Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32332d3233203d3e20323636393234.roa
File:                     34352e3232342e33322e302f32332d3233203d3e20323636393234.roa (raw, json)
Hash identifier:          P1Q1/SpR+iEqFQMArud0w5m8vZFMNi9gcyvN7kSTJr8=
Subject key identifier:   F8:DE:78:D9:B6:22:2D:29:CD:3A:28:2D:B7:48:C1:E2:3B:14:93:63
Certificate issuer:       /CN=BD822F759E542679706513A49206DC4783B35F84
Certificate serial:       1A6A977B3790700ABA09AF37575AA45DF7DB9103
Authority key identifier: BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD822F759E542679706513A49206DC4783B35F84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32332d3233203d3e20323636393234.roa
Signing time:             Sun 04 Aug 2024 00:34:47 +0000
ROA not before:           Sun 04 Aug 2024 00:29:47 +0000
ROA not after:            Sun 03 Aug 2025 00:34:47 +0000
asID:                     266924
IP address blocks:        45.224.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6a:97:7b:37:90:70:0a:ba:09:af:37:57:5a:a4:5d:f7:db:91:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD822F759E542679706513A49206DC4783B35F84
        Validity
            Not Before: Aug  4 00:29:47 2024 GMT
            Not After : Aug  3 00:34:47 2025 GMT
        Subject: CN=F8DE78D9B6222D29CD3A282DB748C1E23B149363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:fe:7a:1f:b6:87:75:46:2d:6f:31:11:ec:
                    45:a3:09:65:69:c4:cc:4d:93:d0:a2:70:da:de:a1:
                    f5:c6:80:06:f2:17:df:09:8d:9d:f9:a8:63:84:27:
                    38:bb:4f:a2:2b:5a:86:f5:b4:af:4e:85:4a:7f:aa:
                    53:53:23:68:e5:05:c4:85:66:bf:c3:68:62:3d:b3:
                    4d:da:12:e0:da:91:37:57:17:01:fe:7b:b8:5d:4b:
                    04:0b:a0:41:00:ab:fa:c8:e9:81:7e:73:ce:77:79:
                    a8:87:5e:96:d2:85:9e:af:52:23:90:73:d7:ba:69:
                    f6:c4:f0:0d:97:70:ab:4d:f6:f0:0a:c0:c8:23:af:
                    ea:45:e0:59:32:ec:59:56:8f:e6:a1:29:3f:8d:db:
                    fb:38:cf:2e:0e:16:75:16:e8:d5:61:07:47:62:ce:
                    e0:d9:b2:4a:6d:96:5c:d6:4c:9c:37:98:18:09:1a:
                    9d:c8:23:7a:e0:a7:6b:80:59:e4:50:78:60:0f:52:
                    de:d8:ee:a3:e3:6d:31:f1:57:a4:39:40:ce:13:7f:
                    43:a0:5f:06:94:25:8b:25:29:63:e2:c6:76:5d:ff:
                    13:41:a4:75:a0:1e:79:2c:c8:d1:92:04:da:18:9a:
                    cd:3d:83:8a:2f:60:c3:0c:6e:24:88:d9:65:41:6e:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DE:78:D9:B6:22:2D:29:CD:3A:28:2D:B7:48:C1:E2:3B:14:93:63
            X509v3 Authority Key Identifier:
                keyid:BD:82:2F:75:9E:54:26:79:70:65:13:A4:92:06:DC:47:83:B3:5F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/BD822F759E542679706513A49206DC4783B35F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD822F759E542679706513A49206DC4783B35F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32332d3233203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:bc:6d:9c:4a:8e:4b:32:cf:64:8e:0c:e4:24:86:6b:15:e5:
         0c:74:07:be:1a:ae:28:d1:ad:fb:6c:89:76:63:b0:13:23:99:
         00:24:dd:c4:91:08:8d:f6:6a:7e:21:c1:38:dc:d2:da:1f:f1:
         f2:7b:33:96:9d:d9:1e:10:ae:c4:63:d7:8b:59:01:ab:6a:7c:
         e0:ee:8e:2f:2f:f9:77:e8:2c:ae:8a:56:e4:06:fd:d1:aa:bb:
         ec:b6:f8:e1:78:b8:c3:3f:f7:b1:99:ab:d5:95:ec:c9:58:ca:
         38:bf:75:e3:c0:53:98:d4:28:a3:51:d0:79:85:db:57:f8:40:
         05:4b:ae:71:5c:fe:36:7a:8c:54:0f:ad:f6:25:39:70:49:68:
         5a:fe:d0:fb:23:e1:5d:5a:2b:9a:1f:7f:4f:a1:26:32:6f:99:
         80:87:19:cc:5a:3f:6e:9b:69:b3:6e:80:ba:74:92:d5:53:ea:
         6e:bb:73:9e:95:87:26:39:16:a7:b7:8a:ba:ec:a7:2f:bf:68:
         f3:30:71:94:61:ef:85:6b:78:70:7c:5a:d5:18:3d:19:dc:58:
         78:a1:8a:77:c8:22:f9:e2:2c:42:40:7d:14:3e:ac:47:18:12:
         e7:fc:15:d2:33:f8:6a:bd:50:46:eb:55:2e:4e:86:97:9d:98:
         8f:97:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 03:23:40 2024 by rpki-client on console-ams.rpki-client.org