Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e322e302f32342d3234203d3e20323637333838.roa
File:                     34352e372e322e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          YPoQtcR9vS9FUHQx6GLE/VGQMyl8KqCtVIKh7NFrmyc=
Subject key identifier:   3E:8B:D9:A8:4E:4C:95:60:5A:89:BE:29:F4:89:6C:E3:56:E9:0D:E1
Certificate issuer:       /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial:       166DD266CFD9259EBB7D2F88D3EAF85829A17D82
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e322e302f32342d3234203d3e20323637333838.roa
Signing time:             Mon 13 Nov 2023 19:11:43 +0000
ROA not before:           Mon 13 Nov 2023 19:06:43 +0000
ROA not after:            Mon 11 Nov 2024 19:11:43 +0000
asID:                     267388
IP address blocks:        45.7.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6d:d2:66:cf:d9:25:9e:bb:7d:2f:88:d3:ea:f8:58:29:a1:7d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C015248532BCE3959F73092749FDE164934402
        Validity
            Not Before: Nov 13 19:06:43 2023 GMT
            Not After : Nov 11 19:11:43 2024 GMT
        Subject: CN=3E8BD9A84E4C95605A89BE29F4896CE356E90DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:3a:6c:b5:78:de:8a:3e:62:7e:5b:44:17:
                    09:40:b1:34:f4:35:be:8a:b3:81:0f:c0:ac:a3:91:
                    c2:b8:95:0c:66:c7:a3:95:5a:e6:4a:79:9d:ec:8d:
                    18:b1:58:b5:7d:2f:1d:b2:07:30:ce:1e:17:3c:87:
                    14:e2:d6:6b:6e:a9:8b:08:6e:1f:aa:03:89:95:12:
                    e9:35:86:bd:81:40:69:01:43:3f:8e:f6:5f:69:26:
                    84:c9:28:f1:f8:c0:43:17:9c:a1:19:f4:ea:55:c1:
                    84:30:4b:9b:9e:2d:df:f5:28:87:0d:2a:9d:25:1c:
                    e3:f1:aa:a3:0a:af:e2:d0:cd:cc:72:fd:e0:05:01:
                    6b:0e:d3:ad:20:3f:83:6f:cc:61:66:f8:ec:1b:61:
                    f6:85:20:d9:42:88:a9:0d:e4:9a:86:87:b8:79:f5:
                    d4:30:33:0d:9a:fe:48:4d:b1:9f:23:b7:6a:bb:da:
                    b8:f9:cd:bd:3e:f3:55:1c:88:d4:10:04:1d:ea:7a:
                    f1:49:82:6d:95:e9:6e:81:bf:e1:0f:b3:eb:ed:5e:
                    26:32:b1:16:a6:fb:da:a2:42:e5:68:0f:3e:72:88:
                    07:38:1b:91:6d:4c:1b:5d:c7:62:56:0b:98:6f:a0:
                    f0:e9:5f:d1:02:30:2f:39:12:41:40:77:ff:5b:7a:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8B:D9:A8:4E:4C:95:60:5A:89:BE:29:F4:89:6C:E3:56:E9:0D:E1
            X509v3 Authority Key Identifier:
                keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e322e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:8f:db:df:b0:49:e3:42:f6:d4:98:e5:a6:6e:10:dd:de:5b:
         da:47:f7:fa:b9:d1:42:2c:da:26:6e:ee:7e:dd:d2:24:71:7b:
         f0:7b:41:b6:e5:96:80:90:46:76:32:80:2e:ed:ec:3f:ce:b2:
         fc:3e:48:46:72:bc:a5:5f:15:e2:3f:cc:c2:8f:89:0c:29:0d:
         f9:79:6a:5f:8d:fc:ad:2c:34:8d:60:4a:cd:f6:6e:5a:49:28:
         d4:ab:a7:56:76:34:48:35:73:33:f0:1d:15:55:04:c4:75:30:
         5f:87:6b:7a:72:bb:41:b9:60:c1:81:fb:a1:c9:6e:e8:18:41:
         8b:37:ce:9e:d9:f9:08:7c:8b:5d:df:44:a6:fc:6d:95:69:5f:
         67:97:8b:71:68:c8:30:29:0a:8a:51:d6:1b:e9:57:cb:58:96:
         88:c2:44:59:1e:d0:bb:0d:b1:35:ff:95:56:bf:7b:57:71:96:
         30:f9:84:e4:a5:78:99:e9:f0:d4:ca:6b:98:b5:fa:be:b6:6e:
         5f:e6:ce:d8:65:7b:3f:d4:ec:ce:47:52:d8:77:71:88:35:e9:
         da:d5:67:55:e8:b4:f3:eb:8a:ba:4b:cb:b2:46:2e:27:d3:ec:
         f6:42:22:b1:ef:d4:1a:f4:fa:24:a6:0e:82:04:9e:ea:66:b6:
         73:61:79:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org