Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa
File:                     34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa (raw, json)
Hash identifier:          a0qPn4ID4g87VF/t9aeTbkQ3VfpzSllxtAiA9CF5WCs=
Subject key identifier:   93:9B:52:58:22:90:9A:BF:08:F9:04:E7:0E:EC:F2:D6:D6:86:1E:BC
Certificate issuer:       /CN=579DF23540432B30BFE18FA378AD1C45E5ED6034
Certificate serial:       0D3A4F460A2F3C5ED1C8C1308B721C36B1028485
Authority key identifier: 57:9D:F2:35:40:43:2B:30:BF:E1:8F:A3:78:AD:1C:45:E5:ED:60:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/579DF23540432B30BFE18FA378AD1C45E5ED6034.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa
Signing time:             Sat 09 Sep 2023 19:46:34 +0000
ROA not before:           Sat 09 Sep 2023 19:41:34 +0000
ROA not after:            Sat 07 Sep 2024 19:46:34 +0000
asID:                     267321
IP address blocks:        45.232.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3a:4f:46:0a:2f:3c:5e:d1:c8:c1:30:8b:72:1c:36:b1:02:84:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579DF23540432B30BFE18FA378AD1C45E5ED6034
        Validity
            Not Before: Sep  9 19:41:34 2023 GMT
            Not After : Sep  7 19:46:34 2024 GMT
        Subject: CN=939B525822909ABF08F904E70EECF2D6D6861EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0f:ba:62:df:7e:45:b7:54:a6:70:3e:89:62:
                    74:74:96:f9:76:c7:20:0e:f5:81:03:ac:4a:44:45:
                    d4:7b:ed:fe:20:e2:f6:15:fa:7d:dc:06:d5:f8:89:
                    ef:75:a6:bc:8d:d5:41:0e:ed:ad:54:1f:aa:18:4b:
                    36:8f:42:a4:29:32:b8:a3:4b:ac:32:ad:61:4e:08:
                    63:8c:d6:65:09:d7:2b:e3:39:bb:51:00:70:dc:7a:
                    1f:70:c0:4b:a0:5e:ea:88:d6:20:7a:64:0f:87:c2:
                    46:24:a3:e8:47:c6:5c:49:1c:8b:52:a7:0a:70:fb:
                    26:f6:96:c9:a9:61:be:9b:3d:f1:f1:cf:38:c5:2c:
                    f4:3e:fd:77:e7:20:16:fb:4e:d0:2f:bf:cc:b7:d3:
                    bd:42:b8:c0:84:df:23:24:de:7e:dd:2e:48:75:a4:
                    86:98:45:05:5f:44:24:76:61:87:f3:51:e9:85:b3:
                    9e:2f:c7:b1:e3:7c:1d:cf:72:83:00:01:43:e2:95:
                    52:64:a2:e2:6a:5d:d8:5b:86:95:39:a6:7a:25:bd:
                    99:9b:ab:0c:3d:79:2f:0b:cf:5b:33:77:64:48:73:
                    8d:2e:60:9b:b1:47:b5:6c:d4:d9:7f:af:a4:56:55:
                    30:49:bd:e1:5b:3a:36:97:cf:28:c2:86:a3:72:4b:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9B:52:58:22:90:9A:BF:08:F9:04:E7:0E:EC:F2:D6:D6:86:1E:BC
            X509v3 Authority Key Identifier:
                keyid:57:9D:F2:35:40:43:2B:30:BF:E1:8F:A3:78:AD:1C:45:E5:ED:60:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/579DF23540432B30BFE18FA378AD1C45E5ED6034.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/579DF23540432B30BFE18FA378AD1C45E5ED6034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88htuTo9FaCkP5HUe8rgydarck8aJUYcmxfY3Pxm38WQ/0/34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:75:bd:7b:76:ff:ba:09:4f:f4:61:76:77:59:00:27:b2:b3:
         f9:00:31:1d:e6:98:d0:6f:17:37:4c:1f:8b:64:70:77:c5:0d:
         42:40:79:e1:e1:22:ee:82:86:6f:e5:dc:83:b0:34:3e:93:8e:
         4f:b7:f6:7f:50:31:1d:3b:95:b5:b5:d4:e4:90:b5:30:0c:85:
         31:fd:42:8f:2e:20:d0:5b:d0:e4:e6:f8:db:a0:5f:99:e7:83:
         cf:55:60:ab:30:15:39:c7:8d:af:6c:e6:1e:eb:99:8c:cb:e6:
         81:32:b5:ed:4c:74:60:04:7c:28:94:50:84:b0:93:57:9f:c5:
         5c:d5:96:b7:c8:c8:6d:82:a4:3b:8f:4a:a8:5d:fc:6e:e1:ed:
         fc:7a:54:9d:eb:61:ad:35:d5:b3:a5:30:d6:0d:7f:08:9d:44:
         e1:af:04:22:68:17:ea:88:21:fa:91:1f:5c:ab:d3:cd:c5:cf:
         f6:07:7b:b9:9b:24:10:a2:4d:35:7b:92:b3:b9:fe:0d:ca:c3:
         a1:1e:c3:6f:11:01:86:19:3a:0d:7c:f6:e3:d8:ab:21:d1:4f:
         1d:94:f8:62:c4:ab:12:8d:9c:f3:ba:19:47:27:12:ee:32:5f:
         56:aa:c0:4c:fd:5e:84:3a:a1:6c:70:99:80:92:5d:35:e4:80:
         59:88:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org