Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232362e302f32342d3234203d3e20323637333330.roa
File:                     34352e3233332e3232362e302f32342d3234203d3e20323637333330.roa (raw, json)
Hash identifier:          c0m3KsUBAbYxqu7AE0zub4AGZG5Rv9JxRP/GNnJs08Q=
Subject key identifier:   9E:44:BA:94:38:64:27:E0:D8:A6:49:92:1C:44:48:72:BB:59:42:8E
Certificate issuer:       /CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
Certificate serial:       1C238BCDE48F39BE0D7D5484C3C88C8F46112B84
Authority key identifier: DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232362e302f32342d3234203d3e20323637333330.roa
Signing time:             Thu 14 Sep 2023 14:45:23 +0000
ROA not before:           Thu 14 Sep 2023 14:40:23 +0000
ROA not after:            Thu 12 Sep 2024 14:45:23 +0000
asID:                     267330
IP address blocks:        45.233.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:23:8b:cd:e4:8f:39:be:0d:7d:54:84:c3:c8:8c:8f:46:11:2b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Validity
            Not Before: Sep 14 14:40:23 2023 GMT
            Not After : Sep 12 14:45:23 2024 GMT
        Subject: CN=9E44BA94386427E0D8A649921C444872BB59428E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fb:dd:ce:15:2f:01:ae:ce:1d:2d:7d:5c:ac:
                    57:85:81:c1:59:fe:80:f0:49:60:d7:ff:34:84:0c:
                    46:b9:3f:33:8e:c1:16:a8:d5:5d:df:df:ce:47:32:
                    4d:da:b7:b5:00:3c:ee:b2:a8:8a:bb:ea:62:02:00:
                    14:1f:76:ba:67:4a:85:5e:d1:ad:80:9f:60:3b:1a:
                    27:31:71:77:62:28:7c:62:39:d3:2b:4f:d2:30:cb:
                    21:e3:bf:f6:62:af:d2:25:c0:98:e9:7e:03:1e:80:
                    15:9c:e4:a3:31:9f:f5:0d:e3:a0:92:8f:51:9b:de:
                    1d:8e:56:97:a2:ed:70:94:a7:54:0a:78:79:82:12:
                    3d:a2:19:47:42:d8:86:dd:b1:3f:65:53:ac:9c:2e:
                    d6:64:92:b8:48:51:f0:09:77:3f:75:ef:69:4e:ca:
                    e1:76:22:bf:76:f5:e4:b2:86:fd:94:db:8c:ed:6c:
                    40:6c:1e:68:30:88:88:aa:b7:f6:72:6b:6b:88:76:
                    e0:9c:0e:16:3c:41:17:62:ce:98:63:d9:ca:b7:40:
                    43:5e:9f:1a:e6:c1:b0:dd:d3:93:1f:8e:a5:a0:97:
                    e8:e5:44:95:96:65:91:35:eb:87:f2:a8:ea:47:c2:
                    43:73:59:c1:de:25:b9:bf:98:90:bb:7e:f9:c3:00:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:44:BA:94:38:64:27:E0:D8:A6:49:92:1C:44:48:72:BB:59:42:8E
            X509v3 Authority Key Identifier:
                keyid:DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232362e302f32342d3234203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:16:7d:7b:a9:b5:14:90:fa:d7:70:77:f3:43:5e:6b:14:7b:
         d9:e4:1f:38:a4:29:85:71:52:0d:d3:8b:97:e9:76:02:62:a5:
         b8:96:3b:17:db:7d:c7:09:38:6f:cf:ba:21:38:07:f2:28:fd:
         27:c9:d8:51:10:4b:57:1a:3c:20:59:32:56:84:d5:1f:3f:ef:
         7d:a2:34:aa:e4:06:d4:87:32:85:14:56:21:0b:c6:20:91:d4:
         84:c3:93:e1:96:a2:4f:0a:19:5a:7d:c8:7c:59:3b:ef:ad:e2:
         60:0e:3f:82:fc:2d:46:25:d5:b9:29:b4:1f:a1:f1:f1:8b:af:
         3c:80:cb:f6:1d:81:93:0e:ba:09:8a:c9:3d:37:f8:f1:1c:b4:
         46:de:7b:25:a6:4a:44:fb:24:16:e6:48:44:50:10:50:14:9b:
         ac:dc:3d:cb:bd:1e:3c:48:55:16:c0:5b:65:2b:e7:ca:d2:1f:
         03:0e:96:4b:12:8f:83:8f:b7:15:77:6f:2a:de:15:1b:d3:cf:
         e4:69:ca:91:b3:29:bd:61:61:fb:93:68:77:36:81:22:80:0e:
         4b:38:4d:70:b4:79:7e:6d:2a:d4:f6:05:ef:be:73:16:37:a5:
         81:c5:f5:a3:77:74:72:19:6f:f2:c9:16:62:22:09:db:0f:7a:
         df:df:7a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org