Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/34352e3233322e3133322e302f32322d3232203d3e203238323130.roa
File:                     34352e3233322e3133322e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          egSVHG/ZOk3nanMvFYu4aoA22/cpMLWPed6ONRFnENw=
Subject key identifier:   40:24:87:3E:42:7C:F1:B3:82:BF:27:B8:2B:75:29:0D:72:4E:C8:2A
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       4ECEC88DD75FF5332EAEF63354E0F95059C1CDCC
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/34352e3233322e3133322e302f32322d3232203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:25 +0000
ROA not before:           Wed 28 Feb 2024 13:58:25 +0000
ROA not after:            Wed 26 Feb 2025 14:03:25 +0000
asID:                     28210
IP address blocks:        45.232.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ce:c8:8d:d7:5f:f5:33:2e:ae:f6:33:54:e0:f9:50:59:c1:cd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:25 2024 GMT
            Not After : Feb 26 14:03:25 2025 GMT
        Subject: CN=4024873E427CF1B382BF27B82B75290D724EC82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:4e:10:24:9e:8c:fb:b5:df:a8:e3:cc:4d:
                    d3:48:f5:15:29:90:b0:c8:d7:40:82:4e:91:31:f3:
                    80:cb:ad:ab:09:8a:88:0e:c6:21:ad:16:cb:83:24:
                    c9:26:e3:f7:9c:2c:40:62:22:56:f3:a7:0a:6a:ef:
                    3a:00:83:0b:48:26:48:b1:e8:cc:c7:b9:8c:8d:57:
                    87:ac:38:c7:92:a5:ac:af:6a:cd:fc:2e:6e:b0:bb:
                    85:2e:d5:fd:17:2a:7c:9e:8b:3b:43:b9:1a:fc:04:
                    71:eb:1f:82:1c:35:e0:56:7c:5c:b1:71:ab:d7:5d:
                    cd:1f:c7:4c:df:c4:64:cd:96:77:19:a7:91:6d:3a:
                    e8:a9:e9:1e:70:6c:fb:90:90:42:55:bd:8c:a7:64:
                    a0:97:05:09:54:e0:54:16:06:4b:48:45:16:14:3c:
                    f6:86:78:aa:b6:36:f5:99:5e:2f:bd:fa:f4:17:c2:
                    d5:25:67:a3:86:37:cb:da:99:ad:2b:62:aa:2c:fe:
                    f5:10:b1:15:eb:4a:e4:ab:fd:30:c9:82:5f:f1:47:
                    8e:ac:da:d2:17:9c:80:10:41:0a:b0:2c:3c:cd:82:
                    86:31:04:da:b8:7c:cb:03:59:ba:26:04:7d:a0:79:
                    ed:3b:78:40:f7:3b:05:7f:85:85:dc:81:5b:5b:d2:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:24:87:3E:42:7C:F1:B3:82:BF:27:B8:2B:75:29:0D:72:4E:C8:2A
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/34352e3233322e3133322e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:df:21:b7:03:37:38:98:ee:77:ae:f3:e3:e3:3d:97:01:
         74:06:2c:56:18:89:61:e0:31:9a:e4:65:95:fb:a8:b3:53:58:
         7f:68:21:49:53:25:9f:73:68:d5:bc:50:e8:6d:02:81:cb:36:
         3b:bb:62:37:80:5b:b5:15:9b:a9:9e:c4:96:1f:55:b9:df:c6:
         2e:1f:6b:b8:5e:8e:ba:6d:ad:f7:17:43:6d:8d:00:1d:10:a7:
         1b:fa:06:b9:6c:e6:37:e2:11:f5:9e:0d:b8:d3:85:c9:77:13:
         76:a4:93:d0:c9:30:ac:b6:ee:03:c8:66:5b:aa:85:d0:cf:c6:
         2d:b2:7e:40:3f:94:23:c3:d4:61:7d:b8:c8:94:60:10:e3:10:
         51:5e:82:c7:c1:8d:58:19:98:d0:cc:f2:db:07:63:95:66:89:
         a0:f4:3f:33:9b:05:da:58:0e:74:e8:49:99:f0:15:8d:2e:97:
         c2:75:82:e3:42:fc:36:ff:b2:9e:c2:ce:69:9d:db:af:af:f2:
         d0:62:6f:0c:00:c1:df:b1:19:ed:70:30:62:be:95:4d:4b:57:
         80:6e:14:87:05:37:f9:29:28:9e:7d:ba:e6:7a:c9:5e:4d:4a:
         15:11:39:c1:c6:e0:a8:13:05:ee:b1:f9:bd:df:d7:4c:a2:c9:
         ee:6c:77:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org