Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139342e302f32342d3234203d3e20323636323637.roa
File:                     34352e36352e3139342e302f32342d3234203d3e20323636323637.roa (raw, json)
Hash identifier:          tQvpo/4pPBU6Nue2G48FqQ+slvltcxDZkhqKUPqu4tc=
Subject key identifier:   AA:71:F5:DB:C2:5D:1F:93:69:FD:8D:C8:85:11:0A:A8:A8:7A:7E:95
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       161F34290CADA7EE25B72CF0F343ACADC9183693
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139342e302f32342d3234203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:35:10 +0000
ROA not before:           Thu 03 Aug 2023 17:30:10 +0000
ROA not after:            Thu 01 Aug 2024 17:35:10 +0000
asID:                     266267
IP address blocks:        45.65.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1f:34:29:0c:ad:a7:ee:25:b7:2c:f0:f3:43:ac:ad:c9:18:36:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:30:10 2023 GMT
            Not After : Aug  1 17:35:10 2024 GMT
        Subject: CN=AA71F5DBC25D1F9369FD8DC885110AA8A87A7E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:44:bb:2b:18:75:9f:44:33:f8:95:bb:da:
                    20:53:96:0a:10:7c:ab:6b:40:0d:4e:f7:1e:ea:48:
                    a2:ed:92:de:30:ca:b8:7a:1e:a3:bc:1a:99:12:91:
                    57:a8:b3:06:7a:6a:70:d4:8b:6c:7d:cb:59:de:de:
                    9c:16:c4:ca:0f:9a:09:65:77:3a:f6:f1:d9:cd:00:
                    08:b8:85:87:c9:71:7c:35:72:12:bd:36:74:c8:38:
                    76:53:19:b7:4f:39:73:f6:29:c5:bb:14:56:3b:55:
                    05:a9:81:95:04:d3:10:55:0a:83:cb:38:2b:e4:91:
                    31:aa:e6:e4:c6:1e:8a:d5:45:6e:75:1c:c4:0c:d3:
                    f3:df:d6:91:93:fc:a3:b9:7e:fe:06:3c:ee:1c:74:
                    4e:9e:66:ce:c6:43:f8:79:5b:3c:15:e4:ef:25:f2:
                    d7:de:e3:57:43:e7:5c:94:d5:6e:eb:4a:2d:0e:e3:
                    12:3d:e0:c0:b1:36:6c:91:81:f3:c3:3b:ce:39:b3:
                    41:78:08:89:cb:81:e4:b5:47:a5:49:59:d2:1c:c8:
                    c7:be:40:87:81:48:75:ff:18:4d:e7:e7:de:fa:41:
                    a3:39:0c:0c:3c:1c:2d:69:80:a9:4e:d7:72:20:c5:
                    21:16:fe:50:c8:61:68:8b:45:fd:53:c0:61:a4:b7:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:71:F5:DB:C2:5D:1F:93:69:FD:8D:C8:85:11:0A:A8:A8:7A:7E:95
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139342e302f32342d3234203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:4c:40:cf:92:c0:c4:b6:f6:56:7a:96:21:9b:91:80:0d:
         24:8b:1a:73:02:7e:85:6b:ee:49:7f:98:67:5c:77:17:d0:2b:
         5b:9d:f3:3e:86:6b:68:f2:29:dd:cd:34:4e:f8:a3:42:94:0a:
         d4:33:25:50:35:73:75:98:18:4e:f5:9f:61:d8:92:9a:5f:02:
         de:eb:ab:d4:be:7f:f1:21:bd:52:39:e6:3c:86:b6:be:f6:3d:
         28:24:b8:73:03:6f:3f:f9:b0:ee:8c:04:3a:96:ca:fd:d8:5e:
         b5:28:d0:7b:73:b4:0e:06:b3:a5:11:c3:f0:82:b4:ac:20:1b:
         bb:ab:d4:5d:2f:b2:19:32:38:e8:d0:58:51:4b:b3:be:e8:40:
         65:59:d4:54:59:d2:70:9e:df:e2:b2:56:04:0e:77:1d:5a:aa:
         8e:f4:dc:fe:8e:f8:23:3f:c5:94:7d:47:24:17:32:82:2f:ee:
         b1:23:fb:ff:60:60:45:00:50:17:69:02:05:62:ae:c2:fc:25:
         36:1a:6d:d0:3b:d4:0b:bc:1b:1c:b1:4f:c7:1c:98:b1:72:e3:
         aa:71:c4:82:7d:1b:74:0c:2b:e2:23:e5:51:57:29:d6:ee:f9:
         2e:6f:bf:32:cd:53:e5:22:c2:cf:87:f7:aa:d4:de:63:2a:69:
         b8:f3:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org