Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/34352e3233372e39362e302f32322d3234203d3e20323638323638.roa
File:                     34352e3233372e39362e302f32322d3234203d3e20323638323638.roa (raw, json)
Hash identifier:          GEOBzTBidDYfWf1i00VGSB6aKiUVM4jUF7cg2P4ingw=
Subject key identifier:   C0:5B:E5:79:E5:3F:78:74:0D:F0:B9:32:27:E1:57:67:46:88:3D:7E
Certificate issuer:       /CN=0D9DF703105BE5C115891358CC9BA0A6E1039C72
Certificate serial:       6F59DD6B02AA6FAF20C047B16A39DC06C5DCBDEF
Authority key identifier: 0D:9D:F7:03:10:5B:E5:C1:15:89:13:58:CC:9B:A0:A6:E1:03:9C:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9DF703105BE5C115891358CC9BA0A6E1039C72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/34352e3233372e39362e302f32322d3234203d3e20323638323638.roa
Signing time:             Wed 24 May 2023 14:40:00 +0000
ROA not before:           Wed 24 May 2023 14:35:00 +0000
ROA not after:            Wed 22 May 2024 14:40:00 +0000
asID:                     268268
IP address blocks:        45.237.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:59:dd:6b:02:aa:6f:af:20:c0:47:b1:6a:39:dc:06:c5:dc:bd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9DF703105BE5C115891358CC9BA0A6E1039C72
        Validity
            Not Before: May 24 14:35:00 2023 GMT
            Not After : May 22 14:40:00 2024 GMT
        Subject: CN=3082010A0282010100E00F2E0EBC1F5C4999DA0C3F44208C5420FB924B52B5B86FA36C8E29F0727FDBFF76A357A2431230C6A2C222E23391025E79448E2675E9C0D68A49E7CE8E4A38CC49AE71564C92CA4EC3526FD29C8BE4337BA9DD16E652D5526400A4DDF2F62DB754A9795A4907CC49688EB090C6605882FD6306B971212B7762449F0A9800B1400C44908654C63ADB64FFAAB85A6660E878865B210C821ABE9472336643CA857C2548F0B2AB2824C3AEEEBA2761ADF1408B9C2528F4E9EED1EE08258405F8EFFD1ED8706EEA7A2A573C7059A084E7B49C90584BAFDBFA5B83AF1A108730EF93E04508C1C2D8318EEBD206267BCE0667CAD58B9747BA37DE3B6040F18D4A6FB10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0f:2e:0e:bc:1f:5c:49:99:da:0c:3f:44:20:
                    8c:54:20:fb:92:4b:52:b5:b8:6f:a3:6c:8e:29:f0:
                    72:7f:db:ff:76:a3:57:a2:43:12:30:c6:a2:c2:22:
                    e2:33:91:02:5e:79:44:8e:26:75:e9:c0:d6:8a:49:
                    e7:ce:8e:4a:38:cc:49:ae:71:56:4c:92:ca:4e:c3:
                    52:6f:d2:9c:8b:e4:33:7b:a9:dd:16:e6:52:d5:52:
                    64:00:a4:dd:f2:f6:2d:b7:54:a9:79:5a:49:07:cc:
                    49:68:8e:b0:90:c6:60:58:82:fd:63:06:b9:71:21:
                    2b:77:62:44:9f:0a:98:00:b1:40:0c:44:90:86:54:
                    c6:3a:db:64:ff:aa:b8:5a:66:60:e8:78:86:5b:21:
                    0c:82:1a:be:94:72:33:66:43:ca:85:7c:25:48:f0:
                    b2:ab:28:24:c3:ae:ee:ba:27:61:ad:f1:40:8b:9c:
                    25:28:f4:e9:ee:d1:ee:08:25:84:05:f8:ef:fd:1e:
                    d8:70:6e:ea:7a:2a:57:3c:70:59:a0:84:e7:b4:9c:
                    90:58:4b:af:db:fa:5b:83:af:1a:10:87:30:ef:93:
                    e0:45:08:c1:c2:d8:31:8e:eb:d2:06:26:7b:ce:06:
                    67:ca:d5:8b:97:47:ba:37:de:3b:60:40:f1:8d:4a:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5B:E5:79:E5:3F:78:74:0D:F0:B9:32:27:E1:57:67:46:88:3D:7E
            X509v3 Authority Key Identifier:
                keyid:0D:9D:F7:03:10:5B:E5:C1:15:89:13:58:CC:9B:A0:A6:E1:03:9C:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/0D9DF703105BE5C115891358CC9BA0A6E1039C72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9DF703105BE5C115891358CC9BA0A6E1039C72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZJTYP65YizWaGfsCaVHHuqCWg1SGxpfQtGref9PtmG/0/34352e3233372e39362e302f32322d3234203d3e20323638323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:15:fc:97:3b:58:06:f7:76:62:27:15:55:21:2e:73:b8:bf:
         b4:f3:1a:88:61:93:a9:9d:e4:08:e2:f5:b1:8e:45:23:35:89:
         8e:79:02:15:a9:11:aa:81:be:c6:d6:77:61:74:05:a1:f8:48:
         30:f9:e8:fd:34:09:ad:7f:f8:60:fb:8e:4a:9f:f4:aa:ec:29:
         24:fa:6a:10:5c:ae:29:52:06:13:70:9f:13:aa:0b:fe:7c:50:
         4e:a8:6c:42:96:67:52:a2:5d:fd:19:c3:b0:65:0a:9f:fc:23:
         2d:17:b5:e0:0d:6e:01:48:18:09:4e:08:ba:ea:8f:f2:83:bc:
         01:9d:5d:4c:fc:07:88:aa:9e:f1:98:07:cb:fa:69:f1:ee:2e:
         4f:45:3a:26:45:9d:40:7b:1e:16:4d:5f:56:97:23:12:e4:94:
         70:5e:8a:b9:6a:c8:12:2c:23:03:fb:2c:86:de:58:51:c4:50:
         48:ea:56:c8:99:2c:04:bb:85:21:a0:43:00:25:b2:c5:6a:c1:
         35:d1:e7:60:fc:1f:79:7b:c4:36:95:21:eb:19:5b:2a:5a:67:
         f7:6e:9f:cb:af:9a:77:4f:95:fd:c7:bb:7e:9e:f4:2a:35:d1:
         eb:67:9a:1a:30:eb:4a:85:42:d4:8c:45:75:88:74:f2:b9:70:
         51:58:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org