Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa
File:                     34352e3233322e32342e302f32322d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          qpwu4dGX882hdn94X6FJLOK96+JwKMKwyo2wpkMDCMo=
Subject key identifier:   DE:32:B6:27:B6:AC:BE:CC:B3:F6:6D:50:8D:DD:7A:02:E0:C6:06:E5
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       3F9CC12E2C3BE3D60AB354EBE5CADAAB2C82704E
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa
Signing time:             Mon 22 May 2023 16:58:41 +0000
ROA not before:           Mon 22 May 2023 16:53:41 +0000
ROA not after:            Mon 20 May 2024 16:58:41 +0000
asID:                     267301
IP address blocks:        45.232.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9c:c1:2e:2c:3b:e3:d6:0a:b3:54:eb:e5:ca:da:ab:2c:82:70:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 22 16:53:41 2023 GMT
            Not After : May 20 16:58:41 2024 GMT
        Subject: CN=DE32B627B6ACBECCB3F66D508DDD7A02E0C606E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:a1:f6:18:e2:31:c8:d2:7a:56:67:c3:2c:
                    87:f7:36:ac:e4:ce:15:ef:61:4e:99:54:d5:d1:7f:
                    f0:92:d9:42:ca:93:48:91:18:d2:6b:de:8a:4f:5d:
                    35:ae:b4:a2:c7:71:99:0c:64:ff:20:d6:53:13:66:
                    84:e6:92:51:25:ce:22:2c:ca:b5:f6:5b:d2:66:3c:
                    39:ac:33:78:d1:8f:1c:e4:2b:05:65:57:6e:b6:31:
                    e6:6c:25:6a:e2:0a:2c:c8:ff:9d:14:5e:e5:b9:cf:
                    00:1a:0c:de:42:1f:87:91:dc:4a:7a:ae:61:57:51:
                    70:41:0b:dd:36:c4:9f:fc:3f:2b:a6:6c:5d:55:b4:
                    cf:a3:50:2c:e9:70:30:67:34:1b:3f:67:56:8b:ff:
                    14:3b:dd:c0:84:88:09:81:74:9b:32:cd:97:2c:97:
                    8e:bf:3f:0b:7f:ab:4a:e4:fb:5c:de:59:c3:f7:22:
                    75:e0:3d:b4:fc:2c:63:e6:23:0e:5d:51:23:4c:92:
                    42:ce:0a:48:cb:79:24:ce:7d:d6:4a:00:d1:61:3d:
                    a9:bd:18:52:7d:36:e1:f8:37:fc:a2:1c:77:49:ff:
                    b6:6e:a9:df:46:1c:28:42:f5:40:c1:7e:25:52:05:
                    0d:00:c1:16:f6:2d:a2:e6:ab:41:f2:a4:a4:b8:60:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:32:B6:27:B6:AC:BE:CC:B3:F6:6D:50:8D:DD:7A:02:E0:C6:06:E5
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:57:cd:f6:bc:c0:1d:ad:d3:a9:71:5a:85:7a:63:74:03:78:
         f2:1f:94:a4:95:d6:76:cd:62:79:e8:37:d9:07:b4:87:b2:9a:
         06:f5:5a:3f:55:39:72:16:67:78:7f:bc:a3:0c:d4:f2:2d:16:
         cb:05:f9:70:b7:c1:01:32:54:d3:fd:81:0a:c7:d9:be:da:62:
         99:7b:a0:4a:b7:8f:dc:38:ab:51:51:22:56:d8:0e:3c:8e:61:
         11:73:f7:18:53:94:04:c5:73:5b:25:ce:e9:d4:57:02:e9:50:
         af:55:fb:d9:ef:d6:a9:61:b6:d2:a1:9e:22:b5:5f:91:2b:40:
         46:ef:de:04:b0:6e:97:e6:6a:ab:a8:69:f0:1a:25:e4:2f:af:
         83:e7:be:3f:48:8b:44:08:c7:84:ef:04:01:b6:02:1a:c9:f5:
         07:0e:c7:a4:81:c7:1c:43:f0:f5:7f:2a:7e:e2:08:12:e9:02:
         ef:d2:fe:06:03:e6:df:7f:6a:87:a5:37:54:de:93:8f:b7:81:
         89:33:6e:a5:56:76:97:62:56:5a:f2:37:17:0b:c1:36:58:8c:
         ac:c7:28:6e:d3:a2:87:c7:c2:2a:32:16:16:1c:65:8f:6f:53:
         d5:7c:ab:55:b3:9d:ae:a6:90:47:7a:2a:3e:41:fb:3a:c5:c4:
         ab:20:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org