Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139352e302f32342d3234203d3e20323636323637.roa
File:                     34352e36352e3139352e302f32342d3234203d3e20323636323637.roa (raw, json)
Hash identifier:          eE0hfgRUSOskN2jGYYGVdUnxf4KoiWhC+gUaVG2AaBU=
Subject key identifier:   96:E2:A6:9E:59:4C:9D:DF:06:A5:78:8E:54:F8:A4:C5:3A:CA:A8:82
Certificate issuer:       /CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
Certificate serial:       1CB9A8DB1965DB40686A4AE527F689965FD2B24C
Authority key identifier: DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139352e302f32342d3234203d3e20323636323637.roa
Signing time:             Thu 03 Aug 2023 17:35:07 +0000
ROA not before:           Thu 03 Aug 2023 17:30:07 +0000
ROA not after:            Thu 01 Aug 2024 17:35:07 +0000
asID:                     266267
IP address blocks:        45.65.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b9:a8:db:19:65:db:40:68:6a:4a:e5:27:f6:89:96:5f:d2:b2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC8F89483241F7F657DE6846CBDB2BA044387F98
        Validity
            Not Before: Aug  3 17:30:07 2023 GMT
            Not After : Aug  1 17:35:07 2024 GMT
        Subject: CN=96E2A69E594C9DDF06A5788E54F8A4C53ACAA882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:ca:87:ff:45:9e:c1:4f:78:89:67:36:a8:
                    e8:f9:34:58:cf:a3:e2:94:36:92:85:61:74:54:ae:
                    0e:e4:f6:15:e4:7f:b5:3d:7c:7b:9b:3a:89:f4:7d:
                    ae:81:96:af:ce:04:18:44:4d:7f:da:e9:6a:6e:15:
                    17:2f:c3:3b:06:f6:74:6d:7d:75:e2:a8:62:15:0e:
                    09:a8:20:1c:7a:13:88:9f:fe:25:1a:a9:ee:17:d7:
                    8b:12:e6:34:e0:a5:04:d4:68:e4:47:9a:b0:2c:bf:
                    fc:2e:90:a3:e6:c1:7a:6f:91:61:2a:35:19:6c:60:
                    91:0d:ac:9b:03:44:da:2f:23:36:17:72:85:25:a1:
                    49:1b:3f:3a:31:0e:b2:20:8e:2c:4d:32:75:72:28:
                    4b:50:9f:ff:c8:97:48:f9:cb:73:ec:6c:cd:5b:79:
                    8f:46:bb:00:4f:19:09:13:0f:4f:f5:24:82:6b:9d:
                    a3:05:b9:59:5f:4c:a9:7f:ff:52:b1:c2:3b:f4:4f:
                    d9:9e:31:3c:11:71:b5:9e:bd:e0:37:58:82:d6:84:
                    6e:63:28:9f:9d:65:bf:31:80:dd:ba:aa:72:42:29:
                    ef:4f:a7:37:8f:1b:5b:1b:3f:b8:4f:fe:bf:a0:4d:
                    27:ed:29:7d:ef:6e:fe:86:a7:1f:a7:d9:21:90:b3:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E2:A6:9E:59:4C:9D:DF:06:A5:78:8E:54:F8:A4:C5:3A:CA:A8:82
            X509v3 Authority Key Identifier:
                keyid:DC:8F:89:48:32:41:F7:F6:57:DE:68:46:CB:DB:2B:A0:44:38:7F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC8F89483241F7F657DE6846CBDB2BA044387F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/0/34352e36352e3139352e302f32342d3234203d3e20323636323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:df:3d:c7:ba:03:9f:14:a6:a7:c5:78:15:8d:ad:db:da:b8:
         c1:d5:2c:03:55:d0:37:28:c5:bf:98:6a:5a:bb:d2:75:de:0f:
         e3:eb:1a:e4:47:c5:2e:cd:c0:5f:40:d8:eb:77:99:89:95:59:
         63:05:f5:b2:00:41:58:05:45:fe:97:f0:b1:fb:5a:28:9f:d6:
         34:03:56:8e:ec:d7:6e:0b:c4:35:81:d0:17:30:2b:bb:a8:d5:
         c5:18:cf:6c:4d:f6:31:52:82:5b:6c:0c:3a:c0:8d:a0:88:e1:
         64:e2:74:db:c2:cb:c7:10:46:a8:b8:22:18:28:ae:97:ab:36:
         8b:ae:1a:46:50:65:24:b5:98:94:65:6b:e4:72:64:eb:04:d5:
         51:a9:9c:f1:34:70:b3:54:08:5b:eb:d6:1c:5d:f4:b5:0d:69:
         eb:17:c0:e3:e0:a1:52:bf:8d:35:17:aa:14:c3:83:50:f5:31:
         e8:4d:df:72:21:9b:01:45:f4:ba:a7:43:ff:51:36:62:c2:18:
         56:3f:92:ad:d6:43:4b:2c:59:d9:7d:79:10:9e:2c:1c:69:b8:
         33:11:a2:37:86:0f:70:85:d1:61:2d:16:2d:66:77:c9:53:bc:
         7b:3b:6c:57:e2:99:85:9c:ee:e3:05:fd:2f:0a:76:77:19:bf:
         21:5c:00:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org