Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139322e302f32332d3233203d3e20323637323234.roa
File:                     34352e3233312e3139322e302f32332d3233203d3e20323637323234.roa (raw, json)
Hash identifier:          NvGpWwaHOTW9Azhbaytv5/cOUVMg3plnLiJNUAurS8o=
Subject key identifier:   CB:62:CF:38:DA:D3:8D:58:F9:93:C5:C1:B9:E3:3C:53:E4:CA:63:81
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       270822489EC2D029B2EC43FE75B45EE8ECCA11BD
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139322e302f32332d3233203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:32 +0000
ROA not before:           Tue 14 Nov 2023 19:29:32 +0000
ROA not after:            Tue 12 Nov 2024 19:34:32 +0000
asID:                     267224
IP address blocks:        45.231.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:08:22:48:9e:c2:d0:29:b2:ec:43:fe:75:b4:5e:e8:ec:ca:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:32 2023 GMT
            Not After : Nov 12 19:34:32 2024 GMT
        Subject: CN=CB62CF38DAD38D58F993C5C1B9E33C53E4CA6381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:bd:94:9d:88:40:ac:24:22:ab:45:cc:cf:
                    ed:f6:55:51:80:57:5d:1f:c5:c4:81:4e:37:1d:4b:
                    e1:54:6f:8c:83:ce:8f:88:a0:fa:2c:20:dc:32:e9:
                    9f:4c:ae:b0:c1:63:f3:7a:ab:dd:fb:e7:c0:4b:29:
                    2c:a1:bc:91:59:89:59:60:33:4b:34:7a:2f:1e:72:
                    07:06:98:1f:36:aa:b1:25:4e:34:ed:bc:2c:fa:12:
                    68:ad:da:14:c3:93:ec:de:52:ff:4e:ba:22:98:e2:
                    21:70:a8:28:28:6d:2a:d7:84:83:62:91:4c:7c:8c:
                    b5:ab:52:d8:b8:6a:11:2d:a4:ae:30:fc:10:d8:2d:
                    fe:28:36:b4:e3:ee:be:d7:64:99:c4:75:b2:22:1d:
                    c3:0f:4f:a8:fc:ea:ed:8e:c9:cb:72:1d:e0:0a:6d:
                    90:7c:f4:02:f1:83:d4:f4:6e:9f:48:99:c3:ca:e7:
                    cf:ca:67:0e:0e:49:2a:5a:86:d5:55:89:5e:3e:a1:
                    03:be:98:2f:e6:f2:1f:34:98:37:dd:06:63:16:36:
                    ff:38:5b:81:9b:16:be:bb:06:e9:03:3a:c8:2d:b4:
                    47:9f:f1:17:25:d7:25:4c:1b:7c:11:9e:c6:ce:93:
                    ff:c1:db:07:74:df:28:01:30:53:48:1b:9b:8e:65:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:62:CF:38:DA:D3:8D:58:F9:93:C5:C1:B9:E3:3C:53:E4:CA:63:81
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139322e302f32332d3233203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:2b:0e:2e:cc:2c:af:19:96:3f:76:f7:20:a7:65:36:9b:0c:
         8d:15:3f:b9:44:c4:2b:08:38:7f:f6:62:b4:07:af:38:cf:c7:
         f6:88:94:c5:2c:3a:d6:f7:51:0f:d4:0c:96:45:ea:2a:48:c9:
         89:78:bc:ab:ba:a9:78:19:59:75:45:2a:18:66:e4:ff:9f:cb:
         ca:ea:86:27:eb:a1:a7:2b:00:4c:91:2b:74:23:75:78:dc:92:
         11:83:11:00:1d:7f:17:6d:46:a1:d5:e6:39:8b:81:c3:70:b7:
         f2:5d:e6:f0:70:86:32:03:f6:78:54:df:af:46:b0:6d:ba:97:
         06:43:0f:b9:c3:39:c9:69:b4:57:fa:f3:6b:13:21:6b:c0:09:
         ec:55:c5:2f:e2:17:96:56:f6:5f:76:61:92:b3:5b:7e:a3:d8:
         d7:55:31:70:7d:b6:cb:fd:12:d4:ef:a8:71:ec:d6:8c:c5:2d:
         5f:47:99:78:2f:0f:b3:1b:ef:2e:e4:06:83:d7:49:e9:b0:5a:
         11:6c:92:be:cc:3b:ad:fb:71:af:b1:d1:e6:d6:73:77:5d:88:
         ee:89:8a:cf:0a:96:7b:97:23:c0:3a:32:e8:5d:20:84:9c:79:
         57:20:5a:2f:7e:b9:53:b3:4d:96:1e:e4:56:61:fd:35:91:33:
         bc:24:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org