Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/34352e3233332e3132382e302f32322d3332203d3e20323637333132.roa
File:                     34352e3233332e3132382e302f32322d3332203d3e20323637333132.roa (raw, json)
Hash identifier:          Qxwcepd08y0I9Sspr4+lfCBHj8xR6gfuP6gybeb4rLk=
Subject key identifier:   A7:B7:CC:9E:5C:C9:41:88:D6:10:C0:C7:8C:4F:D2:43:7E:78:14:D8
Certificate issuer:       /CN=D4E7FC5209A271F113E974568598FBFD5E252646
Certificate serial:       4138B0E40E24F263FB3E1EAB3CD1B2CF58D0F5C8
Authority key identifier: D4:E7:FC:52:09:A2:71:F1:13:E9:74:56:85:98:FB:FD:5E:25:26:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E7FC5209A271F113E974568598FBFD5E252646.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/34352e3233332e3132382e302f32322d3332203d3e20323637333132.roa
Signing time:             Mon 12 Feb 2024 14:08:14 +0000
ROA not before:           Mon 12 Feb 2024 14:03:14 +0000
ROA not after:            Mon 10 Feb 2025 14:08:14 +0000
asID:                     267312
IP address blocks:        45.233.128.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:38:b0:e4:0e:24:f2:63:fb:3e:1e:ab:3c:d1:b2:cf:58:d0:f5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E7FC5209A271F113E974568598FBFD5E252646
        Validity
            Not Before: Feb 12 14:03:14 2024 GMT
            Not After : Feb 10 14:08:14 2025 GMT
        Subject: CN=A7B7CC9E5CC94188D610C0C78C4FD2437E7814D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:ab:97:63:1d:67:d6:73:ee:11:47:5b:44:
                    4a:b2:f2:41:26:a5:bd:2b:be:17:e1:cc:af:3f:03:
                    7d:85:d2:b5:eb:a0:06:69:2f:a2:77:7e:45:56:81:
                    13:a4:0b:96:76:42:d0:7b:1f:8c:1d:a8:48:68:75:
                    f7:0e:67:e6:f8:41:c4:48:9b:7d:fc:e8:50:71:6e:
                    52:68:21:ad:10:c8:de:80:06:c3:6b:ba:79:b0:db:
                    af:a6:06:6b:4d:9f:b5:1e:6f:46:bc:06:fc:03:15:
                    04:63:45:ab:91:b3:99:be:d0:7d:39:5f:ab:29:e9:
                    65:81:d7:8b:58:87:c7:24:61:d0:d2:63:80:c5:4a:
                    d5:8f:52:ec:35:33:d6:de:dd:d4:c8:96:e2:91:5f:
                    e1:45:cf:25:ef:7e:5d:52:d2:54:3c:01:1c:55:3f:
                    67:71:ac:60:9f:d4:c0:70:4a:87:91:bf:44:82:fc:
                    20:84:34:e7:54:6c:55:b6:3e:ee:65:4e:77:63:7b:
                    75:d5:c3:e3:b7:b2:e4:f1:12:e6:f1:61:0e:5d:3e:
                    1b:57:aa:2b:1f:6e:44:6b:78:5d:c9:32:9e:7d:cb:
                    9b:72:44:43:4f:72:9d:85:7d:c2:69:41:09:11:1b:
                    d9:d6:63:ae:a4:ab:23:29:b5:c8:48:1f:b5:7f:ba:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B7:CC:9E:5C:C9:41:88:D6:10:C0:C7:8C:4F:D2:43:7E:78:14:D8
            X509v3 Authority Key Identifier:
                keyid:D4:E7:FC:52:09:A2:71:F1:13:E9:74:56:85:98:FB:FD:5E:25:26:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/D4E7FC5209A271F113E974568598FBFD5E252646.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E7FC5209A271F113E974568598FBFD5E252646.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDPZWJpSkDkuPy7k79WPwG67vWEYjN5rPqjS5tWmN3ni/0/34352e3233332e3132382e302f32322d3332203d3e20323637333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:51:f5:ce:24:0d:7f:02:7d:18:8e:38:21:af:e6:c1:f3:77:
         37:29:ea:d2:0c:74:3f:83:47:76:8f:ed:98:61:67:a4:62:95:
         50:37:5c:bd:a0:10:4d:88:34:59:79:ab:b3:aa:cb:50:cc:e5:
         d0:f3:11:94:de:6b:1d:94:fa:7c:95:f8:ef:14:8f:48:ef:bd:
         83:31:d2:55:94:0b:36:2a:ea:9d:7a:f3:d4:f0:77:33:70:82:
         80:b8:0b:33:2e:1c:a1:eb:72:39:38:cb:70:df:a1:fb:bb:e3:
         b5:72:af:db:9f:25:3e:1a:6c:f3:6b:fe:2d:6c:3a:b2:4f:e7:
         65:e2:a4:c5:58:94:8a:1f:c7:79:3f:75:53:70:28:37:da:2e:
         fa:da:96:93:6a:c1:33:c5:35:43:f8:80:01:47:73:1a:f6:ce:
         73:12:15:94:c5:25:12:1e:91:6d:ef:be:f2:71:d5:ef:b0:93:
         a0:90:86:1b:7f:01:58:63:7f:9f:43:5f:90:f4:aa:e9:d8:db:
         e2:dc:17:14:f2:02:e6:8e:0a:88:b6:6b:5a:5b:14:80:52:28:
         fd:5e:73:8d:30:ba:e4:bb:81:48:14:b6:40:fc:fb:fd:c6:af:
         f0:ce:98:63:4d:a6:8a:3e:60:8a:9e:ec:5d:d2:b7:a9:78:8f:
         0e:84:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org