Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa
File:                     34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa (raw, json)
Hash identifier:          B0cNS2W52pmNpDTYqX4+UnOW8ADc/OD2yhcQKVcFblI=
Subject key identifier:   54:CF:2E:7C:59:B9:3A:27:81:9B:8A:C5:6F:99:B3:82:DE:5C:51:25
Certificate issuer:       /CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Certificate serial:       04EA69424FA8E7501E92A52534D3D861F3F34011
Authority key identifier: 95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa
Signing time:             Sat 23 Sep 2023 13:28:41 +0000
ROA not before:           Sat 23 Sep 2023 13:23:41 +0000
ROA not after:            Sat 21 Sep 2024 13:28:41 +0000
asID:                     267334
IP address blocks:        45.233.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ea:69:42:4f:a8:e7:50:1e:92:a5:25:34:d3:d8:61:f3:f3:40:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
        Validity
            Not Before: Sep 23 13:23:41 2023 GMT
            Not After : Sep 21 13:28:41 2024 GMT
        Subject: CN=54CF2E7C59B93A27819B8AC56F99B382DE5C5125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:92:4b:67:c2:79:07:5e:dd:2d:21:ed:f2:
                    ed:cf:63:db:5c:3e:3a:de:86:ba:c8:98:ca:48:11:
                    56:8d:5f:68:63:e6:3b:c7:92:4e:ef:48:e6:f1:79:
                    d2:d4:ee:8d:4e:58:0b:21:1c:f4:b6:d7:ea:58:28:
                    4d:5d:cd:34:2e:2c:c6:7b:9f:4a:db:73:c2:41:63:
                    ef:77:b7:9c:4b:ef:da:31:b9:86:10:10:c0:eb:c8:
                    50:2e:fe:db:01:76:5a:c5:eb:4f:98:e2:1c:03:b1:
                    19:72:32:42:36:3b:56:32:37:2f:21:9f:ea:57:1c:
                    b1:fb:f2:42:92:7f:c0:ca:78:7e:76:15:48:3d:86:
                    a2:56:db:be:83:19:b7:d1:57:61:56:de:d5:5d:89:
                    fa:1d:24:69:91:a3:1a:80:e4:70:bc:e3:82:2a:03:
                    4e:bb:0d:22:7f:08:5a:26:15:45:a5:4a:6f:63:0b:
                    b7:1c:8f:00:cd:68:0d:55:10:6a:08:1d:c0:29:1f:
                    72:68:6a:6d:6c:8d:2c:c9:67:16:8c:b9:74:71:db:
                    70:ea:ea:ef:f2:3b:15:a1:9c:5c:3c:ec:ae:37:2f:
                    fe:f9:2c:9a:5d:a5:78:41:21:fa:e6:31:a7:b3:b0:
                    85:ff:e0:d1:12:24:31:6d:e5:e1:0a:96:46:92:5f:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CF:2E:7C:59:B9:3A:27:81:9B:8A:C5:6F:99:B3:82:DE:5C:51:25
            X509v3 Authority Key Identifier:
                keyid:95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235342e302f32342d3234203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:21:b5:c7:ce:f4:bc:9d:88:1c:e0:5d:e5:84:a4:79:5b:bd:
         e3:ec:10:9d:8d:62:a2:1a:9b:ac:05:62:bf:74:c8:91:b0:c3:
         87:ce:56:f3:30:24:10:71:a4:c6:af:2a:c0:7f:3e:43:5f:b9:
         d9:ad:05:c4:66:0b:35:c6:16:60:f0:78:47:71:66:a4:3f:17:
         0a:73:ac:46:c5:ce:2f:02:53:a7:be:8d:51:bf:f2:80:1c:ca:
         03:a1:2b:64:7f:92:5d:86:d0:e1:d8:95:cd:44:6d:26:44:c7:
         30:95:44:21:1b:4a:ae:de:88:b6:69:bd:eb:ac:d4:c6:aa:e2:
         ca:61:3e:21:00:7a:ed:6c:28:bc:7b:00:9a:99:2e:1a:7d:72:
         4f:04:ed:b3:47:dc:41:46:7f:3e:2f:e0:b3:07:72:19:10:38:
         67:24:3d:67:fb:2e:4e:84:f6:34:39:ff:6d:10:4f:b4:92:63:
         7d:6b:b3:a4:0c:37:86:11:44:22:4c:9e:73:44:1b:e1:ae:0d:
         ca:df:14:4b:03:bc:4a:3c:89:3f:d3:75:45:1f:80:d7:91:13:
         76:f3:8d:c3:d1:7e:e2:a8:35:eb:f3:b7:2d:b6:76:8f:c0:df:
         b9:af:1d:8a:3f:8c:f4:54:b9:9b:9e:6c:d6:ff:df:0f:b0:af:
         4f:03:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org