Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231372e302f32342d3234203d3e20323639313934.roa
File:                     34352e3138302e3231372e302f32342d3234203d3e20323639313934.roa (raw, json)
Hash identifier:          m4YwZCD6kgYnktllyo65fLhwkmdZ3IBhxCziaVduf5w=
Subject key identifier:   C3:D2:45:F0:37:46:74:88:03:D1:7A:7F:BA:11:F8:22:BD:58:D8:1E
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       096A478B91107E4479E230181DA995742123E4D6
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231372e302f32342d3234203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:38 +0000
ROA not before:           Sat 29 Jul 2023 16:21:38 +0000
ROA not after:            Sat 27 Jul 2024 16:26:38 +0000
asID:                     269194
IP address blocks:        45.180.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6a:47:8b:91:10:7e:44:79:e2:30:18:1d:a9:95:74:21:23:e4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:38 2023 GMT
            Not After : Jul 27 16:26:38 2024 GMT
        Subject: CN=C3D245F03746748803D17A7FBA11F822BD58D81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:b2:e9:77:49:cc:f4:33:6e:dc:77:bd:ae:
                    ac:f3:7d:27:54:37:8c:11:88:18:56:6c:92:35:57:
                    2b:1b:2a:52:27:db:e0:07:6d:5f:a4:73:de:27:be:
                    5c:c0:af:7e:5e:70:c8:68:2e:68:1d:40:8c:fd:d8:
                    e1:03:e2:38:0e:a9:57:10:e9:6e:9c:cf:cd:c6:c5:
                    e3:18:45:7c:41:3d:4d:40:6a:67:80:94:0a:61:cd:
                    a2:f6:70:2d:50:35:f1:bb:6a:54:71:f5:0c:08:e8:
                    96:31:93:92:53:15:26:2f:14:d4:e1:b0:74:e6:f4:
                    50:d8:08:15:70:b5:53:e0:a6:8c:4b:a0:a7:f8:8f:
                    b2:cb:12:e3:4b:a9:b6:88:fb:22:24:03:e0:6b:a2:
                    11:ec:13:8a:fa:64:0b:dd:df:90:08:3f:38:75:53:
                    65:de:60:73:72:e1:68:db:0e:f2:41:e9:ee:c8:b4:
                    22:51:5a:f1:38:7e:16:34:6f:a9:b4:b2:3c:ab:9c:
                    0b:ee:7d:97:83:ef:13:1e:d1:2a:96:8f:a7:cf:d0:
                    46:1b:47:de:7d:b6:9e:93:18:c0:a3:89:4c:a2:16:
                    6d:af:1f:95:63:ae:79:44:ba:6b:85:6e:63:00:87:
                    da:bb:4b:29:ea:87:a0:cf:da:28:cb:3f:38:12:e2:
                    c1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D2:45:F0:37:46:74:88:03:D1:7A:7F:BA:11:F8:22:BD:58:D8:1E
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3138302e3231372e302f32342d3234203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:5e:3b:cb:57:a7:64:75:09:50:d7:fd:97:e4:41:fd:5b:18:
         54:c0:03:3f:50:b5:77:3a:39:0e:b9:aa:23:fb:1d:08:ee:2f:
         70:a8:ac:3f:be:0e:d6:c7:6c:a3:3c:84:9b:62:14:82:a4:c9:
         47:a7:c6:3b:bc:91:9b:08:5e:38:2d:d7:70:05:a9:46:78:d5:
         81:c8:2d:a9:7b:1e:84:4e:09:21:37:2a:08:8e:ee:95:c7:ce:
         a5:e9:63:63:8f:c2:8a:38:1a:e7:34:90:14:7b:89:2e:ad:df:
         5c:fc:c0:78:21:5c:f4:ae:86:60:21:37:3a:2c:ab:90:2b:b5:
         2a:0f:90:b9:8e:31:3d:d4:d2:1a:23:26:6e:c8:99:0d:dc:3d:
         bb:7f:d9:3e:5a:75:42:f9:15:af:dd:97:7d:ce:e4:e0:48:d6:
         f1:ad:c6:a8:c4:54:58:79:eb:31:bd:e9:ee:98:5c:0d:74:31:
         8d:33:c5:4e:33:62:d0:2d:c0:f0:39:56:a8:36:75:e4:7e:68:
         b2:25:7d:22:d9:84:be:70:8a:47:be:ea:2d:d6:d2:51:80:72:
         be:e3:c2:14:9a:31:2b:14:9c:6d:90:85:42:47:43:79:90:2e:
         20:5c:1e:44:7d:1e:49:3a:1c:f4:ab:4b:59:36:75:2e:a6:d2:
         8a:2d:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org