Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32332e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32332e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          eTCSQXL92/PUgLKSBip7quhBeBHinjgE4PeKQpvtHMs=
Subject key identifier:   B0:C9:98:76:2D:44:8E:95:8D:C2:BA:01:C0:63:B2:47:95:C2:9D:6C
Certificate issuer:       /CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
Certificate serial:       127F43679CBBCCC2EB4448565F04A19D5C8AF213
Authority key identifier: D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32332e302f32342d3234203d3e20323637303931.roa
Signing time:             Thu 22 Feb 2024 07:06:00 +0000
ROA not before:           Thu 22 Feb 2024 07:01:00 +0000
ROA not after:            Thu 20 Feb 2025 07:06:00 +0000
asID:                     267091
IP address blocks:        45.229.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7f:43:67:9c:bb:cc:c2:eb:44:48:56:5f:04:a1:9d:5c:8a:f2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7
        Validity
            Not Before: Feb 22 07:01:00 2024 GMT
            Not After : Feb 20 07:06:00 2025 GMT
        Subject: CN=B0C998762D448E958DC2BA01C063B24795C29D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:27:07:a4:38:89:67:66:16:0f:8e:28:73:08:
                    23:68:db:fb:c0:d1:52:04:2d:35:f3:a1:70:e2:94:
                    d5:94:6e:ce:84:12:c8:34:7b:d5:79:9b:2b:65:a2:
                    60:fa:11:64:8a:a2:92:68:af:02:9d:b3:3c:3e:16:
                    30:a9:71:58:81:ac:de:f6:93:b6:38:ec:c6:09:a8:
                    bd:80:6d:06:9b:b0:c5:88:2c:90:71:41:73:fa:01:
                    70:1e:35:61:fd:e9:6d:56:08:f9:7b:4a:90:7c:93:
                    ff:62:94:90:98:69:92:59:b9:6d:42:d9:ae:21:2f:
                    66:94:4e:2f:c4:e4:23:4a:6a:f9:ed:e2:61:33:1e:
                    37:94:cd:4c:00:e7:43:99:d2:14:29:a7:89:71:95:
                    37:2a:a9:54:c4:d0:41:a1:48:02:e9:30:7e:66:01:
                    50:e8:42:97:70:93:4b:de:e3:d9:d8:91:c1:46:c9:
                    25:1a:d4:68:62:6f:a0:38:55:e7:9d:1e:f7:b7:b7:
                    2f:ab:51:73:21:9e:c1:5f:76:23:5c:48:8f:80:1e:
                    f5:81:9d:42:0b:d0:74:8b:6e:48:06:0b:df:d2:76:
                    65:99:e6:cd:61:24:f1:e8:61:ea:c7:15:45:5f:25:
                    37:50:b7:da:40:34:ea:be:ea:5e:28:a5:0d:ac:71:
                    a1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C9:98:76:2D:44:8E:95:8D:C2:BA:01:C0:63:B2:47:95:C2:9D:6C
            X509v3 Authority Key Identifier:
                keyid:D3:D4:B6:B6:B7:DF:2C:C7:AC:28:5E:2A:71:2F:F3:99:A3:B6:67:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3D4B6B6B7DF2CC7AC285E2A712FF399A3B667D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/34352e3232392e32332e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:b1:e6:7a:54:18:e7:33:9b:88:1f:b9:13:77:e1:da:ac:
         6b:88:aa:13:bc:17:a6:5f:73:54:6f:b5:83:53:47:c6:90:8b:
         f3:17:69:11:31:3b:15:6f:ce:f8:b3:9a:c4:21:13:7f:08:e4:
         a6:b0:c5:46:77:6f:c3:8b:e0:0c:f6:a4:94:57:32:25:12:56:
         62:cf:43:c9:49:15:00:aa:6b:3f:8c:82:4e:12:ae:c5:b6:4c:
         0c:d1:7a:4a:7b:f2:8b:0f:9b:ed:ea:85:8d:bf:97:25:60:90:
         3c:a1:c7:35:ff:34:57:5a:15:ee:29:c6:a1:50:27:d6:20:7c:
         75:3b:90:41:bb:28:0c:65:ee:e2:9f:1b:d9:f7:05:f4:67:e5:
         e2:83:75:1a:18:db:a7:af:95:36:8d:ac:02:59:c2:41:26:68:
         d3:ec:7e:59:2c:ca:ea:53:d2:be:18:f0:54:ac:83:ad:f3:2e:
         cd:ad:d3:b4:85:e5:cf:4f:4e:2f:4a:e4:39:23:b1:8a:73:14:
         4a:2d:2e:f3:f3:b6:0d:80:65:f5:ac:75:ef:80:f1:b0:32:09:
         99:b8:08:e2:a3:14:b7:e6:31:63:72:3e:22:dc:b6:85:0b:65:
         43:42:a9:47:10:9e:53:b3:37:bf:10:55:9b:92:2b:4a:a9:e0:
         2e:58:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org