Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34352e302f32342d3234203d3e20323636393538.roa
File:                     34352e3232362e34352e302f32342d3234203d3e20323636393538.roa (raw, json)
Hash identifier:          05aJjwA2jkCVWy9AEAD7QErBA4OofsMFYAR6FkWwrx8=
Subject key identifier:   7F:AA:92:0F:63:0A:A8:81:CF:CE:4F:55:C1:85:C3:73:81:07:BE:1E
Certificate issuer:       /CN=885C33EE8E30210425E8E25473319F24E3B686FB
Certificate serial:       657862B813A070C6E3CB16651A8B68FC3447982C
Authority key identifier: 88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34352e302f32342d3234203d3e20323636393538.roa
Signing time:             Thu 09 Nov 2023 21:00:00 +0000
ROA not before:           Thu 09 Nov 2023 20:55:00 +0000
ROA not after:            Thu 07 Nov 2024 21:00:00 +0000
asID:                     266958
IP address blocks:        45.226.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:78:62:b8:13:a0:70:c6:e3:cb:16:65:1a:8b:68:fc:34:47:98:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885C33EE8E30210425E8E25473319F24E3B686FB
        Validity
            Not Before: Nov  9 20:55:00 2023 GMT
            Not After : Nov  7 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:8a:ac:fa:3c:50:d8:15:d0:35:1a:2b:ac:
                    0a:b3:40:94:6d:7a:8f:43:64:57:10:d2:0b:ab:4d:
                    0e:53:21:d9:c7:a1:e5:55:fd:43:6f:0b:d1:a4:0e:
                    f4:4e:0c:55:dd:2d:ad:0d:ae:8d:05:56:5e:d9:70:
                    1c:23:71:7e:bf:25:b2:e8:61:16:1e:bc:40:f1:01:
                    ac:44:cf:30:54:3f:07:10:66:6e:98:f0:cf:e0:8a:
                    35:cf:a1:3e:e2:a3:5b:31:76:15:17:fb:61:34:69:
                    c8:79:2c:99:b5:e8:66:36:5c:ba:75:73:91:94:d0:
                    85:56:f9:5e:11:42:49:d7:21:d4:a8:e7:3a:cc:fe:
                    cc:c8:bd:13:a7:28:8b:6f:a5:8a:21:8b:9e:f6:96:
                    34:fb:1c:c0:3d:bf:f4:0a:96:69:59:a8:ba:8a:58:
                    c5:3a:f1:f8:0f:1b:f5:aa:db:81:3c:37:2d:c0:32:
                    ad:2a:43:68:9b:9b:63:cc:83:dc:f6:0c:1c:72:56:
                    da:eb:16:b3:df:10:cb:c1:32:11:05:4e:af:a8:90:
                    f8:0f:ae:33:e1:65:04:0c:31:ad:ea:6d:96:e8:db:
                    48:a0:6e:78:b6:a9:d6:cb:ef:dd:c2:4c:54:dc:bb:
                    08:c9:56:55:65:6a:6d:d2:72:7d:58:77:b6:c5:14:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AA:92:0F:63:0A:A8:81:CF:CE:4F:55:C1:85:C3:73:81:07:BE:1E
            X509v3 Authority Key Identifier:
                keyid:88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/885C33EE8E30210425E8E25473319F24E3B686FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34352e302f32342d3234203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:19:ac:79:38:51:f1:b9:88:db:b9:6e:59:58:56:a6:80:17:
         35:f5:1f:fe:26:c6:71:ef:6f:fc:cb:0e:51:f2:a0:be:55:f1:
         3b:95:f1:04:49:dd:98:0d:27:ad:63:33:41:75:3c:d3:c2:b7:
         82:f0:8a:46:b9:ad:e2:5b:fd:d6:19:5d:d8:43:32:5a:29:65:
         b7:f8:29:2e:78:aa:48:03:ee:a9:ec:e8:d5:c3:21:59:a0:6a:
         d4:6f:e1:eb:b6:98:9f:6f:9f:c7:ff:57:f2:81:91:91:f7:17:
         ee:6f:bd:e6:c3:80:fc:61:28:47:2f:14:d8:f2:eb:ae:59:b6:
         0c:b9:fa:b0:4a:45:7e:d4:dc:68:0c:9d:ef:2c:20:48:8e:33:
         e0:8f:b7:40:b1:69:a1:af:17:8b:52:9c:44:a6:3a:ad:0f:1f:
         5f:d1:18:73:2b:80:d3:ab:7d:1a:1e:11:0a:cd:73:b5:dd:b4:
         2d:45:50:24:89:8a:e6:26:53:e3:10:32:a5:5e:35:3a:b8:39:
         13:89:71:47:17:95:1b:da:d6:d5:6d:22:92:a4:4d:7c:bc:62:
         25:f1:89:09:ca:e6:ac:e4:8b:71:34:d2:93:d3:6a:b2:79:a3:
         74:9a:38:59:3f:25:dd:6d:30:2a:6a:b1:69:db:1a:ab:df:98:
         1e:9b:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:00 2024 by rpki-client on console-fra.rpki-client.org