Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32322d3232203d3e203631363134.roa
File:                     34352e3233322e3231322e302f32322d3232203d3e203631363134.roa (raw, json)
Hash identifier:          l1HmuVjyyC0ZIjsfzFdgQExt2vuEpsy0tseIId0JQeU=
Subject key identifier:   C0:80:26:65:7C:DC:82:64:E1:BC:3C:C9:DB:47:F2:9C:6A:56:D8:6F
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       791D784AE38C9EEB970297F75CE45026F9D0A878
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32322d3232203d3e203631363134.roa
Signing time:             Fri 16 Jun 2023 14:30:51 +0000
ROA not before:           Fri 16 Jun 2023 14:25:51 +0000
ROA not after:            Fri 14 Jun 2024 14:30:51 +0000
asID:                     61614
IP address blocks:        45.232.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1d:78:4a:e3:8c:9e:eb:97:02:97:f7:5c:e4:50:26:f9:d0:a8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun 16 14:25:51 2023 GMT
            Not After : Jun 14 14:30:51 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:27:8e:73:6d:aa:86:2e:35:5e:1f:58:c1:
                    ab:8f:4b:dd:b5:18:6a:97:2a:0b:6e:46:7c:ab:7e:
                    5d:22:c8:ba:c0:c3:6f:f8:6e:49:a5:c1:18:84:8c:
                    7d:d3:d4:33:cf:a2:50:41:7d:ff:a3:73:2a:5c:a5:
                    cf:4e:23:c1:e9:1e:c5:0b:1d:d0:31:2a:32:0f:f4:
                    ff:47:19:a8:59:07:44:d9:ba:25:0a:4e:0f:a3:05:
                    e1:60:bc:ab:e0:ed:01:d2:a2:31:87:93:a4:ba:f2:
                    a7:11:5c:ad:b8:73:a4:4b:2c:57:14:85:dc:90:4e:
                    8e:5e:11:17:78:2f:12:36:92:7f:7b:ce:32:92:08:
                    ab:ad:12:28:98:70:7d:c8:e6:f3:f9:8e:a6:37:4d:
                    c1:cd:36:ce:c0:44:75:dc:dd:fd:7c:a2:63:01:41:
                    7b:b8:b9:1a:b2:d7:bc:6e:cd:7f:68:18:98:08:f7:
                    3e:70:e8:19:1c:77:ec:9f:26:3f:ed:a6:03:fa:ca:
                    28:5f:19:1a:59:1c:3f:9f:37:2a:c5:43:7b:a6:44:
                    6d:b2:49:60:1f:c0:9a:52:38:78:8a:4c:cb:b8:4a:
                    c7:49:3e:78:e3:fe:ec:85:5c:13:3b:86:39:1a:2e:
                    83:2a:b6:f9:4c:e0:fb:52:df:03:ba:20:f8:20:ef:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:80:26:65:7C:DC:82:64:E1:BC:3C:C9:DB:47:F2:9C:6A:56:D8:6F
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32322d3232203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:30:bf:6f:fd:ca:5a:17:df:77:d0:cb:07:65:d5:7a:b4:36:
         3b:30:c8:c4:65:52:42:e9:ea:d9:b6:16:6c:1f:ac:1c:4e:57:
         55:52:9a:06:3d:6e:bd:8d:5d:d4:34:cd:88:d2:0c:f4:10:66:
         3b:83:6a:cc:d0:d2:77:ff:e8:aa:4a:93:c8:52:7d:ed:77:e2:
         98:5e:98:8d:4a:e2:3d:72:80:51:65:aa:d4:be:91:a5:e4:93:
         81:d5:5b:d5:29:93:cc:d9:ca:65:ff:41:ff:ea:7e:a3:e3:50:
         f3:9a:82:4b:f8:ab:30:b7:c1:36:8e:4e:72:c2:5a:3a:d7:70:
         f6:e4:04:5d:7a:e8:73:0c:0e:b8:c0:be:4c:14:6c:d0:48:d7:
         e5:9b:c0:fe:4a:4b:06:3c:78:b9:04:92:c1:72:2b:40:88:86:
         2f:d3:5e:1a:95:6c:3e:be:f6:5d:f7:fe:f8:e9:ff:7b:6f:7f:
         96:5c:57:97:19:7c:a3:c3:a2:45:c7:dd:4c:08:c7:43:52:56:
         d1:ba:ea:cc:09:63:70:0c:68:ee:7f:cc:60:76:42:e7:17:d7:
         db:66:1a:d9:63:7f:44:6c:13:c1:5c:c1:c1:4f:0c:41:6d:6b:
         af:e0:9f:d0:1c:aa:ab:8c:db:1b:54:25:ec:a0:2e:c7:dc:62:
         df:e4:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org