Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e382e302f32322d3232203d3e20323639363938.roa
File:                     34352e3139312e382e302f32322d3232203d3e20323639363938.roa (raw, json)
Hash identifier:          UZUdOZ09G9fYLqq3wOvfmD0N1JsLoQS8O4egZ3X0nIQ=
Subject key identifier:   C1:AC:4E:A8:B1:5A:BD:E3:7A:69:76:41:E1:37:2C:B6:C4:AB:79:88
Certificate issuer:       /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial:       0911A152E32499B6AF550C0E5E31867897BF2513
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e382e302f32322d3232203d3e20323639363938.roa
Signing time:             Tue 23 Jan 2024 14:19:18 +0000
ROA not before:           Tue 23 Jan 2024 14:14:18 +0000
ROA not after:            Tue 21 Jan 2025 14:19:18 +0000
asID:                     269698
IP address blocks:        45.191.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:11:a1:52:e3:24:99:b6:af:55:0c:0e:5e:31:86:78:97:bf:25:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
        Validity
            Not Before: Jan 23 14:14:18 2024 GMT
            Not After : Jan 21 14:19:18 2025 GMT
        Subject: CN=C1AC4EA8B15ABDE37A697641E1372CB6C4AB7988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:e1:e4:a7:90:d9:75:7f:fe:27:13:ab:92:
                    7d:d7:68:12:ad:47:78:eb:88:6a:e7:c6:86:9d:64:
                    e8:60:da:2f:2a:1e:d9:a1:c9:32:67:22:be:8d:0c:
                    2f:e2:eb:d2:92:0c:e7:a6:89:83:a4:7d:0c:75:9a:
                    0d:5d:42:12:1f:9a:b0:56:14:69:ad:1d:e6:9f:40:
                    e7:29:66:7f:8f:98:a3:82:ba:19:8b:4a:2b:cb:c3:
                    5a:d3:4d:da:32:ef:46:36:03:3b:9f:db:e2:31:f5:
                    df:76:4a:2f:99:2d:1a:00:2a:ee:a9:8e:a3:15:0e:
                    3d:04:e9:f6:fa:89:00:69:99:ce:88:9a:66:10:11:
                    47:86:69:81:f2:a3:a2:7d:5b:5f:91:66:38:e9:e0:
                    d3:53:d1:b2:af:f3:67:c7:b5:13:81:3b:85:2c:d4:
                    37:56:67:2d:c3:5a:00:a2:76:4e:4a:31:44:01:c7:
                    35:36:13:b8:47:ec:aa:00:37:5c:74:d1:0c:6d:cd:
                    55:58:15:26:9c:bf:57:89:fe:fd:5b:1c:36:44:a3:
                    bf:56:3a:59:42:b0:2d:c3:97:c8:a4:99:35:09:70:
                    9a:ad:2f:85:c8:1b:31:5e:7d:b9:c5:ac:cd:33:31:
                    a7:89:24:fa:f4:ac:cc:7c:8f:6e:24:24:77:98:de:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AC:4E:A8:B1:5A:BD:E3:7A:69:76:41:E1:37:2C:B6:C4:AB:79:88
            X509v3 Authority Key Identifier:
                keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e382e302f32322d3232203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:53:60:5d:d9:e4:76:a0:19:84:56:26:51:e4:e4:8f:bf:ff:
         c6:da:25:2f:05:aa:71:01:cb:cd:8a:f8:74:df:8c:a0:ff:c8:
         ab:18:af:7a:8d:7c:c1:19:75:57:c0:d3:80:70:2e:05:13:d6:
         2c:97:ee:95:aa:e3:ed:dd:d4:ad:60:cf:ac:f5:ae:56:8f:8c:
         d0:3a:f1:1d:c3:f8:b3:87:67:f0:d2:25:0d:dd:31:f3:0f:bc:
         ef:9f:c9:e1:01:de:e2:fd:fb:80:e6:65:80:55:1b:b2:a4:40:
         80:a3:f2:38:d9:05:c7:11:18:ad:0b:ac:97:11:c6:34:e7:ab:
         f3:26:c6:53:58:8b:e9:51:a9:81:aa:ba:25:b1:30:81:64:f7:
         29:2a:87:77:95:ec:b4:3a:96:8b:7a:f4:ad:40:6e:56:62:c1:
         fd:86:2e:19:76:fa:9f:29:73:eb:f0:ca:66:aa:82:a9:1b:f3:
         86:82:1b:cd:1a:a0:d1:a2:0e:62:78:d5:33:75:0d:24:59:c4:
         d2:da:9d:67:17:bc:a8:f0:33:37:56:16:ed:1a:00:ee:38:12:
         55:41:87:b4:f5:be:71:f2:70:80:6b:b9:b7:c0:73:8a:97:10:
         02:d5:af:bd:17:81:9a:e4:db:10:68:db:31:0e:45:7e:3d:a7:
         7d:21:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:49 2024 by rpki-client on console-ams.rpki-client.org