Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/0/34352e3233312e32302e302f32322d3234203d3e20323637313833.roa
File:                     34352e3233312e32302e302f32322d3234203d3e20323637313833.roa (raw, json)
Hash identifier:          9iH+tgLhjwXExv9R1rk9AULwlCKFRWRyN6sRxSR2hdg=
Subject key identifier:   8A:6F:82:75:11:79:47:3F:39:F5:AC:1F:8F:92:D4:20:3F:9F:28:38
Certificate issuer:       /CN=70933D44E981FE4AD73F82CBF756039B2175CBBA
Certificate serial:       7C748540319595541B81419C464C0BC0A05F3D16
Authority key identifier: 70:93:3D:44:E9:81:FE:4A:D7:3F:82:CB:F7:56:03:9B:21:75:CB:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70933D44E981FE4AD73F82CBF756039B2175CBBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/0/34352e3233312e32302e302f32322d3234203d3e20323637313833.roa
Signing time:             Thu 28 Sep 2023 20:03:01 +0000
ROA not before:           Thu 28 Sep 2023 19:58:01 +0000
ROA not after:            Thu 26 Sep 2024 20:03:01 +0000
asID:                     267183
IP address blocks:        45.231.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:74:85:40:31:95:95:54:1b:81:41:9c:46:4c:0b:c0:a0:5f:3d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70933D44E981FE4AD73F82CBF756039B2175CBBA
        Validity
            Not Before: Sep 28 19:58:01 2023 GMT
            Not After : Sep 26 20:03:01 2024 GMT
        Subject: CN=8A6F82751179473F39F5AC1F8F92D4203F9F2838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:44:c5:30:80:c5:32:4b:6b:39:ce:8f:29:
                    ec:22:6f:44:95:de:9f:c8:6a:8b:59:09:e4:5f:8a:
                    8e:9a:75:0f:0a:5a:19:43:ba:09:d8:bd:23:3f:16:
                    21:d8:b0:93:01:75:e0:f9:f0:3b:cd:6a:e9:d4:fe:
                    a1:d8:5c:aa:43:b2:d4:11:f0:dc:01:ff:5d:5a:af:
                    7a:a4:06:18:4e:65:54:42:3f:d1:c5:84:e4:2c:04:
                    0c:df:e1:01:8e:0d:2a:83:f6:37:d4:fd:05:21:ec:
                    26:d5:7f:1a:60:46:ad:f3:89:50:18:bc:ae:59:32:
                    af:93:cb:02:a3:d6:3f:67:9d:16:1d:07:86:61:ca:
                    50:7f:24:88:51:cb:5d:42:24:9f:fc:bc:10:0d:17:
                    3e:e9:31:7b:3b:55:1d:7e:f7:0d:1f:50:38:e7:96:
                    95:e8:fe:7b:d9:78:41:70:c5:16:2e:7d:da:2b:63:
                    fc:7f:7c:fc:a7:c2:91:c7:3d:47:a3:16:52:d3:75:
                    c8:d1:5c:63:76:67:48:36:92:ad:c1:e0:f2:1d:0b:
                    3d:84:67:df:e5:38:2d:a6:9b:4b:f4:3f:13:a7:60:
                    2e:c1:4f:e3:d5:0c:14:86:f5:03:75:8a:2e:63:5e:
                    32:b1:e2:6b:87:9c:19:06:7a:ef:d6:3f:20:eb:4d:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6F:82:75:11:79:47:3F:39:F5:AC:1F:8F:92:D4:20:3F:9F:28:38
            X509v3 Authority Key Identifier:
                keyid:70:93:3D:44:E9:81:FE:4A:D7:3F:82:CB:F7:56:03:9B:21:75:CB:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/0/70933D44E981FE4AD73F82CBF756039B2175CBBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70933D44E981FE4AD73F82CBF756039B2175CBBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/0/34352e3233312e32302e302f32322d3234203d3e20323637313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:ad:9a:71:d5:23:f9:74:e6:9a:7e:ea:18:5d:a7:45:4b:
         55:b0:c3:59:12:50:f1:dd:0a:be:10:c7:d0:9b:06:f5:e3:ef:
         3e:2e:69:b0:4e:85:bd:40:ed:e6:4c:8f:77:0f:f8:d3:0f:b1:
         60:64:25:d3:be:67:1b:a0:67:a3:e8:36:05:94:65:2b:33:dd:
         8d:22:4b:be:37:08:9b:9e:ac:6a:ec:e7:f2:6d:5e:55:3e:36:
         56:3d:29:07:b2:77:c4:a7:3d:96:78:09:44:8d:a4:b8:7b:ae:
         09:50:e6:82:ea:5d:bf:2d:c1:12:3d:4e:d2:8f:7d:f5:db:ac:
         10:86:ee:ee:fc:3e:03:3b:4a:66:a6:f5:df:3d:23:67:ff:50:
         cb:ed:3d:a9:57:b6:55:8b:c5:9d:c7:5a:8c:94:44:37:e4:e4:
         13:9c:fb:0e:58:b5:40:d3:ee:17:0a:c4:cd:64:80:3c:94:e8:
         12:a4:fc:f2:48:b0:dc:de:3d:b2:7f:e1:17:86:d6:5b:7e:c9:
         f1:39:a9:d6:e4:7a:63:33:aa:f0:50:d0:51:f0:42:5e:b8:ef:
         df:0b:23:ae:89:61:ce:c4:1b:b6:5c:bf:97:22:7c:8b:35:16:
         14:46:00:ec:9b:1b:0a:75:82:64:70:9e:7a:99:fe:70:8e:b5:
         9c:a0:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org