Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139332e302f32342d3234203d3e20323637323234.roa
File:                     34352e3233312e3139332e302f32342d3234203d3e20323637323234.roa (raw, json)
Hash identifier:          saE6scciftQ8X/kCV4N0zTFTXhzA6GC3zLSSPhzf0Gg=
Subject key identifier:   38:76:53:AE:5D:E6:D7:D6:3B:50:41:F3:88:FC:DB:DA:8E:0E:13:0C
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       7E45BC7BE801A30CABA35054EE06E7EB63093C3D
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139332e302f32342d3234203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:29 +0000
ROA not before:           Tue 14 Nov 2023 19:29:29 +0000
ROA not after:            Tue 12 Nov 2024 19:34:29 +0000
asID:                     267224
IP address blocks:        45.231.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:45:bc:7b:e8:01:a3:0c:ab:a3:50:54:ee:06:e7:eb:63:09:3c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:29 2023 GMT
            Not After : Nov 12 19:34:29 2024 GMT
        Subject: CN=387653AE5DE6D7D63B5041F388FCDBDA8E0E130C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:d5:30:a2:ba:16:78:ff:37:cf:f8:c2:cd:
                    c9:3c:88:ed:b5:e7:05:8f:21:94:05:39:65:b4:ec:
                    56:a0:e8:ba:7f:ef:35:dd:af:8d:fe:42:d5:46:92:
                    60:24:a8:1a:cd:a1:d6:4b:4b:91:de:6a:76:54:a6:
                    b4:32:5e:29:d3:f4:9a:b2:25:99:5b:9b:3d:69:58:
                    83:f7:cf:64:4c:55:98:48:ff:33:88:29:db:f3:b8:
                    96:86:b7:81:06:1b:20:4b:60:62:4a:71:39:78:38:
                    5e:df:02:9f:5b:09:a4:bc:44:da:1d:06:30:24:26:
                    9b:5b:62:63:6e:14:28:dc:b8:d9:17:ce:40:ab:c0:
                    1d:6f:2b:24:d3:a3:5f:36:67:af:9f:01:ed:2d:f6:
                    55:1d:a8:4a:20:26:d1:36:3c:ac:d3:d9:5c:6b:f3:
                    cb:f3:d3:59:6d:d5:29:b6:cd:2d:62:25:c5:7c:d6:
                    df:3e:e5:28:c6:48:05:66:fa:e4:2d:7c:26:2d:f5:
                    4d:42:dc:8e:4d:17:ff:01:ef:99:28:14:ad:84:7d:
                    9a:66:67:03:4e:a6:c7:86:29:92:e2:f9:01:a8:0f:
                    9d:3d:66:89:fc:89:ed:5c:36:eb:5f:a3:21:28:78:
                    49:4f:ea:d3:5f:0b:d3:0f:d6:f9:da:e5:99:a2:ba:
                    07:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:76:53:AE:5D:E6:D7:D6:3B:50:41:F3:88:FC:DB:DA:8E:0E:13:0C
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139332e302f32342d3234203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:18:42:bb:bb:ff:4a:ec:87:41:dd:f2:7a:02:d6:24:3f:d2:
         81:ce:5c:e5:af:10:b7:3e:85:3a:cc:29:0c:d8:82:78:98:2b:
         96:bf:13:da:81:10:39:33:3b:df:73:f0:98:f8:db:de:a4:2f:
         7f:d3:00:db:a7:ca:04:8f:ad:a6:4d:03:78:12:45:ac:6f:dd:
         56:85:ee:87:a7:3d:07:b1:7f:34:7f:b0:a5:c0:cf:d2:2c:59:
         43:ea:3e:4c:76:99:e8:34:87:0d:16:66:e9:df:b4:37:a4:b7:
         97:37:f6:47:cc:4b:a2:4f:88:56:d5:83:df:b4:75:5a:0a:08:
         b3:60:27:05:64:46:4f:88:3e:05:dc:e0:6e:30:fa:1f:a1:41:
         3a:6c:39:ee:0f:77:f1:b2:f0:e3:15:1b:4b:79:9f:a3:ac:35:
         c5:ac:7f:fd:5c:d6:00:80:0f:9f:c2:fb:85:d4:7d:84:33:4e:
         0c:38:f8:2b:3a:f3:36:3a:7c:67:b0:4d:26:09:f0:0f:6a:01:
         ff:bb:97:de:40:8a:20:01:9c:6e:f5:3a:bf:4c:7e:ca:3d:d7:
         6d:a2:d4:7b:fd:9b:87:75:89:6d:c7:f6:55:d5:6f:c0:fb:0b:
         97:31:9f:61:9c:e4:74:de:0f:a4:3f:e7:00:b0:8f:df:30:f1:
         69:15:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org