Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa
File:                     34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa (raw, json)
Hash identifier:          kmQLB2bvzPuEjKtio1RrzCkhCUl5o26QHNSaSdVnx7c=
Subject key identifier:   F4:69:97:C8:6E:ED:24:1E:76:F5:23:83:68:64:AC:55:F9:76:4D:67
Certificate issuer:       /CN=02D248AA52D660570300A2C537102DC174ED8461
Certificate serial:       4E99FD0CCB5FA953567F92D1B16B0C74B376E71C
Authority key identifier: 02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa
Signing time:             Thu 09 Nov 2023 19:00:00 +0000
ROA not before:           Thu 09 Nov 2023 18:55:00 +0000
ROA not after:            Thu 07 Nov 2024 19:00:00 +0000
asID:                     267072
IP address blocks:        45.225.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:99:fd:0c:cb:5f:a9:53:56:7f:92:d1:b1:6b:0c:74:b3:76:e7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D248AA52D660570300A2C537102DC174ED8461
        Validity
            Not Before: Nov  9 18:55:00 2023 GMT
            Not After : Nov  7 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:14:94:06:e9:ee:7a:6c:d0:a8:81:c0:96:
                    f6:f0:7e:ba:87:b1:1b:fe:13:8b:dc:36:0d:79:25:
                    64:c5:ea:58:01:11:80:25:7c:42:8d:d4:69:93:31:
                    c5:f1:a2:a9:86:0b:71:4c:27:5c:15:fd:4c:61:dc:
                    a4:74:2d:b2:47:da:fa:dd:c5:4f:51:d5:e9:4b:74:
                    77:14:dc:2e:be:32:dc:24:8c:97:68:fd:a9:e7:2a:
                    0b:d9:20:b8:c5:67:0b:b3:16:b1:bf:35:0f:1e:e2:
                    a0:cb:fd:28:41:82:1d:7f:25:c3:c9:b8:2f:a3:7b:
                    ca:3b:c8:99:b4:5c:8d:79:26:1f:d2:e0:8e:da:6b:
                    f3:e3:80:71:03:1c:91:56:ad:88:8b:15:63:ea:70:
                    32:35:6d:7f:3d:dd:84:c5:3d:13:68:b5:8b:b2:67:
                    03:42:4e:fa:ce:aa:a9:49:95:67:3c:88:64:29:c0:
                    9a:20:b4:77:3d:cc:41:a0:9b:d3:28:06:af:95:71:
                    b1:83:a5:ba:36:78:a0:d8:3e:f6:b5:05:4c:4f:a0:
                    cb:ae:78:24:72:48:3b:24:e9:96:41:f3:4d:84:32:
                    ef:1c:3a:d8:e8:a4:69:35:21:fb:f8:08:45:16:74:
                    89:67:60:22:e3:29:e2:9b:69:7f:e0:a7:34:df:dc:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:69:97:C8:6E:ED:24:1E:76:F5:23:83:68:64:AC:55:F9:76:4D:67
            X509v3 Authority Key Identifier:
                keyid:02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/02D248AA52D660570300A2C537102DC174ED8461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230322e302f32342d3234203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:94:b4:c3:e2:c4:dd:f1:fe:50:5c:24:36:05:e0:5f:c0:4d:
         f4:fb:dc:34:9a:9c:6f:de:45:a4:76:f2:c1:12:ca:4a:34:b7:
         5e:49:6f:2d:b5:b7:eb:dc:ad:6c:9e:21:2d:ff:70:b6:1c:a7:
         e0:b2:be:25:28:65:1f:5d:87:b5:d3:10:04:46:71:95:4a:8b:
         74:34:63:14:3e:6a:76:e6:c6:97:c8:15:06:e8:f0:f2:98:26:
         38:52:6f:64:cf:93:07:77:28:e3:25:b8:27:bc:a0:5d:00:cf:
         f7:d4:83:5f:41:30:d3:bd:3d:00:8c:5c:5c:32:8f:48:b5:3a:
         5a:92:49:69:c9:c3:36:7c:9f:e8:e6:e0:64:57:d2:8b:fc:bb:
         7e:b7:94:c6:27:1b:0a:40:9a:bc:b9:56:59:9b:e0:51:2f:ec:
         a6:dc:9c:9c:98:2f:46:a6:00:c4:5e:50:cf:0e:44:f6:c0:5d:
         3c:c3:43:8f:eb:84:7a:a4:a8:42:56:1b:0d:12:72:2e:ff:05:
         a8:01:86:c5:7d:b9:c3:c0:1d:fd:93:c0:b2:24:02:82:a7:2c:
         ce:38:ab:55:c6:a0:3a:ae:8e:54:d6:ea:aa:e0:18:43:2a:0c:
         d3:25:2e:dd:19:93:39:83:99:51:cf:ed:e3:a9:8e:e2:1f:3e:
         81:32:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org