Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230312e302f32342d3234203d3e20323637303732.roa
File:                     34352e3232352e3230312e302f32342d3234203d3e20323637303732.roa (raw, json)
Hash identifier:          o2NxHtQKi8EAq+WnRtOHdgtFyw+3lhSZ8JLZ87Bv2NY=
Subject key identifier:   4E:A6:00:8E:44:C5:F0:3E:7D:CE:FF:8D:DB:D1:30:12:93:8C:1D:22
Certificate issuer:       /CN=02D248AA52D660570300A2C537102DC174ED8461
Certificate serial:       36AE1EE18E389E5F5D560E0C24C1E3E43D5625D8
Authority key identifier: 02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230312e302f32342d3234203d3e20323637303732.roa
Signing time:             Thu 09 Nov 2023 19:00:00 +0000
ROA not before:           Thu 09 Nov 2023 18:55:00 +0000
ROA not after:            Thu 07 Nov 2024 19:00:00 +0000
asID:                     267072
IP address blocks:        45.225.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ae:1e:e1:8e:38:9e:5f:5d:56:0e:0c:24:c1:e3:e4:3d:56:25:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D248AA52D660570300A2C537102DC174ED8461
        Validity
            Not Before: Nov  9 18:55:00 2023 GMT
            Not After : Nov  7 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:1c:29:53:94:ed:24:ca:53:c8:15:4e:13:
                    0f:e4:23:f3:92:37:99:fd:e9:50:25:11:8e:c1:ec:
                    d6:a8:b1:53:1d:fb:cd:3f:99:c4:8a:ea:e4:da:c1:
                    63:8a:98:01:c6:fd:3d:d8:11:49:24:6d:62:81:a6:
                    c3:fc:4c:6c:04:73:4b:6f:0d:01:a6:d8:8a:0c:b7:
                    d1:80:91:42:78:f5:d4:a3:93:85:28:4c:36:a7:3f:
                    90:00:5e:76:1b:41:78:4d:04:3e:20:1b:38:86:1c:
                    b9:56:5c:d9:88:31:c1:cb:98:55:e4:92:c2:e3:38:
                    66:82:fa:83:45:6e:a5:9c:ee:37:f5:a0:c6:0c:6f:
                    00:17:6b:e8:fa:9c:01:b6:04:a4:b5:3d:82:cb:46:
                    fb:43:d3:6c:86:6c:d8:d4:53:36:f4:08:46:95:b2:
                    df:3a:17:d6:96:95:26:19:8a:de:89:d7:c6:6e:4f:
                    28:a4:ea:c0:bf:ab:d0:da:37:4d:81:3f:8d:30:d6:
                    96:f1:98:e1:69:fb:b9:e5:d9:c5:89:d8:38:d2:48:
                    8d:4f:f3:8e:ea:b1:f4:bf:ee:d0:f7:25:8f:1b:17:
                    a7:72:f5:c3:f6:d1:06:b4:df:cf:ab:c1:95:ba:2e:
                    02:e8:0a:f5:7b:f9:d1:4c:17:10:1e:91:84:7e:7c:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A6:00:8E:44:C5:F0:3E:7D:CE:FF:8D:DB:D1:30:12:93:8C:1D:22
            X509v3 Authority Key Identifier:
                keyid:02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/02D248AA52D660570300A2C537102DC174ED8461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230312e302f32342d3234203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:bc:39:79:d4:5d:69:a4:b3:d6:07:89:05:f4:70:d3:8c:35:
         de:fd:5b:08:d0:c6:00:dc:07:90:4e:38:c6:8f:c2:81:7b:51:
         d6:d4:34:26:48:dd:9c:4b:34:73:f2:61:b2:61:76:98:39:b6:
         e5:d8:6d:a7:50:2f:73:2a:94:ce:b4:5d:bc:62:c8:4e:66:be:
         07:b8:b7:3b:89:1e:6a:a7:25:43:69:32:ce:74:63:01:68:fe:
         b0:57:d3:e0:38:f1:18:56:82:2f:91:80:61:c7:38:1d:15:36:
         aa:5d:4d:30:50:8c:85:6e:56:dd:a0:1f:3a:d4:2b:f6:4c:da:
         db:ad:65:c2:e5:d5:01:d5:de:8e:0f:46:b5:bc:2c:18:03:0f:
         77:f3:25:18:31:1d:0e:97:e8:b5:38:38:af:29:05:46:57:6a:
         06:09:04:db:0a:b2:06:ea:08:0f:cc:c9:12:c2:c8:e2:03:a6:
         aa:7e:a2:a5:77:56:be:d1:4a:5e:3f:8e:81:14:d8:b6:74:d1:
         a8:47:47:14:fa:7e:89:4c:3a:88:45:3b:d0:ec:ea:10:83:da:
         bf:18:fc:0c:a4:e9:af:fe:89:03:a4:7e:50:95:05:c7:e6:24:
         0c:0f:3a:c5:67:fa:d2:dd:49:57:08:43:38:80:d9:0e:30:88:
         5d:ff:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org