Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          HzHNzYHFZfmBsj9dlcCZV7IaE6i8JkXKR5a+KEqy5T4=
Subject key identifier:   67:89:03:16:CD:25:E0:5B:04:B5:BE:CA:7E:F1:E6:E4:EF:80:E0:88
Certificate issuer:       /CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
Certificate serial:       66F5A16C93D46753DBCEFAB3271CDE7E445AD772
Authority key identifier: C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
Signing time:             Mon 18 Dec 2023 19:05:06 +0000
ROA not before:           Mon 18 Dec 2023 19:00:06 +0000
ROA not after:            Mon 16 Dec 2024 19:05:06 +0000
asID:                     268440
IP address blocks:        45.161.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f5:a1:6c:93:d4:67:53:db:ce:fa:b3:27:1c:de:7e:44:5a:d7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4
        Validity
            Not Before: Dec 18 19:00:06 2023 GMT
            Not After : Dec 16 19:05:06 2024 GMT
        Subject: CN=67890316CD25E05B04B5BECA7EF1E6E4EF80E088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:a6:a1:45:09:5d:a5:c5:a3:99:fd:c4:2b:
                    a1:47:4e:00:2b:48:61:5c:3e:13:a4:8d:c1:ca:71:
                    7b:25:5a:16:37:9c:c1:59:ec:9a:36:4c:a8:c0:1b:
                    c9:4d:5b:04:25:c7:48:4a:db:5a:b7:72:02:79:ac:
                    de:43:f1:a4:03:9d:cf:9c:a8:e4:84:60:69:9d:41:
                    22:9b:68:59:a4:e1:f1:f3:5a:f3:28:4b:36:c1:e5:
                    7f:d5:fe:c5:81:e3:ec:5b:f7:69:16:1b:0e:8f:42:
                    a6:8f:f6:73:44:74:c4:fc:12:be:31:1b:41:d3:ed:
                    3d:06:5a:9a:0a:4d:2e:ff:53:8f:12:b0:7e:ee:10:
                    cc:90:4e:19:ec:f8:00:35:f6:87:64:11:10:55:ed:
                    b8:1b:23:96:d2:d7:b6:82:83:d7:ca:be:fd:58:20:
                    c4:3c:1c:29:1e:93:11:70:0e:c4:2c:e6:b9:f1:d5:
                    80:b8:29:5b:35:4c:61:11:be:5d:3f:1c:7b:76:56:
                    61:77:69:a8:c4:c7:b1:5f:d6:56:60:5a:a6:e6:89:
                    ce:9d:fb:f7:f5:de:19:29:37:f6:23:dd:cc:f1:4f:
                    e0:05:53:cb:b5:7a:cb:29:e3:d7:8f:12:0f:a2:08:
                    39:3b:ed:d2:09:e5:72:05:47:76:1c:89:ad:fc:28:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:89:03:16:CD:25:E0:5B:04:B5:BE:CA:7E:F1:E6:E4:EF:80:E0:88
            X509v3 Authority Key Identifier:
                keyid:C1:93:B6:89:79:B0:F1:89:D2:AD:1B:E1:F4:E7:C6:A8:05:8B:41:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C193B68979B0F189D2AD1BE1F4E7C6A8058B41B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:10:1f:a4:ec:32:96:71:16:c8:8f:1c:06:b4:c4:7f:eb:b3:
         46:73:45:c3:7b:61:f7:fa:a4:ea:81:d6:7b:61:6c:71:d3:da:
         28:61:a5:be:5c:22:cf:be:de:6e:cb:f9:aa:4a:ba:ee:58:06:
         1e:01:cf:a4:34:0d:17:5a:c5:d4:78:25:98:e3:55:8b:a1:f1:
         0c:79:ae:2e:15:03:15:02:26:a7:04:56:ab:b1:db:bd:b4:78:
         eb:45:d0:31:85:d5:d5:2c:74:96:f5:c1:5d:c8:2f:68:4e:2a:
         10:63:2d:1e:f1:67:00:7a:10:df:6a:53:41:b9:82:0a:43:1b:
         65:a0:23:73:d2:fb:68:de:44:c9:82:62:ea:0c:b8:db:53:18:
         a7:56:26:3e:0c:c7:52:cf:de:ac:bf:92:96:7a:c9:b5:e1:bf:
         aa:39:2e:e0:94:97:5a:82:cd:02:af:b8:98:dd:0d:a8:a4:8e:
         25:d8:03:89:92:1f:1e:24:5e:c0:7e:cf:5a:8d:bc:a0:ef:b1:
         38:a5:81:0d:fa:59:04:86:38:ef:65:bf:f3:d3:fa:29:77:b8:
         3e:05:3a:8c:cf:be:b0:d4:17:38:ef:fa:e5:4d:cd:02:e1:00:
         fa:d8:d8:b1:34:5a:d5:04:72:b2:eb:b2:39:5d:4d:ad:24:ce:
         1b:b5:ce:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org