Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231322e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          +sJnTsn39NKSddLd6qSy42htbzLBeONVkjPgzgncYcE=
Subject key identifier:   41:1C:AF:41:E8:FC:33:43:61:4F:6C:AD:17:EF:E8:86:FC:6A:FD:2D
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       4C95B868119EF3510AD96731FD6DBA901CCAE407
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 21 Jun 2023 13:03:25 +0000
ROA not before:           Wed 21 Jun 2023 12:58:25 +0000
ROA not after:            Wed 19 Jun 2024 13:03:25 +0000
asID:                     61614
IP address blocks:        45.232.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:95:b8:68:11:9e:f3:51:0a:d9:67:31:fd:6d:ba:90:1c:ca:e4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun 21 12:58:25 2023 GMT
            Not After : Jun 19 13:03:25 2024 GMT
        Subject: CN=3082010A0282010100C611C6AB6E615D5F28F128F721095B9D6690A4EFFA611EB6E66BAB3A661739AA2AC747F2215ABBFE2E0697CB064684B7863E62C4217924320A9EC7DE16160101AC0DA23D631B11C9A7E2D0D89437544AAB4B20DFF590E301362B1C3582DD840479739E16607E48C57F07BEA87FC6B234F25446176560AA6EF5663675D1A8BBC7B60DC2998D7C29BAE34E3E3FEA05260D09E687C64BE06E7B1A14533D9077D05DFF6B5FA4683E49A0087E05EF5835CF463F1006F157758300B430C70E2116901400CC8E3C5F0D8A426EC1D5E4DAE4E1F397A321726DF569DA56D6B4C3E0C9075DB59F93A03114D7BA4E3872C06C0DC518028894F6937C263B15CDB325D2C46D190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:c6:ab:6e:61:5d:5f:28:f1:28:f7:21:09:
                    5b:9d:66:90:a4:ef:fa:61:1e:b6:e6:6b:ab:3a:66:
                    17:39:aa:2a:c7:47:f2:21:5a:bb:fe:2e:06:97:cb:
                    06:46:84:b7:86:3e:62:c4:21:79:24:32:0a:9e:c7:
                    de:16:16:01:01:ac:0d:a2:3d:63:1b:11:c9:a7:e2:
                    d0:d8:94:37:54:4a:ab:4b:20:df:f5:90:e3:01:36:
                    2b:1c:35:82:dd:84:04:79:73:9e:16:60:7e:48:c5:
                    7f:07:be:a8:7f:c6:b2:34:f2:54:46:17:65:60:aa:
                    6e:f5:66:36:75:d1:a8:bb:c7:b6:0d:c2:99:8d:7c:
                    29:ba:e3:4e:3e:3f:ea:05:26:0d:09:e6:87:c6:4b:
                    e0:6e:7b:1a:14:53:3d:90:77:d0:5d:ff:6b:5f:a4:
                    68:3e:49:a0:08:7e:05:ef:58:35:cf:46:3f:10:06:
                    f1:57:75:83:00:b4:30:c7:0e:21:16:90:14:00:cc:
                    8e:3c:5f:0d:8a:42:6e:c1:d5:e4:da:e4:e1:f3:97:
                    a3:21:72:6d:f5:69:da:56:d6:b4:c3:e0:c9:07:5d:
                    b5:9f:93:a0:31:14:d7:ba:4e:38:72:c0:6c:0d:c5:
                    18:02:88:94:f6:93:7c:26:3b:15:cd:b3:25:d2:c4:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1C:AF:41:E8:FC:33:43:61:4F:6C:AD:17:EF:E8:86:FC:6A:FD:2D
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231322e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:85:f7:cc:4a:0f:15:50:39:f3:a5:c8:cf:34:48:1c:fd:bd:
         1e:dc:72:5d:47:ea:ff:25:34:da:a9:0c:ff:ad:04:ae:7e:0a:
         85:0b:80:1d:bb:d3:82:d1:30:89:c7:12:4e:b7:8e:11:89:2f:
         41:2d:82:f6:a3:91:41:34:5e:ac:db:e7:91:18:51:fc:e7:9c:
         12:7b:b9:6c:2e:c5:84:a6:78:1c:88:68:05:d8:9b:64:6b:c5:
         b3:d4:cc:44:1f:82:57:6f:64:40:eb:c0:1c:a6:4f:2f:30:a5:
         41:7a:83:b1:3c:c8:fd:c7:eb:e1:74:a1:c7:92:71:ca:e0:5b:
         9b:49:ec:4b:fb:bf:a8:72:42:e9:76:54:84:ed:06:04:0d:1f:
         1e:2a:5e:7d:45:02:2b:cb:a1:82:b2:a7:67:68:7f:61:68:73:
         af:f0:8c:dd:b2:43:f8:3a:c8:d8:15:dd:89:a4:f4:b5:13:bb:
         20:e5:4c:1e:9a:33:a3:e2:13:96:1f:09:23:f9:5b:af:50:6b:
         ab:b2:81:ef:0e:1b:62:91:d0:4b:0b:87:94:2f:2d:eb:10:77:
         4b:14:72:6c:3d:0f:85:ba:67:36:63:ed:0c:4d:3b:71:32:b6:
         93:5a:a9:9b:0a:93:74:a5:0a:28:a8:d1:a5:a1:ea:ed:37:45:
         48:05:89:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org