Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135352e302f32342d3234203d3e20323637333238.roa
File:                     34352e3233332e3135352e302f32342d3234203d3e20323637333238.roa (raw, json)
Hash identifier:          +lFbDAUDOV3TqPr0EAkWiLWrDf9XcVOl6g8iSKKS6SI=
Subject key identifier:   D1:08:39:77:4C:82:4A:43:77:FC:5D:1B:50:CC:BC:21:91:20:F6:60
Certificate issuer:       /CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
Certificate serial:       0FA6355D1F9F17468AAFA89383B1408FD0B6FCD7
Authority key identifier: 53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135352e302f32342d3234203d3e20323637333238.roa
Signing time:             Wed 03 May 2023 19:02:12 +0000
ROA not before:           Wed 03 May 2023 18:57:12 +0000
ROA not after:            Wed 01 May 2024 19:02:12 +0000
asID:                     267328
IP address blocks:        45.233.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a6:35:5d:1f:9f:17:46:8a:af:a8:93:83:b1:40:8f:d0:b6:fc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Validity
            Not Before: May  3 18:57:12 2023 GMT
            Not After : May  1 19:02:12 2024 GMT
        Subject: CN=D10839774C824A4377FC5D1B50CCBC219120F660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:10:07:b2:4c:44:f6:7a:f4:7a:36:08:7e:1d:
                    c2:9b:a0:c8:aa:60:6f:35:89:57:a3:fd:e5:00:74:
                    42:38:10:a3:5f:bf:b7:16:8c:44:ff:fb:bf:4f:66:
                    67:fa:7e:07:db:94:76:3c:45:c8:2e:a3:af:4d:28:
                    90:46:fd:0b:d8:0c:91:e0:7c:0b:f2:03:f3:88:0a:
                    16:ed:bb:ee:8f:67:6c:23:7f:8c:5b:bc:d3:ce:16:
                    6e:fe:8a:34:31:dd:4e:2e:ec:4f:c3:3e:cd:76:35:
                    d8:a0:d4:6a:df:b7:b5:4e:cf:aa:c3:2e:05:42:dd:
                    cb:79:d6:01:ee:95:c0:ff:d3:ce:4b:76:44:66:18:
                    5b:5c:6d:61:ff:4a:d2:3c:3b:d8:af:7c:2d:e6:ea:
                    33:4f:f7:c7:f8:bb:05:3f:90:78:2e:81:0c:74:1e:
                    08:ab:b8:11:73:f2:73:37:34:f2:6d:4a:14:17:b5:
                    11:93:5b:da:39:40:26:42:da:8b:17:bb:48:f2:e5:
                    c9:d6:d0:6f:34:1e:80:23:75:f7:6a:13:78:bf:2b:
                    4b:fe:0d:06:fd:68:00:87:f6:20:55:db:ae:a8:b9:
                    28:b7:f5:4e:2c:b7:93:ef:96:e6:a3:f0:a1:25:2f:
                    07:4e:06:d1:40:28:09:13:e1:f8:92:4c:63:fe:1a:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:08:39:77:4C:82:4A:43:77:FC:5D:1B:50:CC:BC:21:91:20:F6:60
            X509v3 Authority Key Identifier:
                keyid:53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/34352e3233332e3135352e302f32342d3234203d3e20323637333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:89:7e:95:79:19:f3:e9:28:15:5a:fb:ae:b0:a1:c2:ae:d2:
         29:62:92:27:88:6e:61:d5:da:23:0b:a1:ca:9a:59:6e:fd:d5:
         02:b0:cf:cf:66:ba:ae:11:d6:a3:c5:c0:b6:ec:a2:bf:96:cd:
         4f:54:50:2e:ce:db:af:a8:9c:e8:55:eb:66:5b:67:49:85:5d:
         a4:a1:d2:27:ef:05:67:ab:12:15:0c:57:c5:f3:12:33:c8:ae:
         26:61:df:31:c5:a3:52:ba:84:32:e3:5a:b8:fe:99:62:19:f2:
         57:ba:4e:37:9c:6b:cd:b1:e6:25:0c:47:f3:74:b6:ad:7a:21:
         b2:46:83:62:04:bd:56:e0:f7:29:f7:92:17:20:b7:4b:07:21:
         48:0d:88:f6:f6:8e:0b:2a:52:fb:15:99:03:67:ba:ee:ef:fa:
         69:90:aa:87:80:13:60:2f:8f:cd:17:a5:63:c3:fd:82:14:30:
         7c:0a:07:3b:1f:fa:44:76:c5:6a:c9:80:67:cf:23:91:4f:91:
         bd:96:44:f4:da:16:e1:11:db:91:bd:77:a2:9c:15:36:ef:2b:
         02:11:69:96:d9:e1:6b:a1:09:50:fa:5b:03:51:55:11:95:44:
         b7:63:f6:27:68:37:a4:3d:f2:79:8e:76:b2:cd:d0:98:4b:9b:
         22:bb:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org