Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39342e302f32342d3234203d3e20323638323637.roa
File:                     34352e3233372e39342e302f32342d3234203d3e20323638323637.roa (raw, json)
Hash identifier:          cVG6JQQsl3U7rFwA1bBMIRZAPzU2IidZpaX5UNOjZsE=
Subject key identifier:   66:65:9D:7A:1D:24:73:23:0D:81:32:8F:4D:68:3E:A7:84:36:0D:A5
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       2C382ABA9D9F58637B3CE1FABF1F258DF3E32406
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39342e302f32342d3234203d3e20323638323637.roa
Signing time:             Mon 02 Jan 2023 19:47:37 +0000
ROA not before:           Mon 02 Jan 2023 19:42:37 +0000
ROA not after:            Mon 01 Jan 2024 19:47:37 +0000
asID:                     268267
IP address blocks:        45.237.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:38:2a:ba:9d:9f:58:63:7b:3c:e1:fa:bf:1f:25:8d:f3:e3:24:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Jan  2 19:42:37 2023 GMT
            Not After : Jan  1 19:47:37 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:4e:22:eb:d1:2a:26:21:4d:96:f7:bb:66:
                    c6:fc:3c:6d:25:a7:4a:30:3f:72:91:49:1a:29:ae:
                    01:b4:d8:ba:a7:78:bb:46:3d:72:79:a7:af:99:70:
                    39:cc:ac:ed:63:6b:40:c1:a8:e1:68:b4:bf:f3:65:
                    2c:d7:88:d9:69:90:01:ca:b5:f5:c2:a6:bc:87:66:
                    83:3b:08:d4:7a:83:f7:b9:04:83:2f:31:f3:aa:8f:
                    fd:45:0b:cd:82:d4:2f:13:de:57:8e:f2:64:a6:05:
                    09:21:97:d6:0a:16:55:c7:50:52:68:a3:23:ad:b5:
                    10:26:3f:ec:b5:5b:3c:2a:86:ea:c0:cd:8d:9d:a0:
                    f3:f8:fb:eb:79:55:e2:11:32:98:e0:4e:fa:44:26:
                    5b:cc:26:5b:b8:44:25:14:ca:7c:72:66:e4:7c:4d:
                    85:53:b3:21:c7:8c:9f:ee:e2:6c:f5:2a:41:8b:8c:
                    7a:9b:d9:8a:54:2a:c7:c6:86:95:d0:6e:03:76:f4:
                    a8:91:c1:d6:95:bc:cb:09:40:83:3b:3a:86:ed:49:
                    25:fc:91:3a:48:bc:de:b4:3c:98:e8:bd:06:cc:2c:
                    f7:de:ed:17:72:56:5f:93:3b:12:d8:72:bc:d1:38:
                    03:46:e2:71:52:a3:34:9f:7b:e2:3b:73:f0:52:d4:
                    6f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:65:9D:7A:1D:24:73:23:0D:81:32:8F:4D:68:3E:A7:84:36:0D:A5
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/34352e3233372e39342e302f32342d3234203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:bd:fa:e7:02:41:e0:49:1e:69:86:f9:89:79:fd:b0:dc:
         4c:81:7b:4c:22:23:1f:7f:1b:28:03:0f:10:1d:11:d2:4e:1c:
         d0:8d:2c:c5:85:50:37:27:51:32:77:11:b0:7b:f0:34:da:a8:
         7f:78:51:cb:63:46:0c:cd:e2:fd:d4:e6:a4:d9:0f:21:da:54:
         93:9d:d6:cc:37:8c:42:32:59:f7:ad:3f:f0:b2:67:c7:4e:df:
         7c:99:fb:52:a3:0e:72:96:fa:1d:81:1f:e5:0c:55:b7:79:db:
         cd:c5:f3:61:95:05:70:9f:4d:47:ad:fd:89:81:8c:87:cf:16:
         b7:16:c9:68:25:6b:68:28:94:a6:a3:bb:5f:0c:8e:ea:06:20:
         69:1a:b8:3a:f5:b5:2b:c3:08:c2:43:d9:75:62:23:b7:ca:37:
         42:38:1f:4d:18:a8:15:44:b1:9a:d0:ff:9f:21:11:6f:39:6d:
         63:f9:d7:3a:82:83:56:39:2e:a6:ce:a1:e5:53:02:7d:c2:61:
         69:1f:b7:cb:18:8b:67:70:4e:16:f1:90:3f:57:da:2b:0e:a8:
         af:dd:cf:63:b5:2a:4c:f4:0b:5e:b3:6d:1a:d7:98:28:4c:04:
         5f:28:0c:df:a2:1c:3c:a4:4d:8c:c5:9f:c2:d5:9b:5d:49:50:
         4f:86:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org