Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32342e302f32322d3232203d3e20323637333031.roa
File:                     34352e3233322e32342e302f32322d3232203d3e20323637333031.roa (raw, json)
Hash identifier:          QPNyZSzPJMj/CfUHOFHbF4lDh/P0d5ImHzIFTL0dKAo=
Subject key identifier:   E4:C2:E2:B8:EF:C1:1B:12:2C:26:B8:AA:73:28:3B:06:35:DB:96:D5
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       51693C6EF2C7D924F70A904D27980095CAB27129
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32342e302f32322d3232203d3e20323637333031.roa
Signing time:             Mon 15 May 2023 21:02:11 +0000
ROA not before:           Mon 15 May 2023 20:57:11 +0000
ROA not after:            Mon 13 May 2024 21:02:11 +0000
asID:                     267301
IP address blocks:        45.232.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:69:3c:6e:f2:c7:d9:24:f7:0a:90:4d:27:98:00:95:ca:b2:71:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 15 20:57:11 2023 GMT
            Not After : May 13 21:02:11 2024 GMT
        Subject: CN=E4C2E2B8EFC11B122C26B8AA73283B0635DB96D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:3e:ce:23:f9:36:a5:57:e3:94:05:0a:49:
                    00:89:1a:3b:a3:b4:89:d4:43:05:3c:30:ea:12:25:
                    66:f7:a9:7f:25:71:fd:87:dd:13:7d:14:52:ae:76:
                    db:6c:44:fe:3b:e1:58:d2:be:54:1a:75:e3:e7:9d:
                    a3:07:d9:aa:1a:8d:3b:68:60:d7:1c:ab:7f:c4:65:
                    07:60:16:f0:e3:b3:45:f8:f3:05:19:b5:f1:e5:33:
                    18:13:6e:45:3f:b8:f8:e7:20:57:f1:46:eb:c9:23:
                    a2:1d:7e:bb:87:d0:49:a0:8b:56:19:87:74:e3:92:
                    1b:89:8a:96:fb:b2:42:be:d2:4c:ad:c5:c1:55:6c:
                    f3:22:0e:3c:9c:a3:df:6a:fa:42:61:00:20:b8:7b:
                    4d:c6:4c:18:7e:b5:1c:18:ef:6c:96:1f:5d:0b:ec:
                    fa:11:29:ba:bc:70:b1:6d:70:ae:38:97:35:6e:a7:
                    a8:b6:9c:0c:9b:6e:f2:10:d2:91:5a:91:79:f5:2a:
                    46:75:34:4c:6d:58:87:a9:45:83:3d:3c:1a:62:88:
                    42:5c:a2:c9:6f:8f:38:bf:74:0c:b2:bc:17:ed:84:
                    c9:dd:70:a0:9c:cf:56:e6:d2:19:2d:e4:de:66:73:
                    7f:39:35:aa:72:2c:33:71:03:e2:ee:83:62:ad:47:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:E2:B8:EF:C1:1B:12:2C:26:B8:AA:73:28:3B:06:35:DB:96:D5
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32342e302f32322d3232203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:36:28:38:14:f8:56:05:ec:c1:13:53:37:04:f9:4f:48:aa:
         8f:c3:11:eb:a4:70:62:10:a2:29:4e:cb:60:99:84:e7:e1:4b:
         8b:75:de:8d:4c:18:29:eb:95:c1:fd:09:58:66:9c:16:68:5c:
         cf:6b:d0:8e:15:66:35:ae:33:bf:10:68:0a:79:f1:8b:dc:10:
         47:2f:03:da:e0:0a:90:8d:1e:d4:82:ed:54:e7:b8:86:58:4d:
         69:0b:3a:bf:47:fa:2a:78:a4:73:f9:ae:3a:9f:54:1f:7c:fd:
         00:9c:27:19:f6:9b:f9:78:7f:00:80:cf:9e:82:e2:76:dc:55:
         32:2a:9a:d4:d2:d2:6a:bf:68:44:9d:b2:7c:fd:fc:2c:45:5d:
         23:6f:ec:1a:73:8e:37:33:4f:60:0c:29:23:c4:7b:16:67:11:
         70:8e:0e:7e:94:eb:30:53:7f:d2:40:b5:0a:71:f8:16:2e:1b:
         be:4b:1b:78:3d:66:c5:cf:19:40:e1:f1:8c:01:dd:3d:12:38:
         f8:57:64:bb:ff:e0:fe:54:6d:7c:68:6b:a9:40:a4:42:2b:d3:
         d7:3b:a9:9e:40:9b:49:44:d9:c4:7b:a7:ee:36:f7:e0:6c:7a:
         7e:81:95:1a:bf:eb:de:2a:ae:c0:20:93:85:4c:73:26:cc:98:
         38:0f:50:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org