Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa
File:                     34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (raw, json)
Hash identifier:          6KZ5X2T+oF/5Jd1H74dNOYztbQynyTG3n9hM/S9Fh3E=
Subject key identifier:   9E:57:E5:62:ED:A8:98:75:AB:EE:27:80:EA:55:24:DB:18:71:50:3A
Certificate issuer:       /CN=7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E
Certificate serial:       2A3AFC3400C715DBEF1227C0757F53DBFF8A3449
Authority key identifier: 79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa
Signing time:             Wed 03 Jan 2024 14:01:15 +0000
ROA not before:           Wed 03 Jan 2024 13:56:15 +0000
ROA not after:            Wed 01 Jan 2025 14:01:15 +0000
asID:                     267324
IP address blocks:        45.233.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3a:fc:34:00:c7:15:db:ef:12:27:c0:75:7f:53:db:ff:8a:34:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E
        Validity
            Not Before: Jan  3 13:56:15 2024 GMT
            Not After : Jan  1 14:01:15 2025 GMT
        Subject: CN=9E57E562EDA89875ABEE2780EA5524DB1871503A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:a0:c6:60:c5:74:c8:9d:e5:97:bf:66:d6:
                    82:66:a0:f1:f9:b4:1a:56:37:16:21:29:e7:c0:13:
                    e8:3d:81:00:58:ea:ae:db:1e:68:8b:fd:a2:aa:a2:
                    0e:8a:34:97:1e:ec:2a:88:eb:9b:dc:24:f5:ef:70:
                    cd:df:5a:e5:49:a6:1f:92:f9:8a:36:66:06:22:e3:
                    1b:54:38:99:9c:ff:74:ef:7f:73:06:44:fc:66:e8:
                    f2:df:c0:1e:f7:9d:b7:50:36:92:a4:d8:77:49:66:
                    80:a9:39:db:6a:7f:c5:30:2f:0f:74:3f:f3:03:ad:
                    6d:7b:e8:0e:17:cb:d7:7f:59:54:c9:f3:6e:33:40:
                    f9:47:08:3a:17:18:4d:98:0c:d8:cc:31:46:e8:2a:
                    fc:6c:82:e9:16:c7:56:a4:c7:2a:73:8f:87:c2:4a:
                    6f:7c:7c:5f:2a:22:36:a9:52:42:9a:68:51:a6:fa:
                    9f:de:9b:f6:01:70:01:5a:4c:14:23:40:2d:d9:83:
                    21:00:7b:e9:8b:38:05:c9:b3:03:62:43:79:6b:a9:
                    06:70:55:ab:f8:66:68:f1:0c:65:a4:9f:b9:8f:a4:
                    b9:2e:d0:ef:6c:11:af:f3:b4:b1:31:45:9e:79:1b:
                    a5:50:23:da:d4:16:86:db:a2:69:c1:62:7f:44:de:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:57:E5:62:ED:A8:98:75:AB:EE:27:80:EA:55:24:DB:18:71:50:3A
            X509v3 Authority Key Identifier:
                keyid:79:12:F8:D9:AB:C8:9D:2A:88:E9:AD:03:31:C3:F2:F1:B3:29:66:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7912F8D9ABC89D2A88E9AD0331C3F2F1B329665E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/0/34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:07:e3:64:3d:e7:e7:fa:62:a7:eb:f3:63:e0:83:52:c6:27:
         30:d6:7e:f4:47:3b:0c:4c:24:b6:01:11:0b:44:c3:a3:64:89:
         18:69:38:f1:93:76:da:1b:64:ef:84:b2:8b:e9:67:fe:5b:f1:
         0a:41:f0:93:21:25:66:cb:10:c1:fc:c7:41:ee:b2:21:34:fe:
         c2:63:ab:da:89:30:75:ad:54:54:58:03:f6:d4:df:82:4a:6f:
         3c:67:83:99:ab:1a:e0:40:cb:22:94:21:36:fe:49:1e:9f:79:
         fe:70:fa:f8:76:05:69:88:27:3a:7a:bf:7d:d0:d9:7a:87:ed:
         45:8a:1d:c1:55:41:8b:c6:9c:8e:56:ef:99:ac:0d:ec:70:da:
         46:05:0d:09:ab:71:3a:f3:c1:d6:18:13:b6:36:bc:3c:30:d6:
         ac:4b:ca:d7:76:3e:ff:00:4e:f5:85:b1:d9:15:61:28:c5:90:
         1c:8f:09:bb:c2:6e:86:94:7a:ee:a3:1d:77:31:ab:19:18:5e:
         7f:88:24:80:1c:3c:59:3c:9a:8a:60:f8:40:e7:d4:80:9a:aa:
         c2:28:42:66:15:95:d4:58:a5:4d:62:a3:78:96:e4:81:3a:3b:
         59:35:76:69:20:ae:fa:b8:90:09:06:0e:d1:1c:d1:37:05:56:
         97:a0:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org