Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/34352e3136352e39302e302f32342d3234203d3e20323634343739.roa
File:                     34352e3136352e39302e302f32342d3234203d3e20323634343739.roa (raw, json)
Hash identifier:          1EHJ5fGeX6bYEtE9fBNktURb+83Kt2ahvBp6Ug7n+So=
Subject key identifier:   23:E5:19:4B:D5:EB:6F:51:F7:AA:F0:2E:67:16:5B:86:7F:39:6C:14
Certificate issuer:       /CN=3225A9367BE412857B6DFF323F2D20F155EF273C
Certificate serial:       0AD7280502B72C7D78DD5B59AB2B8A388AD7ACD1
Authority key identifier: 32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/34352e3136352e39302e302f32342d3234203d3e20323634343739.roa
Signing time:             Tue 05 Dec 2023 15:12:16 +0000
ROA not before:           Tue 05 Dec 2023 15:07:16 +0000
ROA not after:            Tue 03 Dec 2024 15:12:16 +0000
asID:                     264479
IP address blocks:        45.165.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d7:28:05:02:b7:2c:7d:78:dd:5b:59:ab:2b:8a:38:8a:d7:ac:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3225A9367BE412857B6DFF323F2D20F155EF273C
        Validity
            Not Before: Dec  5 15:07:16 2023 GMT
            Not After : Dec  3 15:12:16 2024 GMT
        Subject: CN=23E5194BD5EB6F51F7AAF02E67165B867F396C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:13:f4:bc:58:cb:2f:18:13:94:90:7e:70:
                    8b:15:d9:b8:dc:f7:09:29:96:5d:8d:a7:a4:e9:47:
                    51:f1:78:f6:50:a4:f4:c1:e7:92:66:5d:bb:c0:fe:
                    79:3f:e2:98:af:9d:bb:91:9c:aa:5b:2c:d7:6a:34:
                    b7:f6:fa:16:10:9e:79:60:df:2b:ef:10:8f:56:b0:
                    53:7c:cf:f1:4b:92:39:2e:c0:c9:e4:86:80:5e:7a:
                    6e:d7:4a:09:b8:ba:1d:96:2c:a8:34:d8:4b:0c:e5:
                    af:c3:dc:ed:c6:0a:3e:63:8e:e7:c4:40:b3:86:b8:
                    74:61:05:6d:e5:79:51:e9:30:93:93:2b:3e:03:c1:
                    27:69:84:9c:00:c1:30:b6:08:95:d1:dc:38:8e:6b:
                    2e:b8:f9:c7:e1:62:7a:52:12:5e:00:2e:55:62:5d:
                    63:8a:76:3a:27:d0:19:29:c8:68:ec:59:58:e8:e5:
                    ea:ec:c4:b7:6d:1a:0a:4e:f6:c3:f4:c3:bb:28:37:
                    fe:ac:02:7d:a0:1a:35:f8:cb:93:df:07:9f:a6:51:
                    e0:4b:f6:63:3e:94:e6:8a:57:43:33:a9:59:dc:e2:
                    3f:29:23:39:84:3c:c4:d9:a7:47:e6:33:d2:6e:dc:
                    a8:a4:0d:2e:be:53:63:da:25:14:20:7f:64:74:75:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E5:19:4B:D5:EB:6F:51:F7:AA:F0:2E:67:16:5B:86:7F:39:6C:14
            X509v3 Authority Key Identifier:
                keyid:32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3225A9367BE412857B6DFF323F2D20F155EF273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/34352e3136352e39302e302f32342d3234203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:76:f9:26:98:f3:89:4c:60:76:c9:94:35:67:90:b7:72:
         18:cd:86:e1:86:03:76:0b:60:bb:5a:eb:f0:1e:c2:8f:7b:ae:
         d8:9b:98:1c:f4:ea:8d:fa:8a:c7:8a:0c:a5:1a:30:a2:99:e3:
         b5:f3:6c:60:65:c2:c1:ab:0c:0a:21:69:c5:7a:f2:52:61:cb:
         db:a3:ab:06:0d:8a:02:35:40:be:06:f8:ee:7d:f1:bf:f6:29:
         bf:25:74:00:0b:47:44:85:90:75:14:db:9c:c9:0f:2b:14:b9:
         ed:54:3d:9f:37:51:90:69:f5:6d:33:6b:e8:bf:14:98:83:3d:
         86:2a:6e:7f:f4:bd:1a:76:6f:dc:ba:bf:05:ea:b0:62:b7:d8:
         eb:a8:be:65:6d:85:1d:fc:f5:4f:22:b6:e1:56:59:5a:c8:66:
         1c:e9:19:86:5f:4e:ec:54:86:38:9c:74:79:01:69:da:84:16:
         1f:0c:df:fa:fe:26:2b:f7:1d:db:c4:9b:0b:ce:4e:5f:7f:62:
         0f:81:89:27:ac:ba:a5:bf:85:27:0d:a9:8d:b2:ee:cd:8c:80:
         c0:e7:24:2f:3b:29:09:58:28:a9:72:6a:78:bc:74:c7:9c:ea:
         d4:e3:11:f4:54:7e:26:16:c6:29:3c:13:08:04:e0:8b:8d:1d:
         ad:fe:c9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org