Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3131312e302f32342d3234203d3e203631353839.roa
File:                     34352e3233302e3131312e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier:          VBjAEWm/QsLPa/vG8xbdEbq0WoySD5r5z2212bI+5tc=
Subject key identifier:   0B:68:4C:11:67:9F:44:77:B2:B6:12:9D:16:33:87:37:3A:E1:4C:80
Certificate issuer:       /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial:       7E95C88E4785F43435339385788625C5C2D3C2C4
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3131312e302f32342d3234203d3e203631353839.roa
Signing time:             Tue 21 Mar 2023 13:30:28 +0000
ROA not before:           Tue 21 Mar 2023 13:25:28 +0000
ROA not after:            Tue 19 Mar 2024 13:30:28 +0000
asID:                     61589
IP address blocks:        45.230.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:95:c8:8e:47:85:f4:34:35:33:93:85:78:86:25:c5:c2:d3:c2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
        Validity
            Not Before: Mar 21 13:25:28 2023 GMT
            Not After : Mar 19 13:30:28 2024 GMT
        Subject: CN=0B684C11679F4477B2B6129D163387373AE14C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9b:05:0b:6d:10:e9:f7:67:32:8d:8b:fe:6d:
                    0c:3f:71:51:98:19:06:4a:d2:3e:ac:f5:2a:86:58:
                    4b:eb:fc:cd:2a:fd:41:a4:90:b2:72:1e:1a:d5:35:
                    2f:4b:3d:bf:a4:7b:83:08:b9:a6:ac:13:fa:e3:15:
                    aa:7a:f9:7f:40:1f:a7:26:02:3f:e9:a1:24:c9:4f:
                    0b:2c:44:65:e8:3d:5c:01:bb:df:b6:7e:42:54:61:
                    db:a7:28:8d:7b:a5:8f:a7:45:3d:50:9e:58:be:db:
                    dc:6d:82:79:04:0a:2a:23:01:3f:5d:34:2f:73:99:
                    a5:4e:41:2b:39:06:bc:5a:c9:23:e0:cb:46:cf:06:
                    4b:b6:81:3d:dc:22:7f:87:c4:0a:8f:d2:88:6f:fb:
                    66:a5:49:20:0e:3f:c5:90:2b:76:fb:c3:24:3d:9b:
                    32:57:4b:8d:cc:9a:7c:bc:ea:23:4a:5c:c1:bd:6d:
                    a4:87:4b:f8:f9:aa:54:0c:fb:9f:b3:4d:67:39:bf:
                    eb:1f:45:14:d6:90:16:18:c5:12:91:41:ac:a1:b2:
                    43:e4:43:f5:19:5d:7b:0f:a9:bc:15:18:c5:5b:7a:
                    90:49:fc:11:58:fe:b6:08:44:7f:a3:01:85:07:71:
                    07:bc:ab:2e:cb:8e:fe:51:90:11:e6:5b:95:b3:6d:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:68:4C:11:67:9F:44:77:B2:B6:12:9D:16:33:87:37:3A:E1:4C:80
            X509v3 Authority Key Identifier:
                keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/34352e3233302e3131312e302f32342d3234203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:40:26:e0:0f:87:77:a7:36:4d:0b:50:c2:ae:25:3a:a2:c7:
         eb:44:d3:8a:a5:0f:89:19:77:59:dc:ba:62:17:b6:2e:41:a0:
         84:d5:51:6b:1e:12:3b:d3:6a:c9:5f:7d:37:36:eb:aa:d4:83:
         1d:e1:ed:b9:e5:ea:fb:53:cc:83:27:51:6b:f9:7a:9a:94:92:
         57:b5:93:d8:ea:e1:9c:76:f6:3b:8a:1d:d4:f7:cd:a6:a7:4d:
         5e:87:d4:33:a3:f7:a6:5a:a5:89:8d:1e:24:8c:48:c7:f9:f2:
         08:76:58:eb:5c:60:2a:71:0e:c3:3d:b4:5f:31:05:4a:1f:98:
         85:1e:35:ba:40:1e:78:5f:18:19:2a:44:e9:8a:b1:03:e0:09:
         04:f1:91:b4:fc:5c:27:65:47:b6:3a:74:63:ac:c5:aa:be:bf:
         3a:18:b4:c3:db:5e:bd:97:2e:10:2c:f3:f8:0c:f2:3f:1b:56:
         02:f7:bc:33:66:8d:08:37:63:a4:cd:58:08:c8:c4:52:d3:3f:
         37:35:b3:64:35:1e:60:93:fb:31:d1:6d:2f:08:29:3a:de:79:
         a0:a8:f9:3f:70:4a:7d:d3:53:90:b3:cd:94:da:ae:7d:a0:02:
         1d:7b:7b:94:a6:eb:87:7c:d4:ce:24:43:a3:5b:7d:d4:1b:2c:
         73:ad:83:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org