Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135332e302f32342d3234203d3e20323637333238.roa
File:                     34352e3233332e3135332e302f32342d3234203d3e20323637333238.roa (raw, json)
Hash identifier:          8e/SwnhuG5ulPgJtvWEipnSUP4yoLlc37vv1WCBlK2Y=
Subject key identifier:   E9:48:7F:5E:E3:0A:9D:2A:00:F0:8B:0D:9E:E9:A9:05:C7:2F:B5:3F
Certificate issuer:       /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial:       1AEF9F50AB9290D67E94B153D9FE9D7E80CFFE5F
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135332e302f32342d3234203d3e20323637333238.roa
Signing time:             Wed 03 May 2023 19:02:07 +0000
ROA not before:           Wed 03 May 2023 18:57:07 +0000
ROA not after:            Wed 01 May 2024 19:02:07 +0000
asID:                     267328
IP address blocks:        45.233.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ef:9f:50:ab:92:90:d6:7e:94:b1:53:d9:fe:9d:7e:80:cf:fe:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Validity
            Not Before: May  3 18:57:07 2023 GMT
            Not After : May  1 19:02:07 2024 GMT
        Subject: CN=E9487F5EE30A9D2A00F08B0D9EE9A905C72FB53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:74:92:6a:c0:2e:b9:34:eb:b3:3e:11:e1:
                    cd:8b:8b:14:ca:19:2a:37:18:9a:ac:b8:f8:94:5e:
                    86:ea:49:99:51:b0:0b:6a:fb:ca:07:3d:23:5b:2e:
                    72:c7:78:f3:d9:84:b5:e0:01:0d:d7:a5:b0:fa:5a:
                    4e:f8:1c:42:0c:eb:9b:a0:df:4e:b2:22:23:91:75:
                    95:3d:f0:9e:fd:af:4b:1a:23:41:b5:d8:f0:b4:7d:
                    d8:f4:ef:75:e9:0a:ef:c4:ae:1b:f8:d4:61:6a:e9:
                    1c:ac:24:19:7e:db:7a:12:ff:9a:69:8b:4c:1e:a7:
                    66:91:fa:e7:85:51:82:14:63:72:1a:7f:80:0d:96:
                    40:df:c4:d1:cf:af:fa:86:22:e7:d5:94:74:eb:c3:
                    c1:5c:2e:f7:d7:ba:aa:59:01:9e:cf:53:7c:87:f2:
                    ac:6a:04:d3:7e:15:6d:53:ab:45:d3:ae:d3:53:0c:
                    0a:df:cc:eb:b3:21:87:ea:34:62:b7:e0:07:f5:d0:
                    db:cf:9b:62:2d:21:ed:02:e2:10:06:62:a6:1d:9f:
                    02:26:61:82:ab:bc:ac:bc:69:34:8c:33:16:69:28:
                    04:8e:26:75:c7:8c:25:eb:00:b8:32:34:7a:1b:0f:
                    b0:7e:7c:de:a6:8a:c8:28:dd:18:ef:97:78:33:fb:
                    86:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:48:7F:5E:E3:0A:9D:2A:00:F0:8B:0D:9E:E9:A9:05:C7:2F:B5:3F
            X509v3 Authority Key Identifier:
                keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135332e302f32342d3234203d3e20323637333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:01:a9:29:1b:3b:30:fb:26:44:e2:28:a3:88:0c:17:c8:
         1a:d5:a1:4a:b7:62:3c:c6:bb:7f:c3:7a:02:76:5d:62:db:1d:
         c5:87:1a:92:a5:da:0b:73:46:9d:b7:a9:69:f6:84:ef:a6:4c:
         b4:23:cb:52:90:27:f8:2f:89:35:b3:62:9f:ca:d2:62:df:68:
         e3:6f:66:65:08:f5:29:db:67:35:f9:9a:26:c4:12:1f:28:e3:
         19:66:71:21:63:ed:5e:f7:a1:b5:b3:d2:5c:68:5d:51:29:6e:
         ed:b5:2b:c7:ce:c5:4e:5d:5b:4c:52:a2:ef:49:32:b0:c1:7d:
         82:8a:38:85:df:fa:2f:40:7c:10:70:e3:eb:0f:68:f5:34:b4:
         5b:d3:94:75:09:1d:f7:b1:a6:18:35:2d:bb:d4:23:33:54:32:
         f0:ce:a5:3e:ec:32:16:0b:2e:1a:00:4f:2d:5a:2d:df:68:c5:
         4c:c0:1d:86:1b:c1:c3:43:8f:40:99:be:92:32:08:73:87:f4:
         81:22:32:d2:4e:57:89:73:8d:0c:00:b9:00:e3:04:d9:68:5d:
         96:54:f7:f4:f2:83:78:49:66:39:79:fe:c7:a6:c2:ae:6d:b9:
         d4:ee:a9:f2:16:22:95:95:02:e8:ad:75:2e:ce:06:aa:c5:cf:
         0f:90:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org