636323637.roa (raw, json)
Hash identifier:          gKXHeWni07r3MzL8tLCcFyNKzMH4A8fhnA9phiR7Y/8=
Subject key identifier:   EE:4F:44:FA:47:5B:BE:28:47:43:02:87:AE:D5:7A:57:82:9C:24:42
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       549AFF00069E791214E0A38C2D5DB40BE17CBCAE
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139332e302f32342d3234203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:35:14 +0000
ROA not before:           Thu 03 Aug 2023 17:30:14 +0000
ROA not after:            Thu 01 Aug 2024 17:35:14 +0000
asID:                     266267
IP address blocks:        45.65.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9a:ff:00:06:9e:79:12:14:e0:a3:8c:2d:5d:b4:0b:e1:7c:bc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:30:14 2023 GMT
            Not After : Aug  1 17:35:14 2024 GMT
        Subject: CN=EE4F44FA475BBE2847430287AED57A57829C2442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b5:d6:3b:22:04:34:cb:62:cb:da:d8:4f:79:
                    86:d1:86:ba:d5:a8:74:85:ab:1d:c8:97:26:a3:e3:
                    0e:74:78:b1:48:e2:14:77:27:37:8c:c2:4d:e5:28:
                    93:33:e8:00:3f:e4:e3:cd:22:c2:5b:25:fb:f9:54:
                    6b:2e:b7:5b:a4:77:29:35:e7:eb:88:11:da:1f:23:
                    de:5c:95:51:3f:8d:3f:68:d6:99:3e:22:32:66:c5:
                    e6:53:ac:01:e7:e5:67:02:b4:cf:59:a4:48:e2:ae:
                    d8:e9:52:b0:33:03:97:f0:f9:66:dc:ca:2e:1f:4e:
                    1e:87:07:8f:6c:fc:64:b9:db:0c:46:38:12:24:e9:
                    3d:a1:40:aa:62:00:97:76:18:75:98:12:85:76:88:
                    b9:ba:24:80:8a:02:db:93:c3:e6:42:f5:c9:4f:f5:
                    5c:9e:82:ec:40:b8:6f:38:e6:bb:9b:25:6c:83:28:
                    60:21:e7:1e:21:87:1a:f8:16:56:c4:f3:21:ee:78:
                    77:29:ea:f1:2b:32:bc:8d:54:0d:b9:ce:c4:3f:2a:
                    4e:39:65:4c:d8:46:41:f0:f2:0f:c9:13:24:5b:66:
                    dc:76:bb:91:b8:66:c4:fd:b6:61:4e:2d:fd:e6:16:
                    4a:a8:68:03:68:1e:a3:c3:f0:4f:f7:e5:51:cd:4b:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4F:44:FA:47:5B:BE:28:47:43:02:87:AE:D5:7A:57:82:9C:24:42
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139332e302f32342d3234203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:27:8c:14:1c:bb:dc:a0:64:39:e0:a6:ff:8d:98:ff:24:73:
         e2:94:cf:3d:fa:e8:44:19:75:40:44:ae:66:f1:28:bf:7b:6b:
         06:83:3c:44:9d:82:8e:ed:57:bd:5f:4d:10:63:75:72:17:2f:
         5f:2e:ea:0b:78:70:ca:43:37:47:db:2a:f6:13:c7:b6:c9:56:
         c5:96:4b:87:5c:9f:13:7f:61:e3:31:d2:88:d7:14:43:7d:0e:
         97:44:ae:cc:07:4c:59:8a:8b:41:4a:55:aa:0d:76:5b:cf:ba:
         2e:a5:01:b5:63:b8:ff:67:03:f4:49:b9:9e:e3:70:b1:bd:37:
         0a:b1:f0:da:83:70:a3:62:cc:a4:93:58:33:02:8f:11:80:99:
         fd:f1:89:90:2e:8b:d9:d4:03:5b:bd:0f:97:36:2d:4e:e4:7c:
         cd:45:62:be:b1:09:0d:cc:52:cd:e4:17:48:84:2f:d1:5a:be:
         a5:6b:6c:65:3d:e7:06:36:dd:67:a7:53:08:eb:02:03:c6:8f:
         23:d6:ad:f7:f8:d3:77:c8:13:ad:62:28:c2:c3:46:62:fa:35:
         e3:8b:0f:13:15:eb:7c:23:b6:25:a1:be:fe:43:a3:31:52:8d:
         4b:4f:30:38:13:08:f5:46:56:60:f0:8d:23:2e:32:1d:a3:37:
         7f:cb:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org