Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32342e302f32332d3233203d3e20323637333031.roa
File:                     34352e3233322e32342e302f32332d3233203d3e20323637333031.roa (raw, json)
Hash identifier:          23BFXUx+CjPQNSJPG0DkPMQil53PhrbpK2FhKvEftTg=
Subject key identifier:   9B:0A:7D:55:E8:E2:B9:2D:DC:ED:89:A7:90:C1:52:24:74:1C:43:41
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       1B894E594AEE06D7A43D569EC34A5FA8EB63CB5C
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32342e302f32332d3233203d3e20323637333031.roa
Signing time:             Mon 15 May 2023 21:02:14 +0000
ROA not before:           Mon 15 May 2023 20:57:14 +0000
ROA not after:            Mon 13 May 2024 21:02:14 +0000
asID:                     267301
IP address blocks:        45.232.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:89:4e:59:4a:ee:06:d7:a4:3d:56:9e:c3:4a:5f:a8:eb:63:cb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 15 20:57:14 2023 GMT
            Not After : May 13 21:02:14 2024 GMT
        Subject: CN=9B0A7D55E8E2B92DDCED89A790C15224741C4341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:79:ff:7f:7f:4a:61:4c:75:72:fe:1f:ec:a3:
                    bf:5c:3a:a1:51:e2:95:37:41:46:0c:49:23:4b:ea:
                    0b:cb:1e:cf:9c:47:3e:9b:49:d3:a5:df:06:dc:8c:
                    8f:e2:de:3d:f3:e6:71:8f:92:d4:a3:bb:42:76:d2:
                    13:ad:f6:41:d5:01:78:e0:b8:bd:6d:10:11:44:15:
                    d8:88:c2:2b:63:d8:3d:bf:7a:d9:f9:74:bb:7b:48:
                    e0:f0:db:2d:5d:97:45:3b:42:ff:04:c2:53:11:1d:
                    33:88:6e:23:48:b0:ec:20:c6:02:a6:84:9b:87:c0:
                    c8:ce:94:e6:47:46:e1:fa:14:b7:40:c6:3d:16:82:
                    91:62:05:5e:51:a6:4c:dd:7b:b5:b7:a2:88:82:3c:
                    92:c6:c1:d1:34:9b:fc:b0:47:fa:3a:b6:5f:c7:0d:
                    19:09:34:95:cc:d5:d0:82:a3:17:47:a9:fe:c2:82:
                    14:65:78:d2:80:e1:91:8a:c7:b6:46:35:c3:4a:8e:
                    43:f0:c6:14:67:3b:44:01:d4:77:e2:07:8b:bf:df:
                    40:43:d3:d4:d1:1e:5a:da:bb:99:21:0a:40:87:1a:
                    7b:fb:61:bf:1c:24:a7:03:04:00:a0:07:ea:af:e8:
                    3b:2b:3f:83:e4:71:94:03:19:c4:03:c5:68:fd:fc:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0A:7D:55:E8:E2:B9:2D:DC:ED:89:A7:90:C1:52:24:74:1C:43:41
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32342e302f32332d3233203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:01:3e:fd:c5:04:c2:f3:74:f7:e3:4e:f4:ab:b0:d4:9a:
         2c:cb:93:6d:9a:5b:fb:2d:fd:fd:4f:95:15:a2:1a:98:d5:5e:
         fb:31:ff:98:66:06:4f:02:a2:28:67:82:e0:23:91:e5:75:8c:
         be:96:96:90:c4:9e:91:a7:01:c1:1d:88:d1:57:4a:2c:59:6d:
         cc:19:12:9a:c0:30:a1:33:5a:70:75:2b:c3:a3:44:cc:db:21:
         dc:80:4e:38:0e:b6:f8:48:fd:a0:6a:08:68:99:a8:be:5e:f7:
         19:97:a2:77:94:69:34:4b:c7:27:ce:c0:c9:6c:63:d6:42:c6:
         b8:cd:23:25:9e:be:a4:90:cc:e4:e7:2c:86:a9:a0:27:c1:49:
         e0:09:2b:20:5b:bb:d5:d6:ad:4c:91:86:f8:24:7f:aa:59:9b:
         15:05:3a:21:87:ae:84:79:7f:13:87:b0:39:5d:f0:6e:0d:39:
         ed:a8:7d:fe:f1:48:53:ca:ee:7b:42:f1:b2:b8:7a:4f:7b:5b:
         ec:aa:ba:d0:36:f0:19:8a:12:2c:cc:12:a0:16:6d:da:7f:ce:
         5a:bc:81:36:e6:3f:a4:86:a0:3c:d3:f4:68:4a:37:37:93:c9:
         80:ec:1e:78:4b:ae:fe:a1:66:79:03:65:91:77:b1:25:e7:f8:
         98:c0:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org