Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/34352e3136352e38382e302f32332d3332203d3e20323638363539.roa
File:                     34352e3136352e38382e302f32332d3332203d3e20323638363539.roa (raw, json)
Hash identifier:          JIkHbtrkKbD/mG4r47L3ZrLcIOmRLK1NYLmBNPGwBcY=
Subject key identifier:   DA:F4:73:AD:C0:4C:05:F8:4B:2B:3A:0B:14:0F:54:49:1A:A1:8C:65
Certificate issuer:       /CN=C4DAA6BCF09F41036B316EE76161BD3834E13C9E
Certificate serial:       4D0FAABABF2FD4EE6958FC17CA208EAEE7553AAC
Authority key identifier: C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/34352e3136352e38382e302f32332d3332203d3e20323638363539.roa
Signing time:             Thu 04 Apr 2024 15:05:23 +0000
ROA not before:           Thu 04 Apr 2024 15:00:23 +0000
ROA not after:            Thu 03 Apr 2025 15:05:23 +0000
asID:                     268659
IP address blocks:        45.165.88.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0f:aa:ba:bf:2f:d4:ee:69:58:fc:17:ca:20:8e:ae:e7:55:3a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4DAA6BCF09F41036B316EE76161BD3834E13C9E
        Validity
            Not Before: Apr  4 15:00:23 2024 GMT
            Not After : Apr  3 15:05:23 2025 GMT
        Subject: CN=DAF473ADC04C05F84B2B3A0B140F54491AA18C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:0c:fd:9b:7c:33:96:34:20:9d:d0:02:c0:
                    78:24:db:10:e6:1e:14:c1:c1:a2:f8:ed:b9:62:68:
                    dd:4c:f6:b5:50:d5:fc:49:b4:87:39:d8:ed:36:ed:
                    07:4b:22:eb:5e:eb:7e:b2:ac:67:eb:24:33:08:be:
                    cd:7c:0d:17:f6:2a:18:b3:ff:e8:7c:10:5d:22:07:
                    c9:d5:32:ab:b4:45:8c:a4:a9:b5:cb:46:82:29:5c:
                    ae:67:a6:92:2d:43:e4:9e:ef:81:f5:18:2d:e1:25:
                    ad:91:23:18:3d:97:c4:95:fc:64:5d:ff:da:91:51:
                    58:8e:62:c8:ed:a8:54:9a:21:07:12:55:46:cb:d6:
                    59:41:7a:f9:3b:16:83:fe:b3:ee:d1:d1:24:0e:3e:
                    ca:9b:f8:c7:16:21:35:f0:d6:3b:94:3e:2c:71:ba:
                    ed:33:b0:8b:e4:74:4a:b3:e5:69:1d:be:e1:f9:1a:
                    b8:c9:69:09:74:42:c3:ee:90:02:b6:ce:8e:5a:f4:
                    f4:75:6e:39:2b:22:1f:ec:1e:37:da:27:34:bd:4a:
                    db:64:5e:ad:34:59:77:2f:12:1b:f6:99:ec:9b:f1:
                    6d:94:1f:fe:25:b1:51:ad:79:3f:c1:ac:61:74:7f:
                    6b:e7:0e:b4:d7:aa:ed:6d:f3:ab:be:57:6e:1b:ec:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F4:73:AD:C0:4C:05:F8:4B:2B:3A:0B:14:0F:54:49:1A:A1:8C:65
            X509v3 Authority Key Identifier:
                keyid:C4:DA:A6:BC:F0:9F:41:03:6B:31:6E:E7:61:61:BD:38:34:E1:3C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4DAA6BCF09F41036B316EE76161BD3834E13C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7vvyPq8rMgKkPukitZepGAPfn73TpCp449aqhpH5GdE/1/34352e3136352e38382e302f32332d3332203d3e20323638363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:57:51:df:70:4c:75:a9:12:78:d1:e0:f5:c5:cd:ea:3f:
         9e:e6:d4:6f:f7:25:5d:fd:de:2f:70:a7:1c:23:70:76:7c:0c:
         ed:3b:f3:09:e3:ff:e0:f4:38:ba:f4:38:ce:58:d2:aa:2f:0e:
         07:e8:c5:0d:b2:91:0a:ee:95:3d:17:01:66:39:3e:66:7e:63:
         22:fe:67:23:8d:4e:0b:7b:a2:0a:24:eb:69:c1:1e:0e:2c:d0:
         5d:95:26:da:b2:65:6c:eb:55:91:f0:d8:50:c2:e0:3e:62:02:
         05:9a:d2:f4:48:6f:e8:3b:f1:6d:89:9f:ad:f0:3c:e1:10:59:
         2b:81:82:e7:a3:28:49:cd:81:f6:43:72:58:f0:bf:2b:e2:3f:
         e4:42:24:e0:40:ab:b2:55:0c:d4:e4:3b:ea:6c:49:a4:9c:bf:
         98:39:a5:2d:d7:40:16:81:ce:ee:55:42:06:ea:2e:cd:d1:d9:
         8e:f9:b1:5f:db:d8:0b:df:68:1e:af:40:3a:ae:10:38:1a:1a:
         ec:0f:f6:b6:c5:00:0b:e8:1e:fb:0e:f1:a4:b0:32:75:23:6f:
         89:28:06:83:98:db:5b:ec:39:45:df:f6:bf:fc:20:d3:f1:d6:
         b3:73:d0:60:94:66:c7:d6:39:35:8d:ab:77:18:18:e2:99:5b:
         93:8f:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org