Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa
File:                     34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (raw, json)
Hash identifier:          x9JYY45UsBMW1GsLEC01an5HfhbtQiqMtsLW7K035Hg=
Subject key identifier:   5E:02:4C:1F:13:2F:08:DA:01:D8:DB:8D:2B:AD:F4:4C:74:9F:E4:89
Certificate issuer:       /CN=9447D2427FA197D3E45945D47D680D6B09428530
Certificate serial:       771B248DDAE85E70DD2E0741C08AD156C3E78D67
Authority key identifier: 94:47:D2:42:7F:A1:97:D3:E4:59:45:D4:7D:68:0D:6B:09:42:85:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9447D2427FA197D3E45945D47D680D6B09428530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa
Signing time:             Thu 08 Feb 2024 20:18:48 +0000
ROA not before:           Thu 08 Feb 2024 20:13:48 +0000
ROA not after:            Thu 06 Feb 2025 20:18:48 +0000
asID:                     268295
IP address blocks:        45.237.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1b:24:8d:da:e8:5e:70:dd:2e:07:41:c0:8a:d1:56:c3:e7:8d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9447D2427FA197D3E45945D47D680D6B09428530
        Validity
            Not Before: Feb  8 20:13:48 2024 GMT
            Not After : Feb  6 20:18:48 2025 GMT
        Subject: CN=5E024C1F132F08DA01D8DB8D2BADF44C749FE489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:d1:38:a1:a4:ec:d1:0f:df:29:e8:34:aa:
                    0c:aa:71:f6:45:2d:1a:c0:f6:e6:dd:54:87:60:52:
                    17:fd:da:91:66:04:bc:c5:77:89:41:e7:38:f9:fd:
                    a9:c4:96:c9:11:67:d4:c6:bb:57:ad:85:55:71:2b:
                    3f:d7:30:eb:bf:49:16:4f:ed:e8:cc:f1:70:e7:9c:
                    85:77:a5:37:d6:3a:7e:4b:49:7d:88:7c:b1:70:50:
                    93:bf:8b:53:2b:cb:7d:b6:b5:56:a1:c1:c7:56:a5:
                    51:d5:05:af:e2:f1:c0:0f:8f:89:25:22:00:eb:af:
                    34:7d:de:5a:e0:0b:46:ac:6a:81:3f:42:03:9c:52:
                    88:13:fa:78:0e:2e:9b:b0:4f:05:84:b3:c2:b1:7c:
                    6a:d5:3b:4d:72:cc:e1:56:43:54:d0:b8:45:2b:bb:
                    4e:73:54:6f:36:b3:14:48:75:d2:77:0d:0e:96:e3:
                    3a:18:ae:9e:05:48:7e:44:ab:a2:30:fa:07:e5:0e:
                    43:1c:39:17:cb:40:57:d7:07:16:11:76:4f:35:41:
                    e6:54:c3:b1:7d:52:e2:29:27:4b:00:0e:29:91:ec:
                    01:0d:2c:38:c1:bd:f7:d5:b2:b4:a5:cd:aa:72:29:
                    be:de:de:23:63:c6:55:21:7b:2e:e6:9c:8c:87:2b:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:4C:1F:13:2F:08:DA:01:D8:DB:8D:2B:AD:F4:4C:74:9F:E4:89
            X509v3 Authority Key Identifier:
                keyid:94:47:D2:42:7F:A1:97:D3:E4:59:45:D4:7D:68:0D:6B:09:42:85:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/9447D2427FA197D3E45945D47D680D6B09428530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9447D2427FA197D3E45945D47D680D6B09428530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:59:56:4f:8d:73:12:56:6a:ed:58:0e:60:8d:38:a4:c1:54:
         33:33:88:5c:25:a6:d3:03:d5:aa:48:9b:16:8a:c6:5a:7b:7a:
         0c:4a:7d:aa:31:c6:84:de:bc:26:31:b4:37:92:b2:0e:48:98:
         af:53:49:93:73:62:fd:e5:d4:7b:0a:1f:6f:ec:f4:f8:a7:6e:
         8b:0c:54:f9:33:f0:43:cc:30:e0:64:7c:9b:08:47:1c:43:68:
         6c:c7:bc:23:8c:82:e2:cf:2d:0a:e3:ae:6e:4d:a9:73:b7:f6:
         14:12:a7:eb:ed:e5:18:92:0c:d5:54:0f:b1:96:87:71:77:78:
         01:bb:bf:8d:07:db:33:82:1a:51:d1:41:81:1f:5c:03:eb:80:
         6e:0a:fb:88:2b:37:78:77:22:10:9a:c6:d7:d4:62:58:61:c6:
         5f:11:13:96:ce:a6:28:f4:88:c1:5c:3c:13:46:74:45:3e:2b:
         a9:82:cb:25:65:9a:d6:be:49:6a:1b:b9:8f:a2:20:66:2e:64:
         29:5b:cc:96:7e:01:ba:58:3f:ff:8a:5e:ec:c7:1b:0d:ed:4a:
         6a:38:a9:4e:7d:9b:d4:3a:9d:a9:2f:0c:1d:0b:1e:15:ff:68:
         03:6a:69:97:0d:eb:51:81:67:75:aa:96:98:c2:ad:49:bf:92:
         b8:b6:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org