Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231352e302f32342d3234203d3e20323637323736.roa
File:                     34352e3233322e3231352e302f32342d3234203d3e20323637323736.roa (raw, json)
Hash identifier:          a0BtS8vEf0053wMNereH6v2cLKOsaBQtoCGvaNnMZ18=
Subject key identifier:   5E:50:57:CF:10:EB:AF:0A:29:3A:7D:3C:35:10:F2:73:BC:29:26:0D
Certificate issuer:       /CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
Certificate serial:       62E56B4E0C19ABB2C7942DBA22CD7EA36D6D9BC9
Authority key identifier: BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231352e302f32342d3234203d3e20323637323736.roa
Signing time:             Fri 16 Jun 2023 14:31:21 +0000
ROA not before:           Fri 16 Jun 2023 14:26:21 +0000
ROA not after:            Fri 14 Jun 2024 14:31:21 +0000
asID:                     267276
IP address blocks:        45.232.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e5:6b:4e:0c:19:ab:b2:c7:94:2d:ba:22:cd:7e:a3:6d:6d:9b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637
        Validity
            Not Before: Jun 16 14:26:21 2023 GMT
            Not After : Jun 14 14:31:21 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:32:dc:e3:59:90:32:b1:ea:12:76:ed:18:
                    d7:02:54:30:17:8a:e9:b7:de:c9:21:f2:af:e7:b9:
                    40:e1:7c:53:1f:eb:69:27:ea:7b:b2:d5:84:9e:a4:
                    42:f3:ac:c0:10:8e:84:90:8f:b4:8a:18:41:be:ce:
                    0b:ca:56:63:4f:24:43:f5:74:1c:fb:41:55:9d:a3:
                    10:89:0a:39:8c:cd:af:ef:51:f1:09:ab:9c:e3:62:
                    6a:60:3b:15:22:f0:c1:3d:06:2f:42:82:5d:ae:04:
                    33:a4:8f:8e:3f:62:8a:33:b3:97:df:e9:0c:06:4a:
                    aa:63:02:ca:3b:86:60:b7:35:0e:86:8e:04:2c:f5:
                    bb:ec:81:75:8f:e1:e8:54:ae:2a:5c:09:b3:c2:ed:
                    72:9c:d1:46:55:6a:b3:10:ac:ba:71:cd:0e:9e:5a:
                    9e:28:38:59:46:4d:80:27:27:7e:c0:51:5c:18:26:
                    0f:c2:8a:80:3f:f8:56:f2:a8:23:68:03:48:8a:a3:
                    78:15:22:26:40:ac:a1:13:4f:5d:aa:b0:a7:94:c9:
                    ba:a0:46:32:93:73:72:91:bd:bc:93:e7:d4:f1:f1:
                    29:31:f4:03:ac:a8:7c:14:d6:26:c2:5f:ab:f3:42:
                    9f:cd:2f:17:0b:d4:b2:91:d1:2d:00:98:6b:74:53:
                    77:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:50:57:CF:10:EB:AF:0A:29:3A:7D:3C:35:10:F2:73:BC:29:26:0D
            X509v3 Authority Key Identifier:
                keyid:BF:67:E5:DC:74:E7:6D:2C:6C:5E:1A:02:E9:1A:49:C3:14:9F:76:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF67E5DC74E76D2C6C5E1A02E91A49C3149F7637.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/34352e3233322e3231352e302f32342d3234203d3e20323637323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:69:c2:b5:ae:54:01:9a:50:e0:6d:f1:5b:a8:5e:a0:fa:d7:
         bd:81:9a:5c:18:9c:7d:2f:dc:b7:4f:cb:0f:44:f8:c2:ec:b1:
         a8:99:3c:15:ab:5e:36:78:65:16:d7:da:e8:6d:a6:11:cd:a4:
         87:92:47:b1:4f:d1:5d:f2:9e:d2:ab:d9:07:f6:72:53:1e:67:
         27:ae:9c:86:06:f3:08:6e:76:b2:5f:be:14:bb:ef:07:88:38:
         2c:64:43:a0:12:22:d5:4a:e5:48:51:1b:54:5d:64:e0:f8:62:
         6c:1a:ff:82:97:47:f6:68:c2:ed:f3:dc:24:45:7a:d4:80:a5:
         af:bd:fa:0f:8e:2c:6e:37:34:8c:7f:b2:2b:f9:b6:a0:91:fa:
         9d:ae:8b:c6:00:48:a4:cb:18:07:5a:fd:7b:5f:fb:9d:ac:4e:
         d3:5f:95:fc:59:f6:c7:52:cd:c0:32:3b:af:f7:ea:2e:ad:fa:
         2d:ec:19:ae:79:17:d9:3e:91:be:35:84:fa:d1:b2:8f:f9:33:
         30:4d:77:81:12:5b:0f:98:93:5d:f0:1c:df:c1:91:04:49:6e:
         6b:1b:d7:ce:b0:e1:57:42:57:44:5c:68:1d:ae:36:c0:e7:f4:
         95:a8:9e:13:91:59:b5:2c:0f:80:b4:45:6f:34:71:bf:a9:32:
         53:8c:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org