Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32372e302f32342d3234203d3e20323637333031.roa
File:                     34352e3233322e32372e302f32342d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          CreSApbdLrUgJhCnoVGVqcD4RYkrkyvFLB6AzsrPU/E=
Subject key identifier:   24:A8:EF:9A:72:F4:A6:99:AC:3C:AE:0F:D4:78:2A:00:7D:DC:C5:24
Certificate issuer:       /CN=194101A33D960E2E468EFE8D2E2E701E8A073261
Certificate serial:       470C349B7A07262997B2C52DE170EB8E0D1F2D34
Authority key identifier: 19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32372e302f32342d3234203d3e20323637333031.roa
Signing time:             Mon 15 May 2023 21:02:28 +0000
ROA not before:           Mon 15 May 2023 20:57:28 +0000
ROA not after:            Mon 13 May 2024 21:02:28 +0000
asID:                     267301
IP address blocks:        45.232.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0c:34:9b:7a:07:26:29:97:b2:c5:2d:e1:70:eb:8e:0d:1f:2d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194101A33D960E2E468EFE8D2E2E701E8A073261
        Validity
            Not Before: May 15 20:57:28 2023 GMT
            Not After : May 13 21:02:28 2024 GMT
        Subject: CN=24A8EF9A72F4A699AC3CAE0FD4782A007DDCC524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b7:76:89:a8:0e:68:eb:45:6b:89:55:19:95:
                    82:90:53:b6:f5:9f:3e:3f:ee:4b:ab:73:cc:c2:14:
                    e9:d7:f9:99:c6:19:81:62:7d:7a:65:8c:73:89:74:
                    86:a9:ce:aa:ec:b8:7a:d8:12:8c:61:07:9a:82:ad:
                    1a:01:79:30:0c:be:0e:31:ac:44:c2:35:6a:cd:57:
                    e8:1d:31:37:55:b8:d0:2d:39:c2:27:1a:82:34:61:
                    ef:b2:a7:a2:ee:6c:75:fb:86:a4:49:ef:75:11:86:
                    3b:7c:a2:97:7d:62:28:1e:30:f7:c3:68:cb:13:32:
                    e1:a0:b5:e6:07:14:e8:f1:7d:da:cd:d7:26:fb:ed:
                    b1:80:92:09:f2:cc:0e:15:1d:dc:8b:3e:31:96:c1:
                    e2:de:53:91:d6:db:48:f5:cc:ba:4b:de:1b:1c:ba:
                    fe:35:41:62:17:06:50:e0:37:2e:e8:ed:96:61:d3:
                    70:33:93:d7:cc:14:19:f4:eb:c8:5f:d6:8c:85:29:
                    b4:58:40:27:a4:57:96:f4:3d:17:e6:bd:72:88:68:
                    42:a6:57:8d:0a:71:da:3a:8c:36:9c:8a:5e:57:9b:
                    92:04:3e:7e:23:27:38:6d:3a:47:55:0a:cf:2b:7b:
                    af:65:04:ce:65:39:b0:37:f0:e8:40:05:ab:90:18:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:EF:9A:72:F4:A6:99:AC:3C:AE:0F:D4:78:2A:00:7D:DC:C5:24
            X509v3 Authority Key Identifier:
                keyid:19:41:01:A3:3D:96:0E:2E:46:8E:FE:8D:2E:2E:70:1E:8A:07:32:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/194101A33D960E2E468EFE8D2E2E701E8A073261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/194101A33D960E2E468EFE8D2E2E701E8A073261.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/34352e3233322e32372e302f32342d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:43:fd:ae:75:76:6d:d4:cb:16:3d:c8:0f:f7:6d:ab:10:55:
         da:84:79:a5:d4:41:e4:e5:aa:a6:62:70:0a:36:20:a7:e1:db:
         4c:fa:6d:49:d3:a0:b8:5f:bd:f0:f4:04:cb:9b:8c:ca:53:27:
         ea:9b:14:b4:06:5f:a3:b7:ce:8f:b0:b8:67:e1:20:67:61:5c:
         d0:20:47:b8:91:47:f8:54:5f:25:25:63:34:ca:ff:d9:11:41:
         38:80:cf:5a:58:d6:01:9e:32:92:94:74:fe:90:6e:cc:0e:c0:
         02:6c:70:b4:8e:20:5c:1b:25:e1:5a:0e:6e:81:8d:2b:76:09:
         d0:4e:1e:22:4b:29:78:da:e1:3a:07:c4:93:e0:12:6b:17:46:
         03:86:5d:31:03:74:67:04:90:dd:c9:cd:26:cb:95:bc:09:7d:
         32:29:b1:ca:8b:d4:31:87:5d:68:21:77:c3:f7:ab:a5:c5:81:
         04:9c:9d:81:74:12:7c:42:4f:05:36:31:0e:f4:60:60:fc:d8:
         8a:c8:c9:14:8a:1f:9a:f9:27:80:10:a0:ac:39:43:4b:a2:64:
         c2:64:07:ca:f3:e2:b3:d4:58:14:3d:a0:8a:1d:f9:38:5d:99:
         b4:50:15:bb:76:b1:cd:1a:f8:7b:7c:99:d0:0d:45:e6:3a:86:
         2f:33:ab:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org