Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231342e302f32342d3234203d3e20323637323736.roa
File:                     34352e3233322e3231342e302f32342d3234203d3e20323637323736.roa (raw, json)
Hash identifier:          mvFkGbQ0rSCzgbW5cnlsUzyWHwvCTZAXOBKOUpC6YT4=
Subject key identifier:   F0:2D:D0:A2:08:18:6D:6C:AA:98:5F:AA:3F:0C:94:D2:27:38:3E:AD
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       5107860F7296B75FFC82E08F6CEF918B59E0E041
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231342e302f32342d3234203d3e20323637323736.roa
Signing time:             Fri 16 Jun 2023 14:31:17 +0000
ROA not before:           Fri 16 Jun 2023 14:26:17 +0000
ROA not after:            Fri 14 Jun 2024 14:31:17 +0000
asID:                     267276
IP address blocks:        45.232.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:07:86:0f:72:96:b7:5f:fc:82:e0:8f:6c:ef:91:8b:59:e0:e0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun 16 14:26:17 2023 GMT
            Not After : Jun 14 14:31:17 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:04:ac:48:f9:86:c1:20:89:40:da:e4:2a:
                    c4:82:18:c3:d8:67:99:09:e7:bf:6b:28:94:09:3e:
                    83:12:12:b3:7f:2b:0c:1e:8a:4e:55:2a:15:a9:a9:
                    f7:41:33:7b:5a:ae:ef:1b:54:98:2b:be:18:cb:ec:
                    85:b9:6e:a5:69:54:07:c0:bc:a1:e0:f7:8c:7b:d6:
                    7f:95:2e:c6:78:5d:db:70:3a:ef:63:b8:da:68:1b:
                    2e:71:c9:38:33:7c:b2:8d:cc:76:89:74:4e:a7:e4:
                    3c:69:a9:c7:3b:e3:f7:c6:e9:f0:08:c1:51:e2:51:
                    9e:68:6f:99:43:42:5c:32:94:08:6d:9d:8d:54:e6:
                    f2:49:74:b8:4a:0f:37:8f:e7:dc:91:35:8d:28:60:
                    ed:93:a7:23:ca:d8:6a:0d:af:d1:27:a5:c5:b9:af:
                    44:3e:08:7f:fc:5b:aa:a3:9f:06:4a:f6:12:26:60:
                    36:84:ef:af:fc:42:31:51:45:59:3c:11:e2:d1:eb:
                    a8:20:d3:ec:d2:85:01:ef:b1:44:cc:c4:c2:56:9f:
                    64:7f:02:1f:ff:b0:9e:b1:f5:c4:db:ad:33:76:24:
                    10:fb:6c:51:ed:39:9c:a5:f0:82:97:d3:62:9a:5c:
                    4d:3c:88:4c:67:50:ed:e8:a5:97:68:12:15:7e:0c:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:D0:A2:08:18:6D:6C:AA:98:5F:AA:3F:0C:94:D2:27:38:3E:AD
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231342e302f32342d3234203d3e20323637323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:6e:6b:34:1f:2b:bb:f2:6b:27:98:a2:4e:17:46:26:46:
         46:ae:8a:7e:a0:fe:af:85:d3:91:9f:0e:d3:0d:15:db:5a:60:
         ef:bb:58:2a:eb:3c:83:83:1f:3e:12:0e:1f:37:85:27:c8:4b:
         3b:37:c8:36:29:a2:69:f7:94:31:59:63:fa:8a:21:ee:81:03:
         d6:5e:b5:05:c8:a0:e9:f8:59:12:3f:93:c8:18:4c:29:56:52:
         c1:ba:8f:1e:e8:9a:2f:f3:83:f4:e0:d5:ff:ce:69:d8:47:f9:
         5d:1d:78:d1:a4:d5:1a:9a:22:00:2a:7c:46:64:e0:21:71:60:
         c5:b8:a4:24:ad:f2:b2:cf:e5:e9:18:84:2c:2c:6d:47:15:19:
         97:a9:b9:24:c9:6c:df:42:1e:d0:65:0e:06:4c:ed:7a:db:92:
         64:bb:48:3d:0e:c5:e6:5b:8a:13:a4:80:47:86:15:4b:cf:c3:
         ac:0b:e1:83:63:80:77:d6:08:05:7c:f8:af:97:cf:e4:e9:da:
         eb:04:58:34:69:39:31:45:3b:46:da:79:31:2a:81:93:09:0b:
         82:db:12:08:fb:96:08:07:56:b4:88:e2:fd:15:49:65:f9:91:
         5a:ca:15:1a:7c:d3:1a:e5:61:43:8c:16:cd:ab:2f:e7:ca:c3:
         f5:af:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org