Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa
File:                     34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa (raw, json)
Hash identifier:          JTz+w5CQ5IJaK2WZrjxpcbkFOMmJCnaZ+ftWGTjXRYU=
Subject key identifier:   93:85:2E:7C:AB:CB:A5:40:44:C6:2B:B0:B3:06:29:CC:A3:05:20:1E
Certificate issuer:       /CN=65A3F1ADE0815E99C26F89B705AA086F097B1F79
Certificate serial:       346B25E2E325C60AA37197455E993C2E4F968AAF
Authority key identifier: 65:A3:F1:AD:E0:81:5E:99:C2:6F:89:B7:05:AA:08:6F:09:7B:1F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A3F1ADE0815E99C26F89B705AA086F097B1F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa
Signing time:             Fri 23 Feb 2024 16:32:35 +0000
ROA not before:           Fri 23 Feb 2024 16:27:35 +0000
ROA not after:            Fri 21 Feb 2025 16:32:35 +0000
asID:                     266914
IP address blocks:        45.224.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6b:25:e2:e3:25:c6:0a:a3:71:97:45:5e:99:3c:2e:4f:96:8a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A3F1ADE0815E99C26F89B705AA086F097B1F79
        Validity
            Not Before: Feb 23 16:27:35 2024 GMT
            Not After : Feb 21 16:32:35 2025 GMT
        Subject: CN=93852E7CABCBA54044C62BB0B30629CCA305201E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:b0:2b:53:be:f2:e3:2e:bf:9e:b1:d4:0c:
                    73:6f:b6:07:48:be:8c:1b:39:89:01:6e:f3:31:9c:
                    1b:a9:35:83:d4:15:88:ef:4b:5e:bb:04:f8:ad:32:
                    96:fd:f0:28:ea:f7:5c:fe:76:cd:94:ed:16:26:cc:
                    4e:77:fe:2e:da:57:93:ef:9a:3f:a2:20:25:ca:83:
                    87:49:8c:9d:40:2f:00:24:a3:94:48:21:08:be:0d:
                    26:b8:2d:5b:66:65:0a:24:d9:a6:bb:d5:87:88:54:
                    2e:3f:89:16:60:e8:eb:9d:80:dc:4e:ce:61:8e:32:
                    6a:d5:ee:48:fd:ac:38:2d:92:51:8e:54:06:9a:60:
                    7d:ba:8c:8e:33:12:5d:94:af:e5:a5:b2:6a:46:46:
                    dd:21:96:df:cf:b7:4a:6d:62:b8:e9:66:c8:2c:f7:
                    ba:f3:aa:09:1b:2e:49:35:a0:b6:f8:c0:81:30:70:
                    df:79:1e:45:b2:9c:a7:70:7d:94:0a:da:a7:3d:cf:
                    76:09:b7:28:27:c3:19:69:09:79:14:7f:b4:89:e6:
                    63:80:fc:f3:97:b8:5e:ea:9d:72:77:c6:94:e8:0f:
                    9e:7f:99:c3:86:1d:72:40:91:a7:65:e8:2b:1e:6c:
                    ca:ad:9c:34:af:81:60:0f:a2:1e:0f:7a:b9:7d:48:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:85:2E:7C:AB:CB:A5:40:44:C6:2B:B0:B3:06:29:CC:A3:05:20:1E
            X509v3 Authority Key Identifier:
                keyid:65:A3:F1:AD:E0:81:5E:99:C2:6F:89:B7:05:AA:08:6F:09:7B:1F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/65A3F1ADE0815E99C26F89B705AA086F097B1F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65A3F1ADE0815E99C26F89B705AA086F097B1F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6mpHKU3aufrqKPi34Hew5TMsv3n693P4KGL2sUjAH8YT/0/34352e3232342e3233322e302f32322d3234203d3e20323636393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:b0:7b:07:09:23:e9:4d:e4:e3:b3:50:6d:cb:f1:72:56:a7:
         2d:12:45:a5:4f:4f:83:74:62:b8:59:0c:58:93:55:e7:bc:4a:
         e6:6e:e5:3f:ec:25:19:19:9e:fa:5c:4d:77:b4:00:9d:c5:27:
         64:73:2a:fb:fc:e7:4f:eb:f9:56:4b:bf:57:2e:1e:65:ca:47:
         32:22:86:70:a2:5a:81:9e:ff:84:61:b6:c7:0c:aa:9e:56:12:
         81:3b:9f:6d:ed:09:f4:b0:33:29:ff:e0:43:cf:89:35:c3:33:
         84:de:3f:fb:28:52:5a:34:7b:9b:3d:96:fe:66:0e:1a:eb:a7:
         47:02:f4:cf:06:07:11:6b:a5:41:37:f0:d4:0b:16:90:65:ed:
         66:a4:55:74:b0:21:a8:e5:69:d7:81:b2:69:a6:db:b7:bc:83:
         c7:60:ed:e1:95:0b:9f:91:2c:1b:df:49:ab:0b:8b:09:78:5d:
         ee:c1:da:80:f3:08:14:1e:88:ec:6c:42:39:9f:e6:04:09:3e:
         e5:be:95:03:0d:e8:9d:cd:8e:72:dc:6d:57:83:14:ca:5d:d3:
         aa:1c:7a:e9:c0:13:53:6b:2f:0f:5c:2b:06:47:4c:1b:f3:7e:
         c4:bc:44:da:fd:9f:13:1e:d1:dd:33:28:01:a6:33:a0:42:86:
         c2:ca:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org