Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GBjw634nyyhbUXRXbmFedjDWGy4aaDt9JpmUdf69f1M/0/34352e3233342e32342e302f32322d3234203d3e20323638323132.roa
File:                     34352e3233342e32342e302f32322d3234203d3e20323638323132.roa (raw, json)
Hash identifier:          Q3OX4WX3vnKgWxcqGgWZuzeKucQNNXJ7JwJ/ClI+zsw=
Subject key identifier:   6E:5A:B4:EE:88:7A:7D:A8:82:F7:28:FB:71:AC:00:45:00:AC:C3:3B
Certificate issuer:       /CN=0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3
Certificate serial:       45E257F5E18C65BBA726712D0895242ADB31A239
Authority key identifier: 0F:10:41:BE:8F:9A:EE:E3:66:D7:D2:31:36:0C:7A:CC:AE:DD:FA:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GBjw634nyyhbUXRXbmFedjDWGy4aaDt9JpmUdf69f1M/0/34352e3233342e32342e302f32322d3234203d3e20323638323132.roa
Signing time:             Wed 29 Nov 2023 18:38:17 +0000
ROA not before:           Wed 29 Nov 2023 18:33:17 +0000
ROA not after:            Wed 27 Nov 2024 18:38:17 +0000
asID:                     268212
IP address blocks:        45.234.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e2:57:f5:e1:8c:65:bb:a7:26:71:2d:08:95:24:2a:db:31:a2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3
        Validity
            Not Before: Nov 29 18:33:17 2023 GMT
            Not After : Nov 27 18:38:17 2024 GMT
        Subject: CN=6E5AB4EE887A7DA882F728FB71AC004500ACC33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:5f:04:12:da:27:01:4c:d9:6f:69:22:15:
                    6c:1d:dd:9f:f0:ce:d4:4c:cb:b8:fa:59:9a:62:24:
                    78:66:a9:d7:97:5a:b9:50:fe:b2:80:97:1d:83:1d:
                    f2:a7:8d:bc:43:3a:69:5a:0b:e9:2f:ef:44:4d:b2:
                    79:bb:d5:4f:d7:72:c4:dc:38:5a:b6:b2:11:88:a5:
                    07:0c:a3:9b:d5:5c:d1:63:af:f1:cf:de:10:66:fa:
                    ea:fc:0e:4d:aa:57:b3:81:76:04:1f:25:fb:39:00:
                    79:a6:3d:bf:b3:d9:aa:8e:34:13:8a:61:b7:23:01:
                    48:b1:8c:be:a6:e9:88:5b:57:e8:bd:32:9e:49:08:
                    f1:99:95:41:bf:4c:68:c2:8d:39:86:9c:2f:e8:a4:
                    05:64:49:aa:e9:81:36:65:55:86:ad:c2:70:50:5b:
                    29:05:0f:8c:1f:9d:f5:0d:ec:a0:60:93:52:0d:cb:
                    48:a2:97:d0:09:38:c6:ad:d1:9d:44:2c:d0:88:53:
                    4a:75:9f:85:e3:28:7a:20:18:ac:96:04:41:7e:eb:
                    c3:41:85:f8:60:af:08:aa:e9:24:09:c4:95:9d:d1:
                    c3:6b:35:81:d9:1a:dd:b1:2d:4c:0e:39:61:52:3b:
                    32:47:30:8d:db:1c:3e:4f:24:14:55:a3:8f:1e:3e:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5A:B4:EE:88:7A:7D:A8:82:F7:28:FB:71:AC:00:45:00:AC:C3:3B
            X509v3 Authority Key Identifier:
                keyid:0F:10:41:BE:8F:9A:EE:E3:66:D7:D2:31:36:0C:7A:CC:AE:DD:FA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GBjw634nyyhbUXRXbmFedjDWGy4aaDt9JpmUdf69f1M/0/0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1041BE8F9AEEE366D7D231360C7ACCAEDDFAA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GBjw634nyyhbUXRXbmFedjDWGy4aaDt9JpmUdf69f1M/0/34352e3233342e32342e302f32322d3234203d3e20323638323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:f2:0b:f9:58:07:6f:8a:0e:ad:e9:a7:7e:38:43:6d:62:
         09:09:b1:4c:dd:db:ff:69:ef:75:21:91:c8:de:20:eb:59:88:
         e0:b0:77:86:75:b2:5e:2c:b2:56:76:3f:f1:10:82:8f:3c:57:
         e1:c2:c3:ce:0f:a1:60:d9:f7:87:ff:85:cd:95:5b:7c:f0:e5:
         99:16:a2:be:41:74:93:21:cd:2a:b4:23:83:7b:8c:37:64:f7:
         62:2d:c6:22:47:c8:8b:46:c4:0a:ec:f3:5e:5c:91:49:6d:67:
         ac:fd:66:63:f7:fb:1f:8b:40:30:3f:d0:cb:50:92:cc:a5:53:
         fc:1b:dd:da:c8:0a:cf:7f:1f:08:c8:fb:f6:cf:02:61:19:ba:
         67:6d:08:46:95:a4:bd:2d:68:82:bc:82:af:7e:fb:57:79:21:
         b7:da:9f:b3:db:30:9d:82:e5:34:b9:dd:b4:6b:5f:e4:8b:ec:
         ea:1d:2e:c7:a0:29:85:6e:27:f0:83:27:2e:7e:11:bc:97:3f:
         7a:b9:11:35:36:2c:44:16:4d:cd:b7:79:84:d8:96:25:2d:7f:
         c7:ea:37:b0:94:28:5a:cf:00:b5:89:d7:cd:c1:84:94:4c:a5:
         8d:33:09:26:29:1f:84:67:3a:63:d4:42:c8:75:6d:ad:f3:47:
         a5:d2:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org