Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32342d3234203d3e20323637333838.roa
File:                     34352e372e302e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          c947dP7wK26Ez8Bx4ctCOoyQ4mFVHQ30TyoxAND6qrY=
Subject key identifier:   73:A9:38:75:AF:5C:01:65:74:E8:46:C1:FE:2D:FC:CA:32:F0:B4:E7
Certificate issuer:       /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial:       5E8F2EA273C478BA082DA48E3C484AA5F31CC0F4
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32342d3234203d3e20323637333838.roa
Signing time:             Mon 13 Nov 2023 19:11:35 +0000
ROA not before:           Mon 13 Nov 2023 19:06:35 +0000
ROA not after:            Mon 11 Nov 2024 19:11:35 +0000
asID:                     267388
IP address blocks:        45.7.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8f:2e:a2:73:c4:78:ba:08:2d:a4:8e:3c:48:4a:a5:f3:1c:c0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C015248532BCE3959F73092749FDE164934402
        Validity
            Not Before: Nov 13 19:06:35 2023 GMT
            Not After : Nov 11 19:11:35 2024 GMT
        Subject: CN=73A93875AF5C016574E846C1FE2DFCCA32F0B4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:7f:65:2b:28:79:c4:99:59:32:0a:5a:ac:
                    31:6d:dd:c3:91:cf:6d:19:d4:3d:15:e9:85:2b:6b:
                    57:7c:c1:78:73:49:14:19:b0:2b:3a:0b:7d:79:f5:
                    4a:4c:69:cd:dd:0e:f4:d6:5b:dc:01:77:32:28:7d:
                    cf:3f:54:cf:12:83:b1:fe:c1:ae:09:d1:7a:e9:ab:
                    40:64:ec:24:bb:cb:4e:79:df:bd:4f:0f:74:58:0c:
                    bf:da:c2:79:00:b8:69:98:52:4d:39:2b:0d:57:19:
                    61:d2:34:e9:f9:46:5a:c0:24:ab:2f:50:63:7e:bf:
                    61:2f:51:4d:a1:a2:1f:19:90:3a:56:f5:43:a4:24:
                    fd:5a:ea:c2:bd:29:95:13:49:4f:86:a5:6f:5c:35:
                    e4:9d:e1:f9:14:82:c6:98:3e:68:cc:58:20:c7:53:
                    20:19:cf:c2:0c:b1:73:36:0e:d3:0e:0c:62:59:41:
                    fa:a1:fd:24:ae:45:92:cd:c9:82:41:a4:80:7a:94:
                    69:0f:39:19:1c:5e:68:d5:03:d2:f7:11:c9:06:69:
                    87:a8:eb:09:aa:bd:c1:2e:1c:1b:f3:b4:c8:2f:bc:
                    54:7e:0a:51:85:e1:20:7f:20:2d:a0:f3:9e:d9:53:
                    53:57:84:27:27:cf:24:26:a3:7f:a9:be:10:e9:7f:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A9:38:75:AF:5C:01:65:74:E8:46:C1:FE:2D:FC:CA:32:F0:B4:E7
            X509v3 Authority Key Identifier:
                keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:cc:c8:1b:37:d6:65:44:ba:8a:e1:7e:da:75:5a:ea:21:
         4b:3d:1e:63:e2:3b:63:98:0c:94:07:ce:f0:75:58:ed:c9:c5:
         1e:fa:62:91:e8:7c:c1:1d:ef:dd:12:f0:97:fb:95:c4:1a:71:
         b8:4e:31:f8:db:97:5d:37:9a:04:98:78:31:e3:46:2d:3d:ef:
         89:f9:83:57:1e:66:23:5f:b7:a1:96:5f:20:60:8e:0e:af:07:
         ce:c6:c2:66:63:ca:12:be:fc:e1:17:5e:c4:b9:2a:db:bd:6d:
         ab:0f:e3:24:21:7c:33:54:d8:36:71:16:23:60:e6:cb:92:b1:
         c3:38:34:4c:e1:b5:3b:2e:82:cf:cc:b6:0d:ba:dd:03:4b:b3:
         cb:f6:6b:fb:f3:45:2b:2b:0d:a7:c8:4d:6f:04:2d:d6:ea:09:
         42:b7:41:bc:a9:e8:51:12:44:84:3f:2d:e4:e8:b9:6c:3d:8e:
         68:15:2d:b3:8b:fa:21:32:41:d1:49:43:9e:bb:16:e0:e5:ad:
         8c:9f:c2:4f:a4:74:07:b1:3e:52:dd:33:3d:fb:29:84:8a:4d:
         7d:9e:d6:23:a1:3b:9e:45:52:d4:c7:9a:f1:14:61:50:a1:c9:
         91:ab:52:0f:9a:95:1e:c4:c3:22:70:95:60:ef:14:4b:b7:4b:
         96:04:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org