Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          suCExveAWkiqiyPtnFL0wIT9zpzeCZcZs+zwWbbZTRg=
Subject key identifier:   FB:57:43:B5:5C:BA:50:42:BD:54:3A:F5:07:F2:88:06:D0:D9:EC:E1
Certificate issuer:       /CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
Certificate serial:       5C0BF42155B0D80D6800D0F74603F51D20427AF8
Authority key identifier: D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
Signing time:             Thu 22 Feb 2024 07:05:55 +0000
ROA not before:           Thu 22 Feb 2024 07:00:55 +0000
ROA not after:            Thu 20 Feb 2025 07:05:55 +0000
asID:                     267091
IP address blocks:        45.229.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0b:f4:21:55:b0:d8:0d:68:00:d0:f7:46:03:f5:1d:20:42:7a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
        Validity
            Not Before: Feb 22 07:00:55 2024 GMT
            Not After : Feb 20 07:05:55 2025 GMT
        Subject: CN=FB5743B55CBA5042BD543AF507F28806D0D9ECE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:7f:0e:86:7d:ef:2e:c6:d0:30:a0:05:78:
                    58:c2:f2:77:ac:33:7b:5d:b4:ee:15:c6:94:d9:fa:
                    72:02:11:a5:dd:ba:72:5c:a5:87:02:7c:b1:9e:57:
                    e2:ff:b0:45:88:34:49:c3:3d:51:a2:cd:39:9d:50:
                    59:99:c6:49:f8:71:38:9b:cb:5b:e4:f9:d2:ac:30:
                    25:be:2e:63:97:3d:b6:8f:c5:52:e4:8f:7e:08:57:
                    ec:25:74:6c:4c:7d:97:a0:eb:fa:f1:f8:c3:8d:75:
                    30:68:e6:9c:37:1a:0c:f8:77:cc:b5:9d:06:97:38:
                    45:b4:52:65:40:f1:69:43:7c:28:b8:42:d2:1a:40:
                    28:db:35:6e:a1:7a:dc:3b:14:9f:ba:34:b9:2e:49:
                    b5:15:8f:9f:4c:1a:8b:b5:50:c0:76:4f:2e:41:eb:
                    11:25:1b:6b:6c:fb:36:a8:7f:e2:f6:3c:55:45:d3:
                    ab:de:44:45:f5:3f:da:ec:51:4d:9a:99:0d:a1:dc:
                    99:e0:8d:77:9c:9c:b7:e4:24:b4:51:70:81:fb:3e:
                    df:22:1b:ae:84:37:0e:ab:89:2f:e9:0e:e1:90:a3:
                    99:f8:7e:98:ee:b9:28:5a:7f:d8:6d:ad:23:d8:13:
                    da:8d:61:c6:2d:91:b8:43:ef:1a:d0:93:b1:fc:c6:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:43:B5:5C:BA:50:42:BD:54:3A:F5:07:F2:88:06:D0:D9:EC:E1
            X509v3 Authority Key Identifier:
                keyid:D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:e0:95:dd:73:f1:b6:fe:8e:bc:76:ed:8c:4c:86:35:2f:
         58:1f:22:34:ce:aa:7c:8d:08:07:b6:c1:6e:bc:4c:aa:74:8e:
         13:f3:df:a6:66:5f:c5:78:43:0a:07:d4:46:89:c5:62:a8:2d:
         38:76:b6:c5:ca:38:f5:fe:b9:51:49:b8:2b:01:a0:06:a5:f0:
         f4:50:91:1d:e3:cd:d4:e3:77:a9:ae:cc:04:65:7c:ee:70:60:
         8f:b0:4a:08:55:d3:98:d6:2f:45:17:ea:20:d7:c0:37:9f:c8:
         57:b7:18:a5:99:72:b5:d5:7f:82:51:70:bf:95:b9:ad:7e:a7:
         77:17:77:49:e1:5e:13:a8:59:3c:c0:50:e9:dd:b7:1f:aa:39:
         0f:c5:3e:cf:db:fa:0f:2f:f7:9c:b2:e8:b5:c4:f6:51:ae:f3:
         f5:0d:96:a5:35:32:d0:9b:ca:47:b7:61:aa:cb:69:54:5e:68:
         af:89:d7:c4:84:43:ef:77:41:de:b5:3e:82:61:e6:89:61:9d:
         62:a0:c1:3f:dc:da:fe:11:f1:b1:8f:74:2e:38:e4:5c:e7:4e:
         cc:84:ac:7d:14:e6:06:10:93:2e:d8:f2:b1:c8:ef:98:c5:20:
         74:a2:36:4c:d2:2a:38:16:82:ff:50:d2:bc:4d:65:08:9d:04:
         c2:cb:47:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org