Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135342e302f32342d3234203d3e20323637333238.roa
File:                     34352e3233332e3135342e302f32342d3234203d3e20323637333238.roa (raw, json)
Hash identifier:          OuToLwCZKsAUponcbn4EkftSVgdON4omHGiZ2Q9sh+8=
Subject key identifier:   1C:B9:A6:AC:8F:D9:42:BD:F3:4E:A0:1F:22:E9:BE:B9:AC:EB:9B:C0
Certificate issuer:       /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial:       485D71CCB99C7A18A51B2C7865A3AD3A365D71AA
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135342e302f32342d3234203d3e20323637333238.roa
Signing time:             Wed 03 May 2023 19:02:09 +0000
ROA not before:           Wed 03 May 2023 18:57:09 +0000
ROA not after:            Wed 01 May 2024 19:02:09 +0000
asID:                     267328
IP address blocks:        45.233.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5d:71:cc:b9:9c:7a:18:a5:1b:2c:78:65:a3:ad:3a:36:5d:71:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Validity
            Not Before: May  3 18:57:09 2023 GMT
            Not After : May  1 19:02:09 2024 GMT
        Subject: CN=1CB9A6AC8FD942BDF34EA01F22E9BEB9ACEB9BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:e3:82:bf:f4:56:0a:6e:05:22:a9:30:e1:
                    fb:a4:f6:29:c3:ee:2e:15:ab:bd:90:a4:99:1e:44:
                    d4:51:99:3b:10:54:8a:3d:aa:e7:4b:ee:4f:1a:6b:
                    c6:73:da:32:ea:f0:46:98:21:92:43:ab:ce:f3:c7:
                    b0:a6:2a:d0:bf:18:51:23:ad:f5:41:f0:6a:64:3d:
                    95:78:76:f6:67:5d:a0:21:d9:71:ef:b2:92:bb:b2:
                    03:29:c9:bc:1e:ad:99:60:c5:e8:b0:fc:37:bf:0b:
                    ba:e4:91:31:82:bf:2e:59:b7:94:9e:95:8a:fa:d2:
                    39:75:6f:2c:4b:ed:e3:27:d2:02:53:6e:b5:0f:b9:
                    8f:1d:25:ab:f2:34:ea:d1:c6:44:72:0d:c1:e6:cc:
                    07:02:1a:3e:6c:18:20:02:39:d4:53:44:06:3f:0c:
                    ea:4d:89:ad:c2:cc:81:aa:89:d4:6f:67:8f:f2:26:
                    e6:bc:07:d8:6e:d8:96:e6:c8:08:b6:09:29:d3:8f:
                    29:76:37:b5:24:52:7c:cf:ed:3d:e6:b1:9d:86:30:
                    b6:09:95:a5:09:4b:d5:c6:e3:fb:68:33:c4:d3:5c:
                    f1:c1:17:31:5b:91:ce:ea:5a:ba:f1:fa:47:62:e2:
                    d4:4d:e5:0d:92:55:3c:6e:7d:29:31:0a:49:25:8e:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B9:A6:AC:8F:D9:42:BD:F3:4E:A0:1F:22:E9:BE:B9:AC:EB:9B:C0
            X509v3 Authority Key Identifier:
                keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135342e302f32342d3234203d3e20323637333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:0d:1a:a1:72:9c:90:2e:f6:68:e3:53:89:1a:55:7e:f4:
         e7:7a:74:df:92:b2:c7:72:48:09:c0:f0:21:3d:63:67:08:f9:
         ca:a3:5f:1b:49:a1:29:f2:e3:50:d3:ff:c9:fa:d0:cb:5e:4c:
         66:90:cf:cb:10:17:32:bc:8c:cf:4d:d5:6e:b4:6d:d7:e6:45:
         a2:54:71:1d:07:31:81:0f:e1:e4:51:aa:c4:df:43:9f:03:58:
         53:3a:c7:2d:a2:21:d7:7b:82:94:da:6c:27:03:2e:20:ad:96:
         aa:e9:df:3a:1b:ae:62:0f:b7:52:a3:fd:14:cd:f7:7e:8b:86:
         22:8e:65:94:e5:00:5d:f3:61:0f:66:35:ef:69:ec:49:eb:2d:
         8a:3a:3f:69:c7:a0:a1:86:95:43:0f:39:cc:5b:97:31:a2:ff:
         c7:92:34:72:47:2f:d6:f5:4b:88:22:ec:b4:c6:d3:23:b1:dd:
         00:f3:fd:1f:21:96:bc:b6:4b:62:3c:d7:57:59:c1:79:b8:6d:
         08:3c:fb:f2:5b:33:aa:54:06:1c:c8:92:37:64:1b:c3:e7:6b:
         6d:a8:ba:15:57:a6:3a:79:92:17:42:bc:3a:5a:2c:25:38:65:
         39:ee:24:cd:37:d0:5c:ed:8f:4e:5b:f9:30:a8:7c:42:76:fb:
         5b:10:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org