Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa
File:                     34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (raw, json)
Hash identifier:          6x7MOeTh3uPNl8QYJEqAFXjG4Mu/zmlFu0CbsnvaTko=
Subject key identifier:   B2:07:7C:F0:A6:B5:4F:1F:FD:F9:60:44:D5:0B:02:8B:13:2F:B0:5A
Certificate issuer:       /CN=7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3
Certificate serial:       335BD07102D9B014A7FC1EB00BA089E7B2B47D42
Authority key identifier: 7A:2D:CE:8A:D3:C9:E8:A3:1D:53:D5:32:C9:68:E9:87:DB:BC:70:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa
Signing time:             Mon 17 Jul 2023 12:11:19 +0000
ROA not before:           Mon 17 Jul 2023 12:06:19 +0000
ROA not after:            Mon 15 Jul 2024 12:11:19 +0000
asID:                     268824
IP address blocks:        45.172.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5b:d0:71:02:d9:b0:14:a7:fc:1e:b0:0b:a0:89:e7:b2:b4:7d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3
        Validity
            Not Before: Jul 17 12:06:19 2023 GMT
            Not After : Jul 15 12:11:19 2024 GMT
        Subject: CN=B2077CF0A6B54F1FFDF96044D50B028B132FB05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:d0:15:73:a3:64:11:5b:92:cf:d7:da:ec:
                    39:81:cc:d7:aa:db:d1:fc:f6:2b:27:74:5a:60:06:
                    ff:fb:8b:9d:d4:e1:bb:3d:f3:48:43:dc:f1:74:e2:
                    a3:84:f5:4e:fd:88:e6:ec:9d:12:1b:0a:10:1f:29:
                    b6:eb:82:bd:df:f3:c3:44:dd:d4:59:fd:ff:59:c2:
                    c9:08:c8:9d:25:bc:62:c1:e1:f9:db:04:f3:62:e6:
                    91:3f:43:c9:15:54:46:54:aa:3a:11:cd:e1:e3:b4:
                    28:1a:74:e6:b6:07:b8:17:bc:44:65:1c:87:2b:32:
                    81:40:df:84:aa:b0:bb:4a:5c:88:84:59:15:42:7f:
                    f1:d5:03:17:55:e9:aa:99:92:7b:39:d1:07:8c:be:
                    40:c7:bc:b6:ee:23:89:de:81:af:08:ae:7b:95:4a:
                    5c:6c:a7:bb:d8:70:a3:9e:9e:a9:04:e9:cc:d1:8a:
                    8b:8b:7a:7c:95:69:17:d0:8d:d1:f9:15:44:41:00:
                    b5:a9:46:d7:06:a0:f5:b0:cd:e4:5e:1e:58:6f:c2:
                    3f:70:89:8d:2f:39:37:bd:e6:f7:a8:3a:a4:93:ea:
                    c7:15:15:4f:a7:6d:69:8e:b7:a7:dc:e4:e8:f1:81:
                    da:90:0a:fc:3c:73:97:48:e9:0f:a4:22:78:5a:80:
                    82:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:07:7C:F0:A6:B5:4F:1F:FD:F9:60:44:D5:0B:02:8B:13:2F:B0:5A
            X509v3 Authority Key Identifier:
                keyid:7A:2D:CE:8A:D3:C9:E8:A3:1D:53:D5:32:C9:68:E9:87:DB:BC:70:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A2DCE8AD3C9E8A31D53D532C968E987DBBC70F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/0/34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:b3:6b:58:23:86:09:ae:2a:b0:03:c8:f2:15:89:f5:7e:3e:
         d6:64:3e:c9:53:fb:2c:a0:59:8c:80:db:e0:6d:42:0d:e0:34:
         9e:c3:38:ed:84:76:42:ef:ea:31:df:21:68:31:dd:61:62:c3:
         dd:86:1f:fb:88:71:27:96:24:51:23:d2:22:d8:a5:1c:69:7a:
         35:1a:cb:d5:5a:42:5b:fb:38:9c:dd:26:11:fb:e9:4c:9d:ca:
         2f:f9:fa:27:f3:dc:ee:41:24:f3:d0:2d:4d:1f:dc:dc:38:3d:
         2a:d8:64:a2:d4:ab:47:92:08:ab:4a:d3:b0:d9:4b:6c:0d:4d:
         1a:b3:4e:a3:1e:4b:d4:7f:2a:f4:a2:5f:44:db:e8:57:02:c0:
         37:d9:2d:57:d4:8a:82:a5:cb:d2:0d:9e:bc:38:08:92:75:13:
         07:4e:8f:98:9b:06:dc:60:31:47:9d:bf:84:39:de:f8:7c:03:
         ca:d4:58:c1:84:30:f7:3a:00:3a:84:61:ba:61:d7:8e:2e:45:
         d1:fe:cb:23:4e:05:4c:12:eb:2c:ac:83:40:34:ad:42:db:5c:
         29:eb:b0:22:83:6a:28:58:23:fe:8c:22:a0:c1:f2:05:65:58:
         c7:b5:a6:e5:5e:44:e7:37:5a:48:b0:d8:44:e0:7c:08:60:3f:
         f0:06:9c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org