Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa
File:                     34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa (raw, json)
Hash identifier:          KDhY2j8AAT+fMv41q+Hayfh66Cg5zEbVHlVhHbDUC1s=
Subject key identifier:   A0:C3:17:62:3F:C6:EC:90:CB:CE:7A:62:83:2C:9D:9E:D8:7A:9E:AE
Certificate issuer:       /CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Certificate serial:       0EC2A76F6A1CB0CCC431235E5D3D8D9E4CA37903
Authority key identifier: 95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa
Signing time:             Sat 23 Sep 2023 13:28:53 +0000
ROA not before:           Sat 23 Sep 2023 13:23:53 +0000
ROA not after:            Sat 21 Sep 2024 13:28:53 +0000
asID:                     267334
IP address blocks:        45.233.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c2:a7:6f:6a:1c:b0:cc:c4:31:23:5e:5d:3d:8d:9e:4c:a3:79:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
        Validity
            Not Before: Sep 23 13:23:53 2023 GMT
            Not After : Sep 21 13:28:53 2024 GMT
        Subject: CN=A0C317623FC6EC90CBCE7A62832C9D9ED87A9EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:3b:c1:df:46:52:df:91:0c:c7:de:19:64:
                    99:fc:56:60:b1:fb:13:da:cc:48:fc:2b:7b:21:45:
                    67:30:7d:7d:a6:54:96:86:19:83:fe:95:da:fa:0e:
                    19:19:fe:1c:9c:f5:7e:a8:cc:85:6b:46:70:1e:f5:
                    6c:12:e7:f8:ff:1a:e0:d6:db:9a:f5:05:18:58:0b:
                    56:e6:75:e6:88:4a:00:3c:5a:58:04:14:89:6c:30:
                    23:da:a4:fe:79:df:da:00:1c:d1:75:0e:5d:b5:24:
                    55:e1:48:f6:8f:c2:37:29:55:94:a2:e9:3c:63:e2:
                    9f:fc:62:5f:9c:8d:4b:d3:d4:ea:da:fb:0e:44:18:
                    a0:cd:2a:d4:10:76:e1:07:06:3d:ca:1e:95:f4:ef:
                    90:96:81:5a:08:b3:c7:36:18:fe:a7:9e:a6:d2:11:
                    c0:98:61:88:d3:7b:d8:0b:ea:68:1a:15:4b:c2:27:
                    5d:12:b0:20:1a:db:f5:63:5d:1b:d8:02:ca:df:16:
                    5d:d3:18:4b:92:f1:a9:57:07:47:ec:06:6e:25:f2:
                    3f:df:04:75:41:a7:a5:39:5f:c8:00:b1:c7:2c:7a:
                    b6:f2:48:43:e8:08:c9:81:80:56:66:cd:fd:90:3c:
                    c0:23:45:4a:27:50:7d:40:c5:cc:6f:70:cc:77:70:
                    15:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C3:17:62:3F:C6:EC:90:CB:CE:7A:62:83:2C:9D:9E:D8:7A:9E:AE
            X509v3 Authority Key Identifier:
                keyid:95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:83:63:f3:21:f0:1d:81:d6:d6:f0:f8:84:c4:f0:0e:95:10:
         37:52:30:81:53:b7:23:ad:b0:05:45:32:92:fe:2a:83:3d:09:
         74:e5:26:10:d6:98:0a:9d:7d:1e:d3:72:75:96:10:2e:e4:5e:
         c7:e0:a8:1c:2e:4e:74:04:fa:a0:ff:b0:19:12:18:42:5b:51:
         be:87:ac:04:4a:ee:3a:c0:51:63:cf:e1:1b:f2:eb:49:4e:1e:
         9d:3a:6b:4e:f0:6e:07:5b:f1:36:ad:49:33:c7:4b:5b:21:88:
         a6:6a:7d:46:05:cc:5d:a2:e3:89:40:d4:e4:4a:c6:f8:86:7a:
         5f:b3:39:6d:45:83:a7:69:ca:38:1d:aa:9e:8f:42:50:2b:44:
         fe:0e:0f:00:83:37:a8:76:98:e5:3d:dd:56:77:d9:26:45:63:
         0e:bb:03:cc:c6:d9:6d:30:7b:13:98:eb:e5:d1:85:15:d8:0f:
         69:f6:9e:31:f3:80:3f:1f:56:c6:a4:3e:ae:05:94:30:57:ad:
         6c:e6:67:07:9d:05:cd:b1:ca:b2:09:52:15:fc:94:eb:e1:82:
         27:4f:36:73:39:1d:a2:0c:8f:69:01:9d:db:f9:1c:af:4a:d9:
         1c:44:be:7c:18:31:50:c4:2e:1d:7a:6e:1f:f9:bd:e7:d1:2a:
         08:57:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org