Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32332d3233203d3e20323637323232.roa
File:                     34352e3232392e36382e302f32332d3233203d3e20323637323232.roa (raw, json)
Hash identifier:          j2Nw9esh3BAXg491nKs3QrDXJUjkto/x48O4d2Bxei4=
Subject key identifier:   4D:87:86:2A:17:8B:59:5A:D2:1E:C1:98:64:81:2B:30:27:E3:39:86
Certificate issuer:       /CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
Certificate serial:       45A798806C765108BC656A726E412150F22A3636
Authority key identifier: 57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32332d3233203d3e20323637323232.roa
Signing time:             Fri 25 Aug 2023 14:54:23 +0000
ROA not before:           Fri 25 Aug 2023 14:49:23 +0000
ROA not after:            Fri 23 Aug 2024 14:54:23 +0000
asID:                     267222
IP address blocks:        45.229.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a7:98:80:6c:76:51:08:bc:65:6a:72:6e:41:21:50:f2:2a:36:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
        Validity
            Not Before: Aug 25 14:49:23 2023 GMT
            Not After : Aug 23 14:54:23 2024 GMT
        Subject: CN=4D87862A178B595AD21EC19864812B3027E33986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:01:be:ef:ed:3c:7a:b0:31:95:f3:36:06:
                    89:ce:27:61:ae:f4:bb:63:82:96:be:e0:82:5b:e6:
                    46:af:26:8d:ff:79:a4:ae:84:39:68:92:1f:16:30:
                    13:c1:55:1d:aa:fa:80:33:11:4d:7b:51:4e:e1:05:
                    f2:50:0c:36:05:fa:87:23:6d:e9:f6:5f:97:1c:11:
                    85:af:4a:c7:2c:90:44:d1:fe:99:6d:a7:b1:31:a7:
                    a6:5a:cf:37:50:5c:32:3e:3d:b5:c1:fc:39:fd:71:
                    3b:3c:44:20:74:ee:63:58:6c:04:30:72:4c:a5:59:
                    c6:1b:35:8a:73:a8:92:7e:52:74:d1:ed:ea:37:d2:
                    37:8a:f4:af:b2:c8:48:fa:70:d3:e4:ab:44:94:b8:
                    04:80:9c:0d:56:c8:d3:b5:ba:1e:6c:57:00:b7:39:
                    dc:a4:86:c3:e1:e5:50:1a:0d:f6:fb:90:7e:a7:9a:
                    4d:e6:32:74:a0:b6:25:d2:50:fa:e4:25:ab:33:4e:
                    2d:c8:f8:7f:17:f7:1f:c6:77:8a:47:58:3d:70:4f:
                    64:cc:be:69:1f:96:03:86:ad:5b:c4:31:99:21:b9:
                    bf:a2:f2:2b:b0:d3:62:40:a7:b6:70:23:b5:90:bf:
                    bd:0d:d1:b8:c3:fa:e4:86:36:84:3d:a3:21:3e:66:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:87:86:2A:17:8B:59:5A:D2:1E:C1:98:64:81:2B:30:27:E3:39:86
            X509v3 Authority Key Identifier:
                keyid:57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32332d3233203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:74:f5:71:e4:73:d6:c0:3c:6e:07:61:c9:0e:13:2b:f0:3d:
         ae:fb:10:5e:68:83:b3:cf:16:9e:ba:9e:77:01:c9:61:d1:2c:
         a2:4a:79:be:59:77:21:60:a3:44:3f:97:f5:58:a6:8e:77:75:
         95:f7:58:96:3f:57:2d:12:62:43:3b:36:92:d2:68:bf:e8:3a:
         89:d4:4d:e6:ec:d1:8c:b7:9f:fc:40:88:f9:de:8a:86:10:db:
         df:85:02:21:a6:4d:fb:cb:79:5a:09:23:f8:4c:bd:1b:72:8b:
         62:93:49:4d:f3:ca:b6:a5:23:be:13:18:d1:cc:36:6c:f5:ba:
         34:02:5c:1d:cc:6b:b9:5a:ea:ed:ac:ab:8b:13:22:f7:de:10:
         62:7f:4c:0c:6e:56:c1:ef:40:49:35:63:f7:9c:1d:36:e0:b3:
         ae:f4:44:05:e8:60:02:88:b7:ff:b5:1b:4e:bb:0f:84:34:ac:
         b1:d6:29:47:e7:8b:c6:27:45:ca:b5:d4:b2:97:3e:d7:6c:77:
         ad:2a:c3:22:c6:b8:ec:d4:09:ea:f0:e2:07:aa:90:87:40:60:
         7c:b0:25:f8:27:78:14:22:86:fc:03:f2:76:bd:db:10:2b:7e:
         a9:63:53:62:c4:a5:4f:6d:52:5c:09:fc:5a:62:b5:14:f0:c0:
         85:3b:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org