Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa
File:                     34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa (raw, json)
Hash identifier:          OGFecRrEVDYQbm39EZaIWiIc7VangXg+/fnX027YWzg=
Subject key identifier:   C0:1D:80:8E:16:BB:F1:41:CF:41:16:3E:54:A8:D8:E0:9D:39:67:60
Certificate issuer:       /CN=CC754C9ECCEF7E16653034A8D806C820C35D7CFB
Certificate serial:       61053B391199FAAE9680D2BE65A44EE00A599B63
Authority key identifier: CC:75:4C:9E:CC:EF:7E:16:65:30:34:A8:D8:06:C8:20:C3:5D:7C:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa
Signing time:             Wed 12 Jul 2023 12:25:13 +0000
ROA not before:           Wed 12 Jul 2023 12:20:13 +0000
ROA not after:            Wed 10 Jul 2024 12:25:13 +0000
asID:                     267332
IP address blocks:        45.233.244.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:05:3b:39:11:99:fa:ae:96:80:d2:be:65:a4:4e:e0:0a:59:9b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC754C9ECCEF7E16653034A8D806C820C35D7CFB
        Validity
            Not Before: Jul 12 12:20:13 2023 GMT
            Not After : Jul 10 12:25:13 2024 GMT
        Subject: CN=C01D808E16BBF141CF41163E54A8D8E09D396760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:72:e9:c4:c4:8f:2b:39:d0:f2:f5:a2:2f:
                    40:8b:47:e9:e2:0b:e6:be:6a:2b:62:d7:57:0d:53:
                    c7:c7:6f:e5:f9:fd:eb:70:77:38:26:e8:f0:55:3b:
                    ff:b0:cf:1f:07:c6:e3:12:a5:a0:8d:29:95:28:af:
                    ae:11:cf:e2:a6:69:85:4d:43:95:da:dd:10:00:8f:
                    cc:39:a4:66:a4:03:aa:dc:4f:22:82:aa:cc:12:59:
                    9f:b9:50:ee:e2:2a:b4:94:df:b2:c7:6a:ac:6e:cc:
                    ee:28:a9:6f:af:1a:1c:53:33:1f:ad:4a:e3:4c:e2:
                    e4:7c:5a:3c:92:6b:97:f0:03:ee:c8:4a:9e:04:9f:
                    24:d9:bf:59:aa:7f:8b:ec:80:c2:a3:3a:de:72:f8:
                    a2:68:05:bd:15:69:7f:95:74:07:0d:ae:1e:9a:57:
                    82:e7:0d:57:63:ff:3f:ea:36:ac:33:50:d6:46:0c:
                    5b:88:e1:28:03:4e:7c:6a:6f:1f:60:8b:05:68:fe:
                    db:6a:93:05:cd:83:de:87:0b:fd:78:da:9f:84:2d:
                    d5:ce:82:60:8c:5f:be:7e:22:b9:a9:3e:71:bc:49:
                    27:0b:4e:f8:2c:01:e4:a0:25:73:5c:3f:44:ca:ae:
                    a9:ac:8b:40:c4:42:a2:19:d0:8d:7f:76:f0:95:f9:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1D:80:8E:16:BB:F1:41:CF:41:16:3E:54:A8:D8:E0:9D:39:67:60
            X509v3 Authority Key Identifier:
                keyid:CC:75:4C:9E:CC:EF:7E:16:65:30:34:A8:D8:06:C8:20:C3:5D:7C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC754C9ECCEF7E16653034A8D806C820C35D7CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/0/34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:f8:95:a7:06:d9:7f:68:d3:7a:36:3b:3a:8e:17:1c:7a:22:
         99:92:91:06:4a:4f:da:7f:a5:af:97:ff:a0:42:5b:91:69:9b:
         e5:75:cf:d9:84:4b:54:5c:d4:20:90:5f:6c:dc:b9:dc:19:6e:
         ac:fe:3c:90:9f:12:71:c5:ef:7c:80:92:cd:56:ac:6e:52:13:
         61:c1:8c:0b:5e:bf:e7:2b:ce:4e:83:24:0d:92:97:7c:8c:0d:
         01:8a:a2:0e:ae:cb:0b:d8:4e:c6:75:32:36:b4:29:6d:95:9f:
         8f:48:83:f8:a6:11:78:9f:c7:36:da:08:13:03:88:88:04:1b:
         e4:4b:39:bf:1f:38:93:56:19:2a:26:33:da:5d:be:5c:ad:42:
         90:7c:32:19:3d:e1:44:0f:16:93:d1:fd:30:f7:c4:41:f8:1e:
         27:3d:a9:2d:95:bd:63:f2:69:35:97:f5:99:dc:7f:70:49:b9:
         22:ed:be:da:49:ea:8f:be:10:e8:68:bb:64:4b:b9:9a:4d:b8:
         88:f4:6b:14:6a:b7:d9:af:17:78:3e:b3:2f:d9:58:ad:0a:e1:
         e8:7a:ca:03:5b:f6:b4:69:7f:71:23:f2:06:b3:fe:fd:12:18:
         c2:42:69:d7:c6:c5:e9:37:c1:0c:7b:4d:d1:60:ca:30:f7:33:
         20:0c:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org