Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37322e302f32332d3233203d3e20323638333535.roa
File:                     34352e3233392e37322e302f32332d3233203d3e20323638333535.roa (raw, json)
Hash identifier:          cPHxYpLicVc2Blrsq2WI20lZ8UUXDKWIPSYrwwLGueI=
Subject key identifier:   96:05:17:6C:9A:1A:DE:60:54:42:0B:B2:E5:B1:DB:C9:90:FC:18:E1
Certificate issuer:       /CN=2DD7DB25073BEE444F1A2C15B600446279751268
Certificate serial:       1484C713E98B779BAFE7474A05633E29CA32CA1F
Authority key identifier: 2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37322e302f32332d3233203d3e20323638333535.roa
Signing time:             Mon 04 Dec 2023 15:05:18 +0000
ROA not before:           Mon 04 Dec 2023 15:00:18 +0000
ROA not after:            Mon 02 Dec 2024 15:05:18 +0000
asID:                     268355
IP address blocks:        45.239.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:84:c7:13:e9:8b:77:9b:af:e7:47:4a:05:63:3e:29:ca:32:ca:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD7DB25073BEE444F1A2C15B600446279751268
        Validity
            Not Before: Dec  4 15:00:18 2023 GMT
            Not After : Dec  2 15:05:18 2024 GMT
        Subject: CN=9605176C9A1ADE6054420BB2E5B1DBC990FC18E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:29:d0:b7:45:1f:1c:1d:10:9a:60:2e:8b:e8:
                    98:b7:65:53:42:a3:2b:ca:26:09:b7:cc:43:84:cf:
                    67:33:81:3b:81:29:4b:e5:1b:97:85:0d:09:36:36:
                    6f:95:be:69:fd:47:a8:46:e8:84:11:d7:b6:9f:2f:
                    5b:ad:e5:c0:e6:4e:12:57:b2:12:c0:2b:c1:30:aa:
                    a6:00:ad:ed:36:7a:b0:35:f2:a8:53:22:a2:20:79:
                    5a:a9:ae:60:4a:04:f6:07:ca:48:13:70:8a:49:da:
                    eb:53:88:bf:91:73:dc:11:c3:c3:a3:87:57:f5:e4:
                    d6:23:7c:77:66:9e:5b:ce:cd:35:f2:3c:55:9c:8e:
                    66:3b:3d:75:84:67:23:f6:33:77:4b:0d:8c:23:9b:
                    41:82:c0:5b:9b:2a:8d:4e:4e:cc:cc:61:81:41:6d:
                    74:22:5b:8f:6b:14:c4:fc:6d:df:99:71:28:9c:9c:
                    9d:eb:25:4e:84:ae:29:63:03:b9:de:31:7d:ac:bf:
                    47:70:6d:c6:32:01:43:53:87:37:e6:f4:a6:74:45:
                    9f:fa:15:c5:77:0d:c3:48:ef:9e:fc:3a:7c:82:a1:
                    b0:25:55:09:99:5d:a9:f8:15:08:eb:f7:37:40:5a:
                    6b:c1:a0:90:e0:d9:62:fc:11:fb:15:eb:ca:a5:dd:
                    df:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:05:17:6C:9A:1A:DE:60:54:42:0B:B2:E5:B1:DB:C9:90:FC:18:E1
            X509v3 Authority Key Identifier:
                keyid:2D:D7:DB:25:07:3B:EE:44:4F:1A:2C:15:B6:00:44:62:79:75:12:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/2DD7DB25073BEE444F1A2C15B600446279751268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD7DB25073BEE444F1A2C15B600446279751268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/34352e3233392e37322e302f32332d3233203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:27:b3:2a:d2:48:00:04:b5:39:e0:23:18:be:f4:9b:f8:de:
         d8:89:d0:51:48:3b:de:2f:8c:72:60:8b:c5:c9:13:e5:e3:04:
         d7:b3:30:57:b1:fb:75:45:d7:e3:53:39:08:ac:97:79:63:8f:
         68:fe:ac:32:08:ad:d0:41:c7:02:cb:14:a5:2b:0c:a3:5e:ac:
         8e:84:d0:0a:3a:88:ea:fb:47:d8:1b:84:ba:45:8e:c3:26:06:
         71:17:24:83:52:28:ef:32:4e:94:c8:f2:75:2d:d6:82:1c:58:
         4f:b2:b1:cc:cb:5a:ad:f1:9f:68:0b:ef:a6:d8:95:96:ec:5f:
         07:4c:df:ae:58:8a:11:dc:ed:bc:ba:eb:ed:ae:d8:93:d6:d1:
         7c:82:9c:a9:23:e3:50:72:84:7d:d6:1f:b4:96:52:1a:e4:31:
         d8:f6:55:bf:f9:f0:3f:02:2d:4b:68:d4:8d:d7:65:df:6b:a0:
         98:5a:94:24:30:fa:9e:8a:30:b4:28:d7:3c:27:56:52:96:ac:
         f1:1e:59:cb:69:a8:a8:74:0d:19:3c:3b:05:f4:ce:81:2e:f3:
         c5:2a:2b:a8:ca:cb:d0:95:cd:77:1e:a2:80:3d:72:b2:0a:e1:
         e2:f0:31:cf:cd:fa:0d:a6:ca:19:9f:28:4a:1b:95:b9:dd:82:
         66:4a:5a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org