Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          FPLfoMw4y2enZasvJMj+zaZK7CU1KytA5qk3Eqbg8uc=
Subject key identifier:   00:97:AF:5A:09:09:B0:35:AA:7F:4A:7E:4C:9D:54:36:5F:BC:15:46
Certificate issuer:       /CN=B776754A2C8B100218B061AA79BE9186F191500D
Certificate serial:       24E8BAE8F13940BEAF9DD4A080EEF225675B08F5
Authority key identifier: B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa
Signing time:             Sat 11 Nov 2023 20:59:14 +0000
ROA not before:           Sat 11 Nov 2023 20:54:14 +0000
ROA not after:            Sat 09 Nov 2024 20:59:14 +0000
asID:                     267027
IP address blocks:        45.227.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e8:ba:e8:f1:39:40:be:af:9d:d4:a0:80:ee:f2:25:67:5b:08:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B776754A2C8B100218B061AA79BE9186F191500D
        Validity
            Not Before: Nov 11 20:54:14 2023 GMT
            Not After : Nov  9 20:59:14 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:f2:c2:b0:f4:fd:ba:6a:61:49:0e:01:42:
                    9a:93:d6:20:4d:41:ca:fc:ff:16:63:a0:ea:f2:42:
                    c5:b1:96:99:8a:f0:2f:1c:0b:a2:e3:09:c6:9a:83:
                    db:a1:3f:5e:a4:9d:ba:1f:af:16:8f:db:da:9b:3b:
                    1f:51:29:bd:7f:89:a0:66:96:ab:da:a7:d4:cf:ad:
                    53:7d:6a:8c:ba:c7:00:30:d5:8e:3b:5c:41:b4:5b:
                    76:1d:04:bc:78:1b:5a:fd:73:a0:71:c1:bc:e2:38:
                    79:b4:d4:a7:0c:da:09:09:f1:be:ba:5f:f8:5b:17:
                    0d:f8:bb:9f:15:94:32:79:0f:a3:26:c9:5c:12:7c:
                    1f:7e:f4:5c:eb:1d:24:83:cb:b8:eb:4b:c9:ea:7a:
                    f2:28:d3:e7:54:e2:f4:4e:89:8f:80:78:0f:90:bd:
                    cc:3a:9a:79:3b:51:4e:b9:9a:51:eb:de:6b:f3:09:
                    bc:87:30:c4:4e:26:42:ee:9a:a5:b0:21:58:dd:d9:
                    c4:c0:ab:6a:8c:50:33:bf:b7:a2:29:d2:2f:9d:90:
                    e8:8c:d3:af:a6:ed:34:c6:82:a4:0a:cf:62:3b:cb:
                    ae:e4:d6:ca:0b:b3:e1:ff:e5:bc:10:cd:15:b5:5e:
                    9c:04:f3:ad:28:d7:11:72:d9:b2:4b:06:4e:eb:47:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:97:AF:5A:09:09:B0:35:AA:7F:4A:7E:4C:9D:54:36:5F:BC:15:46
            X509v3 Authority Key Identifier:
                keyid:B7:76:75:4A:2C:8B:10:02:18:B0:61:AA:79:BE:91:86:F1:91:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/B776754A2C8B100218B061AA79BE9186F191500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B776754A2C8B100218B061AA79BE9186F191500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:7c:25:eb:2e:e0:e5:f5:46:27:5a:40:0b:13:7a:b5:7b:
         db:16:44:34:cd:99:a8:b9:d5:8a:70:15:6a:1e:4c:bc:88:0d:
         0c:c0:32:be:61:18:5e:37:94:97:4c:23:7e:8b:e0:c5:03:7f:
         56:38:22:39:4b:2b:e7:7c:aa:2b:8f:cd:6c:72:c6:cf:36:32:
         29:2f:e5:1f:8d:28:e8:d0:fe:db:2d:8c:2c:2f:b3:18:79:e7:
         c6:1b:52:59:57:3c:5c:dc:0f:4f:a1:9d:65:18:5d:81:eb:55:
         78:a8:79:e6:3f:f4:1f:6c:39:ee:b8:e6:60:51:b8:29:a1:7c:
         e6:8c:07:f0:6e:97:d3:3e:58:54:5d:cd:f8:a6:78:f0:fa:98:
         86:4f:95:2b:c5:12:e6:a9:3e:e5:26:fa:f3:6e:37:ce:c5:cc:
         51:0f:d8:5d:7e:78:11:da:2d:3f:96:44:1a:1a:ff:5a:14:d1:
         82:36:d4:08:01:88:60:2e:21:80:f1:98:76:0e:79:cc:47:a1:
         75:53:63:a6:b8:26:29:b1:fc:ab:50:aa:f0:8e:a0:aa:6d:ac:
         8c:f4:04:cb:8b:c7:f3:3a:98:ef:25:f9:8f:d6:37:8e:ae:8a:
         ed:08:d4:aa:e5:0b:3e:b9:3b:41:c2:07:d4:2f:4f:7d:95:d7:
         b9:8c:5d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org