Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233382e302f32342d3234203d3e20323639313934.roa
File:                     34352e3137392e3233382e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          KPVjy/88G3ANg+aKU9F/er6ZtBAOonDPJBc5WuDl+fc=
Subject key identifier:   18:00:C0:B9:7E:F4:8E:07:04:BC:F3:8B:25:7C:6E:C4:B0:34:76:F9
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       651C4D9D6946F3E77D481735FCD01C0D6BE92B38
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233382e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:39 +0000
ROA not before:           Sat 29 Jul 2023 16:21:39 +0000
ROA not after:            Sat 27 Jul 2024 16:26:39 +0000
asID:                     269194
IP address blocks:        45.179.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1c:4d:9d:69:46:f3:e7:7d:48:17:35:fc:d0:1c:0d:6b:e9:2b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:39 2023 GMT
            Not After : Jul 27 16:26:39 2024 GMT
        Subject: CN=1800C0B97EF48E0704BCF38B257C6EC4B03476F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:7a:75:30:73:43:bc:b1:ea:4a:30:60:93:
                    c0:25:7c:fc:d8:aa:9e:d7:9c:24:b8:cf:93:ea:3f:
                    7f:6c:ce:14:e0:ee:f7:a0:e5:0c:c3:bd:6b:35:dc:
                    5c:4a:46:59:7c:a9:9d:59:83:bb:3f:20:ee:fd:83:
                    61:f7:26:fb:b0:4b:32:b5:43:54:e0:69:c5:b7:42:
                    3e:5f:93:bd:8a:f1:63:8e:b9:56:90:fb:2b:00:bf:
                    0a:6f:db:0b:4a:4f:c0:d9:0b:7d:52:df:9f:75:71:
                    df:ee:6f:99:59:fd:d3:d9:6a:5a:57:da:72:21:10:
                    fd:0e:87:61:be:9c:04:ca:ba:b9:d3:56:b4:15:ca:
                    25:55:ce:53:78:ab:91:6e:c2:df:3d:a3:27:dd:0a:
                    ae:c5:71:b4:fb:c3:c6:a8:d6:d9:75:e9:3c:0b:bf:
                    28:83:e7:ab:ba:4c:2b:38:26:6e:76:67:af:da:ea:
                    36:8d:bc:a6:f2:8d:c0:ac:d3:07:11:fc:87:78:ff:
                    0f:1e:78:3f:db:fa:bd:c9:3d:44:88:03:7f:01:2b:
                    73:f9:3b:9a:cd:49:f3:77:6e:c2:94:32:89:9d:6d:
                    11:61:94:75:b4:80:a8:da:f3:9b:4a:e7:33:79:0b:
                    a9:8b:a7:06:bb:f7:64:33:1f:8c:24:82:6d:8f:f5:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:00:C0:B9:7E:F4:8E:07:04:BC:F3:8B:25:7C:6E:C4:B0:34:76:F9
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3137392e3233382e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:d7:ba:b4:f1:6b:3d:7e:aa:c9:bb:cc:1c:c0:f3:95:4d:
         51:12:1a:e6:bf:d6:5b:da:00:0f:5d:65:7e:23:d9:85:c0:e9:
         09:1e:b3:ac:c1:d9:e4:68:07:20:bf:27:29:13:18:ea:08:c2:
         72:4d:5e:8e:d3:ec:8f:7c:e1:81:e4:c4:c5:67:55:9c:41:97:
         f4:2b:f4:61:9e:6e:57:62:cf:cc:d4:9d:4c:7f:a6:9d:37:12:
         41:ee:45:94:3a:ab:0e:bd:fe:da:b1:a1:e2:4d:b4:63:8a:7d:
         ce:96:d4:89:fa:11:94:65:03:c1:20:d8:50:90:15:bd:01:c6:
         6e:44:d5:75:f5:73:6f:b8:3f:d3:6c:e9:c8:79:dd:91:40:27:
         db:e9:1e:12:29:db:e6:4b:50:81:42:c2:6e:d9:d9:05:2f:17:
         70:fe:88:ef:b6:2b:6d:11:68:36:a2:0b:ca:25:e1:d8:6e:fb:
         33:5e:00:87:ba:7b:42:28:66:76:88:21:0d:9c:01:b6:64:df:
         f4:23:54:b9:01:4b:a8:72:dd:b7:f6:a1:60:68:2a:0f:90:f3:
         31:21:2a:f2:ad:28:ea:ab:2d:1c:c3:10:3a:e1:e4:4a:fd:b2:
         be:db:4a:68:ea:48:a6:c8:de:e6:52:56:45:fc:ae:09:72:9e:
         fe:d4:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org