Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e31302e302f32332d3233203d3e20323639363938.roa
File:                     34352e3139312e31302e302f32332d3233203d3e20323639363938.roa (raw, json)
Hash identifier:          O8+HarMcOB3jt9wTJuCrRyrDDYQgd0qnT7vdUI/MZ6s=
Subject key identifier:   24:D6:17:B5:82:A1:D4:F0:B0:86:7D:C1:10:F4:A5:55:BE:0C:F2:1D
Certificate issuer:       /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial:       721BA86B1F64AF68143FB3EC4CABA205C53BD47A
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e31302e302f32332d3233203d3e20323639363938.roa
Signing time:             Tue 23 Jan 2024 14:19:16 +0000
ROA not before:           Tue 23 Jan 2024 14:14:16 +0000
ROA not after:            Tue 21 Jan 2025 14:19:16 +0000
asID:                     269698
IP address blocks:        45.191.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1b:a8:6b:1f:64:af:68:14:3f:b3:ec:4c:ab:a2:05:c5:3b:d4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
        Validity
            Not Before: Jan 23 14:14:16 2024 GMT
            Not After : Jan 21 14:19:16 2025 GMT
        Subject: CN=24D617B582A1D4F0B0867DC110F4A555BE0CF21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:62:b5:b6:6c:f4:64:84:84:69:2b:37:fe:
                    5f:82:ee:65:73:6f:6d:93:98:cd:73:0a:53:f5:f1:
                    e4:4c:71:d2:e8:b4:2a:f8:b1:2f:c4:2b:de:e2:38:
                    a4:60:c3:6d:cd:be:91:d3:e6:a5:3a:09:41:5d:3e:
                    b6:03:6c:d8:44:f7:b7:9d:bb:da:a0:7e:30:c1:62:
                    b9:d7:d9:95:9e:b6:f6:7f:28:34:6d:ed:84:85:a9:
                    31:c5:f0:17:66:c5:ae:f7:1f:64:de:06:c4:e2:54:
                    83:9e:1b:2c:f2:1e:ac:ba:d0:7e:86:b2:c3:cb:98:
                    51:d6:50:83:65:86:5d:fe:9a:92:b3:ae:41:41:d3:
                    1a:cf:0f:d1:cd:1d:54:da:f5:93:4e:d2:73:26:3f:
                    47:5d:40:51:0e:1e:0f:70:65:29:24:1e:95:7e:80:
                    c8:c6:86:62:d3:94:06:83:4b:1c:c7:ac:19:de:ab:
                    dc:81:c8:1f:87:5c:20:1b:43:8d:d3:ca:5e:bc:5d:
                    59:f9:ee:23:3b:81:a9:df:18:af:13:0d:cc:6b:76:
                    85:f1:07:91:af:25:85:6b:74:1a:b3:57:56:21:2f:
                    62:12:f0:8d:33:d9:f1:a9:ed:c0:dc:95:a1:85:a2:
                    46:93:e2:a1:83:13:cc:f0:e2:2a:b1:31:36:ed:92:
                    0e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:17:B5:82:A1:D4:F0:B0:86:7D:C1:10:F4:A5:55:BE:0C:F2:1D
            X509v3 Authority Key Identifier:
                keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e31302e302f32332d3233203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:31:a4:c3:3b:a8:5a:06:bd:7d:47:df:51:98:89:c8:17:f8:
         5d:b5:99:45:71:0e:78:fd:64:12:9c:6a:60:71:84:07:4e:5b:
         1e:71:05:31:f1:68:36:63:27:90:7d:66:ef:79:83:a8:0f:00:
         03:29:59:04:45:75:a4:19:73:11:74:ba:08:da:37:46:83:65:
         31:5b:73:e8:47:0e:05:dd:c8:1c:f8:a0:bc:79:84:c2:d3:3f:
         47:2a:66:a9:8b:8d:62:78:94:81:56:74:2f:2b:43:1d:24:05:
         dd:f0:1a:52:0c:cb:1e:42:20:47:2e:eb:be:0b:e0:28:e6:07:
         54:63:e9:f8:ea:b2:0e:db:c7:08:cd:15:54:2c:a1:b3:4b:f4:
         34:5c:b1:26:28:9b:ff:26:dd:12:d9:6c:17:55:84:b2:7b:00:
         f4:ea:67:1c:f8:5b:41:04:65:59:04:03:27:2d:97:ee:2f:e5:
         54:1a:5f:c5:25:91:81:48:34:38:84:90:06:06:77:7f:38:2c:
         f0:7a:62:9a:6e:bb:32:6a:f4:1d:4a:30:83:ef:1e:70:59:28:
         65:19:30:36:1a:6b:31:c5:61:6f:2b:8a:07:10:7f:d9:3d:35:
         9d:74:57:99:a2:f9:a1:82:e6:1a:e9:1f:ed:fe:32:b0:39:90:
         b7:cd:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org