Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/34352e3233322e3133352e302f32342d3234203d3e203238323130.roa
File:                     34352e3233322e3133352e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          0U8E3J9yRbUS1W5qVgq4rFt+kHXY9e7rJjO4YOnoFw0=
Subject key identifier:   24:1A:C5:37:87:87:FB:9C:72:4D:14:50:43:84:D7:98:80:EC:F2:3A
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       785A5E358B8FA645C792D6E36E023BEF069DB3C8
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/34352e3233322e3133352e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:24 +0000
ROA not before:           Wed 28 Feb 2024 13:58:24 +0000
ROA not after:            Wed 26 Feb 2025 14:03:24 +0000
asID:                     28210
IP address blocks:        45.232.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5a:5e:35:8b:8f:a6:45:c7:92:d6:e3:6e:02:3b:ef:06:9d:b3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:24 2024 GMT
            Not After : Feb 26 14:03:24 2025 GMT
        Subject: CN=241AC5378787FB9C724D14504384D79880ECF23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:46:78:7b:3f:f3:56:77:6a:b3:cc:c4:eb:
                    70:7f:d0:57:74:71:f7:1b:c0:8a:14:a4:68:b1:de:
                    d2:18:df:b7:f8:ea:a7:fb:80:2c:23:a3:e6:e5:a5:
                    10:ba:82:b8:cd:25:84:48:c7:bd:65:62:24:97:ef:
                    8d:9b:4d:99:d8:1a:ce:44:d4:97:03:64:3f:89:14:
                    be:25:a8:6e:c2:e9:a6:57:46:54:3f:67:d5:93:05:
                    42:1b:37:18:d4:85:75:b5:35:ce:cf:6a:22:15:fd:
                    9e:11:ae:12:ae:d4:40:da:a6:95:c6:a0:21:7b:72:
                    13:b1:e7:e2:7f:10:37:cf:bf:95:31:bd:b0:12:59:
                    92:87:8f:8f:3c:c6:d5:4a:2c:a1:b7:3b:a4:40:55:
                    cb:60:17:fc:1f:21:4f:c9:55:c7:ae:34:50:41:dc:
                    c8:18:24:92:e6:05:9f:2a:d0:90:3b:cf:01:5d:f0:
                    b1:7b:15:eb:9c:7a:79:50:a9:52:78:d1:38:91:d4:
                    33:05:15:31:e3:9c:af:40:30:a4:cb:c0:29:e6:a4:
                    44:b5:44:bd:7b:fe:2b:7e:e2:19:23:40:0b:ef:15:
                    35:09:aa:0b:6b:4a:c4:0b:15:a6:ed:0c:8e:17:b6:
                    77:a4:bc:4f:01:f7:cd:ff:be:68:d9:a3:20:4a:1e:
                    9b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1A:C5:37:87:87:FB:9C:72:4D:14:50:43:84:D7:98:80:EC:F2:3A
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/34352e3233322e3133352e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:34:ca:74:6b:e7:3f:2c:04:fc:36:f3:f5:5a:be:f4:b2:45:
         00:c5:75:82:73:4e:48:4b:be:11:3a:e8:60:00:e6:4a:66:69:
         ba:39:35:57:eb:20:a9:45:2e:6f:29:3b:a5:cb:2d:c8:79:e7:
         16:b8:e0:dc:1e:21:03:11:37:5b:a3:52:43:66:2f:ed:f3:33:
         d3:95:12:36:c0:ed:3b:5c:9e:c3:9f:bf:56:fb:8f:f4:e0:ef:
         46:13:f8:0e:e4:49:c6:83:0e:1c:68:9c:47:26:13:f1:5f:b1:
         6a:c2:05:c6:14:c1:60:27:4c:50:3d:82:3b:c9:8a:5f:e6:4a:
         4c:a6:c0:87:43:6d:83:8d:b4:a9:42:08:24:a0:13:c7:4b:95:
         aa:db:fe:60:b4:6a:ba:13:0f:68:59:8b:ce:c5:40:e9:e1:09:
         51:fd:20:f1:b4:d0:5a:09:3c:6d:69:c1:26:37:ba:63:e1:6d:
         ac:db:2d:5b:e6:86:f5:99:21:17:81:b9:26:1d:05:58:b5:ab:
         c2:32:6e:34:eb:c1:35:7e:04:17:b8:6a:5f:e6:ad:6e:a9:74:
         d6:ff:59:a1:30:a0:a4:f6:a7:84:6d:fe:6f:20:8d:1b:fb:b4:
         ab:f9:20:2b:68:3f:29:89:ea:6f:a1:9b:9d:b2:47:aa:88:d6:
         26:ea:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org