Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/34352e342e3134322e302f32332d3234203d3e20323636303732.roa
File:                     34352e342e3134322e302f32332d3234203d3e20323636303732.roa (raw, json)
Hash identifier:          UX81XfNzH7aFsj3E4V1hA9xJojP6aYJHjQmYL9Bi0ls=
Subject key identifier:   C9:A5:26:BB:38:3F:61:48:92:CD:9F:5D:C9:6A:E6:F1:26:4D:42:07
Certificate issuer:       /CN=33494705E93212BFD28AEA719521AE8BF6684199
Certificate serial:       60556B6E7A084E76638DDD51755BD8068CE698C0
Authority key identifier: 33:49:47:05:E9:32:12:BF:D2:8A:EA:71:95:21:AE:8B:F6:68:41:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33494705E93212BFD28AEA719521AE8BF6684199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/34352e342e3134322e302f32332d3234203d3e20323636303732.roa
Signing time:             Wed 30 Aug 2023 13:59:04 +0000
ROA not before:           Wed 30 Aug 2023 13:54:04 +0000
ROA not after:            Wed 28 Aug 2024 13:59:04 +0000
asID:                     266072
IP address blocks:        45.4.142.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:55:6b:6e:7a:08:4e:76:63:8d:dd:51:75:5b:d8:06:8c:e6:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33494705E93212BFD28AEA719521AE8BF6684199
        Validity
            Not Before: Aug 30 13:54:04 2023 GMT
            Not After : Aug 28 13:59:04 2024 GMT
        Subject: CN=C9A526BB383F614892CD9F5DC96AE6F1264D4207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:ca:cc:14:71:86:3e:3b:93:ed:8e:98:57:
                    36:61:74:39:92:64:e1:13:c7:83:9d:18:ba:dc:32:
                    67:a2:ca:d6:aa:64:eb:0d:68:b1:5b:0f:32:64:b5:
                    6a:fd:c6:a7:f9:55:21:1c:b3:b1:e2:f2:68:30:93:
                    5f:97:3a:28:20:20:d3:17:35:98:9a:3b:f4:a8:02:
                    5d:68:28:e3:c8:4c:0c:b7:3a:cb:d9:65:7b:13:93:
                    16:b5:68:d0:d8:bc:51:1c:44:06:bf:a0:11:ce:42:
                    55:24:9d:a4:a5:31:65:de:7e:cf:80:7c:e2:3e:ca:
                    e1:4f:d6:83:6d:b3:16:d0:1a:ed:c3:1f:f8:49:aa:
                    e8:4b:43:3c:7b:9e:c4:de:14:ff:d0:8a:03:d0:ab:
                    9e:c5:b2:7a:3b:9d:6a:cc:9e:f5:73:e0:e2:dd:a6:
                    96:b7:11:f9:93:be:82:58:aa:23:e2:1d:3a:cd:19:
                    4c:8e:a6:3b:c9:a6:d1:21:fc:67:c0:3f:ca:29:43:
                    bb:ae:83:ec:ee:b2:6b:07:59:ac:cc:30:ba:45:95:
                    d0:e7:00:08:7c:26:3e:b9:6b:49:03:3f:eb:1f:70:
                    27:09:68:5e:f4:05:28:52:77:ce:65:45:8c:c6:66:
                    c9:b8:4f:bd:a2:0b:e6:12:ba:24:30:d7:06:b9:95:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A5:26:BB:38:3F:61:48:92:CD:9F:5D:C9:6A:E6:F1:26:4D:42:07
            X509v3 Authority Key Identifier:
                keyid:33:49:47:05:E9:32:12:BF:D2:8A:EA:71:95:21:AE:8B:F6:68:41:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/33494705E93212BFD28AEA719521AE8BF6684199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33494705E93212BFD28AEA719521AE8BF6684199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/34352e342e3134322e302f32332d3234203d3e20323636303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:b8:68:bf:c3:90:ca:40:a8:d7:be:ad:fc:72:a4:5c:39:
         43:f0:36:d5:8a:cb:c2:a6:81:74:56:5a:1e:83:43:fb:d4:91:
         ec:4b:67:df:68:a7:ce:a4:47:7a:46:af:5c:79:15:86:30:2c:
         f2:f9:55:27:1b:1a:01:8f:94:3d:69:c5:f4:84:4c:d2:64:fe:
         09:88:9c:77:cf:fa:34:55:2a:d6:1c:bc:bf:19:f1:61:ec:4e:
         02:a8:a8:4d:0c:18:fb:ed:b0:59:e6:5e:86:40:da:28:a6:8c:
         29:11:af:d3:27:14:1e:f5:ab:d9:51:16:61:eb:43:af:90:2d:
         04:bf:42:e4:0d:74:4b:aa:39:93:f4:0f:9c:20:74:26:43:68:
         28:3d:d3:47:53:69:1e:33:47:f4:64:e3:07:31:2e:aa:9b:ac:
         88:0d:34:23:7b:fa:44:de:9c:33:45:7e:d8:79:29:1a:26:c3:
         d9:06:e8:8a:25:ec:56:f4:af:30:fd:6d:16:b4:d9:db:4a:2a:
         d1:ca:e3:f2:cf:7c:a2:c9:68:35:c6:db:29:c8:74:c5:9d:17:
         7b:9d:2b:61:42:d1:bd:1a:10:cd:0e:4b:b4:8d:d6:2d:77:9f:
         60:fe:af:89:d1:17:7a:ee:20:46:ad:46:b8:76:3a:e3:99:22:
         ef:ed:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org