Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233372e302f32342d3234203d3e20323639313934.roa
File:                     34352e3137392e3233372e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          ZqZcx5OoJbl3ORizntGV/TzjG4h9vLw6uiscrZZjJK8=
Subject key identifier:   FF:67:BF:4D:D0:6D:9B:47:14:A0:54:85:F6:CA:0F:20:4D:45:EE:79
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       201393C4610FF8043CE6F1A9660C58CA095E236C
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233372e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:37 +0000
ROA not before:           Sat 29 Jul 2023 16:21:37 +0000
ROA not after:            Sat 27 Jul 2024 16:26:37 +0000
asID:                     269194
IP address blocks:        45.179.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:13:93:c4:61:0f:f8:04:3c:e6:f1:a9:66:0c:58:ca:09:5e:23:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:37 2023 GMT
            Not After : Jul 27 16:26:37 2024 GMT
        Subject: CN=FF67BF4DD06D9B4714A05485F6CA0F204D45EE79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:f6:6b:c2:4f:41:86:8c:b7:df:08:ab:ed:
                    40:d5:67:0c:2d:e5:dc:de:05:68:80:ab:39:f6:ea:
                    ba:39:d8:4b:6f:e3:a3:12:37:fc:08:34:53:15:5a:
                    c2:49:e9:b4:9e:29:2c:38:64:89:2d:95:0a:e5:a4:
                    af:57:94:ba:d6:82:7b:79:d9:9a:22:f6:54:0d:12:
                    b5:05:48:4b:15:6f:57:75:c3:c6:30:bb:97:aa:01:
                    32:5f:fc:e6:2b:52:4b:f1:a6:2e:90:61:a9:e3:ef:
                    5e:d1:31:06:f7:e3:14:fb:04:fc:6d:1a:d8:98:8e:
                    db:01:d8:2b:2c:23:e4:52:8b:b6:a2:c5:ac:6a:ff:
                    bb:13:56:d6:c7:42:6a:ef:5f:94:f7:e0:50:cb:86:
                    4e:6d:8c:ac:f4:44:99:f1:31:57:41:76:68:d3:c2:
                    1a:30:49:43:ae:ca:37:0a:df:af:ac:e2:66:2c:7a:
                    e2:17:8f:7d:48:b7:c3:ed:ad:fa:82:9c:bc:ad:de:
                    e8:1c:8f:63:0f:93:4d:c8:6b:23:44:c2:0c:ab:c6:
                    11:59:96:6a:1d:71:26:20:78:a6:22:45:39:41:0a:
                    80:8e:74:4e:90:c5:d3:fd:3e:de:93:f2:15:86:c2:
                    d2:03:5c:ee:00:4e:d8:1d:d0:87:16:06:11:a2:35:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:67:BF:4D:D0:6D:9B:47:14:A0:54:85:F6:CA:0F:20:4D:45:EE:79
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233372e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6b:f5:71:07:dc:91:f1:a5:b9:1c:37:98:58:8b:d2:c3:a0:
         79:c9:64:c2:e1:44:f4:e0:2d:87:81:98:99:54:58:1d:e2:1c:
         fe:df:85:c1:a4:41:29:3c:3a:bf:de:a0:d9:73:75:64:90:6a:
         1a:2a:90:b0:2c:d7:63:21:a4:48:15:20:28:bb:aa:7d:e4:a6:
         d1:d7:2e:92:08:6a:e3:1a:0c:05:32:47:fa:1d:c0:42:d7:4b:
         d2:38:75:4a:b3:24:0a:38:eb:f3:e8:52:4c:ee:8c:59:21:45:
         9f:6e:d8:b2:09:62:97:da:d6:fd:94:08:3a:e4:c2:9b:1d:37:
         69:81:7f:19:86:71:bb:cf:f4:12:63:31:98:cf:6a:c9:c7:1c:
         98:56:77:1a:e5:dd:21:64:2f:9e:f4:e9:01:83:ba:a5:96:57:
         64:fd:2d:91:4b:e0:bf:e4:5f:b8:4b:a2:79:d8:d0:5f:3a:9e:
         79:63:2d:6f:eb:e8:2c:64:3b:08:c5:6b:09:e9:d7:5a:e7:c3:
         b0:73:2d:27:48:1d:8b:54:21:59:e5:7c:9b:69:d7:c5:a5:13:
         65:e9:1f:11:2d:53:05:49:1d:f1:67:17:c3:62:65:e8:b9:84:
         5c:ba:12:84:fc:9a:d3:91:4e:2a:4d:e2:b4:e2:9b:02:a4:82:
         3b:33:f7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org