Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa
File:                     34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa (raw, json)
Hash identifier:          hgZY/OV+eTEcpPG8XszGxPmgRnz76isHbgjUjrlhl/U=
Subject key identifier:   68:15:91:36:FF:08:9A:BB:89:B8:33:89:1D:3A:85:92:96:90:88:30
Certificate issuer:       /CN=2A6CA127604E6E591F99AF4B48C15BCC747F3831
Certificate serial:       4379AF54FE387F9BD3CBEF8E5011F21495C9ACAE
Authority key identifier: 2A:6C:A1:27:60:4E:6E:59:1F:99:AF:4B:48:C1:5B:CC:74:7F:38:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa
Signing time:             Mon 16 Oct 2023 13:43:13 +0000
ROA not before:           Mon 16 Oct 2023 13:38:13 +0000
ROA not after:            Mon 14 Oct 2024 13:43:13 +0000
asID:                     267389
IP address blocks:        45.234.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:79:af:54:fe:38:7f:9b:d3:cb:ef:8e:50:11:f2:14:95:c9:ac:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6CA127604E6E591F99AF4B48C15BCC747F3831
        Validity
            Not Before: Oct 16 13:38:13 2023 GMT
            Not After : Oct 14 13:43:13 2024 GMT
        Subject: CN=68159136FF089ABB89B833891D3A859296908830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:27:80:d4:e3:cd:09:30:96:52:d4:23:0a:
                    e0:e8:1a:8e:41:8a:82:54:f9:f5:b6:da:1a:d3:d1:
                    50:0b:07:6d:ab:2f:f7:11:f1:a1:cf:f5:3b:89:08:
                    c2:0a:0e:01:e5:c2:03:1b:04:b5:d9:5b:1d:f3:37:
                    c5:3c:07:d9:8e:5e:4c:41:67:8a:90:22:4f:c2:4a:
                    74:b3:53:44:e8:3e:ba:01:67:d2:7e:96:09:24:b0:
                    dc:08:e4:de:d2:0f:a6:c0:bb:9b:a9:83:71:11:91:
                    c0:8a:32:af:ec:ec:84:2b:41:55:fb:53:3f:e4:55:
                    d2:18:98:88:16:d3:4b:59:4e:8b:9b:f6:ed:a2:63:
                    9a:78:4d:00:f1:43:15:61:96:5f:3c:03:3f:08:15:
                    a5:b3:35:7c:13:13:f7:4e:bb:4b:16:a9:40:5f:7b:
                    42:3e:86:b4:5d:3c:75:db:04:c6:5a:a9:b9:17:fb:
                    b4:ea:49:c3:ea:af:26:86:bb:76:08:4f:c6:ca:60:
                    90:8b:e7:8e:6a:99:99:73:02:65:93:4e:c2:b9:53:
                    ee:4b:6c:1f:65:4f:a1:e0:20:53:72:a8:e4:6e:8a:
                    0d:4b:1d:d7:c9:49:66:06:03:85:07:71:c6:10:7f:
                    3e:9f:da:47:6a:9f:fa:f9:3d:dc:42:92:b2:09:d6:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:15:91:36:FF:08:9A:BB:89:B8:33:89:1D:3A:85:92:96:90:88:30
            X509v3 Authority Key Identifier:
                keyid:2A:6C:A1:27:60:4E:6E:59:1F:99:AF:4B:48:C1:5B:CC:74:7F:38:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A6CA127604E6E591F99AF4B48C15BCC747F3831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/emj149aTkLdDoxiSyYvmuKXeZSHSoraCjFra6py5BWB/0/34352e3233342e3235322e302f32322d3234203d3e20323637333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:ac:ac:7f:d7:4a:53:54:a1:93:54:78:a3:8b:77:cb:69:
         de:ae:b8:7b:80:7f:06:3b:ac:63:bd:65:98:fa:f5:11:db:25:
         0b:6a:38:c1:33:68:f3:c7:1d:32:ef:12:cf:e7:1f:69:5d:42:
         89:c2:a6:58:6b:7f:ea:dc:f4:e6:1a:fa:7d:9c:66:7b:f1:0a:
         93:df:94:52:4a:46:58:ff:68:78:28:9c:bb:ff:45:c1:fa:9f:
         92:47:e5:19:0c:72:18:09:67:3c:d1:d2:b6:5f:be:e1:35:8b:
         93:1a:1f:79:bb:43:7a:66:fa:3f:d0:d3:57:ca:e2:9d:0b:45:
         13:1e:94:82:68:cb:e7:47:1e:00:25:7a:34:5c:8c:63:6b:bd:
         7b:52:d7:41:1c:ab:04:d4:5e:98:5f:ca:d3:75:f6:06:69:06:
         63:2c:85:f6:11:0a:4e:a7:8b:01:2b:6e:b3:88:71:7c:6f:43:
         66:98:b0:c5:7a:a2:67:a2:cc:16:b6:cd:ac:26:32:40:2d:3a:
         05:d9:b3:96:2f:55:f6:1c:90:7b:15:79:5e:5c:8d:a8:42:9e:
         92:d9:e2:7d:73:79:0d:1d:56:d2:ef:ca:a9:d5:55:a2:88:97:
         64:20:1b:51:63:1d:7a:97:71:68:b8:46:cf:1f:4c:69:a1:0b:
         37:77:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org