Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa
File:                     34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa (raw, json)
Hash identifier:          dnW6Gtcbuj/bUw0LAaHw/XkfuSZkZ68S972VJ/Q3cLk=
Subject key identifier:   A9:89:E5:DF:25:2C:89:B9:4B:61:62:DD:35:08:33:D4:5D:45:F0:AB
Certificate issuer:       /CN=57566AD0E614192635CC891E97E47A090618F3F5
Certificate serial:       0A49C8CD3B76F5FA6EC433CEA521B0D39B74F033
Authority key identifier: 57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa
Signing time:             Mon 18 Sep 2023 15:03:52 +0000
ROA not before:           Mon 18 Sep 2023 14:58:52 +0000
ROA not after:            Mon 16 Sep 2024 15:03:52 +0000
asID:                     267024
IP address blocks:        45.227.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:49:c8:cd:3b:76:f5:fa:6e:c4:33:ce:a5:21:b0:d3:9b:74:f0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57566AD0E614192635CC891E97E47A090618F3F5
        Validity
            Not Before: Sep 18 14:58:52 2023 GMT
            Not After : Sep 16 15:03:52 2024 GMT
        Subject: CN=A989E5DF252C89B94B6162DD350833D45D45F0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:23:9f:07:15:2e:b4:60:5a:77:64:c9:6d:
                    ec:bb:8e:c1:10:d0:88:16:e9:8c:51:7c:f9:d1:f0:
                    0e:ed:ef:dc:29:64:6f:e3:44:81:43:70:1b:5e:2b:
                    cd:54:c6:1b:51:da:49:3e:2e:d2:45:10:ff:8c:06:
                    33:2e:d5:89:5d:5b:da:e5:a5:20:51:fc:44:de:3d:
                    84:08:1a:60:86:f2:b2:5c:b4:33:b4:3e:9a:7d:19:
                    23:b7:6c:40:e3:9e:b7:4f:07:d2:36:c5:d5:d5:23:
                    90:01:79:2c:70:eb:f7:6f:9c:a0:59:db:19:c8:02:
                    c1:b4:8e:64:79:09:93:0b:eb:76:2f:84:a5:f7:10:
                    55:42:ff:1f:5b:05:da:9f:cb:7f:5a:c5:51:9e:c7:
                    af:df:16:73:5b:8f:d5:21:38:05:95:27:61:26:b4:
                    9e:79:d3:e1:cf:3f:dc:ff:05:81:4b:d6:06:fd:01:
                    0b:9f:7d:a2:ae:ec:5d:22:2a:0c:d1:e0:03:97:17:
                    bf:a8:1b:e2:7a:32:c0:a2:65:aa:5d:ca:91:17:7f:
                    a6:d0:87:66:8c:c9:d8:5f:b8:62:7f:38:e7:f9:c3:
                    8a:a4:1d:d6:b6:4e:fb:b4:54:30:18:a1:fa:8d:d8:
                    28:89:99:bd:d9:ce:0f:a2:35:0d:28:7e:36:a1:22:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:89:E5:DF:25:2C:89:B9:4B:61:62:DD:35:08:33:D4:5D:45:F0:AB
            X509v3 Authority Key Identifier:
                keyid:57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/57566AD0E614192635CC891E97E47A090618F3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/34352e3232372e3131342e302f32342d3234203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:32:3a:4e:6d:d6:b4:1c:1a:4b:20:89:c7:07:57:00:df:
         67:ce:10:09:9c:24:4d:e8:19:c4:c3:80:4c:5f:75:7e:9a:d6:
         60:bf:4f:f7:d2:5d:f3:ee:3e:4b:3c:7b:8a:f6:53:23:0d:8d:
         bd:4f:b5:05:4e:b4:cc:af:7b:18:f6:d3:13:64:53:76:f2:10:
         2e:ed:6a:05:bd:38:9b:b5:30:6a:97:8d:9f:a4:1c:26:f2:6b:
         95:21:5c:5f:44:93:04:a3:78:7e:db:37:c3:9d:06:e5:05:43:
         52:8d:b9:dc:b0:98:70:10:a4:89:cd:74:90:09:17:75:ff:35:
         56:11:06:08:b8:68:03:46:48:25:ef:cd:1a:fc:4d:4f:3c:9d:
         39:89:60:2a:be:78:9d:f4:e5:00:19:a9:33:f0:93:5b:a9:ae:
         a5:24:05:8b:71:33:0c:c6:d8:3b:48:98:88:5f:27:4d:b0:e9:
         60:77:6e:10:bd:d3:5d:95:58:e2:b6:ac:fb:05:d9:87:11:8a:
         1f:d4:a2:05:bd:0c:e7:3a:5d:ad:82:de:ff:29:ea:58:20:c9:
         a8:48:6b:3a:f8:58:37:cb:ab:11:91:ea:af:d6:ca:3b:62:e8:
         c7:6c:76:68:42:e5:65:13:6f:04:03:0d:cf:c8:1a:11:71:36:
         5d:96:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org