Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa (raw, json)
Hash identifier:          MEdfWiB0eLi29/ZiMVgRQ2oQ5hP9atTdTFvtlaPeKVc=
Subject key identifier:   D5:56:20:2F:5A:A9:45:C8:14:37:BB:2B:51:D8:5B:8F:1F:ED:55:9E
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       24670F1D611ACD5F6BECC1A48171F62DA4AFBC7C
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:39 +0000
ROA not before:           Fri 08 Dec 2023 00:42:39 +0000
ROA not after:            Fri 06 Dec 2024 00:47:39 +0000
asID:                     268296
IP address blocks:        45.237.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:67:0f:1d:61:1a:cd:5f:6b:ec:c1:a4:81:71:f6:2d:a4:af:bc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:39 2023 GMT
            Not After : Dec  6 00:47:39 2024 GMT
        Subject: CN=D556202F5AA945C81437BB2B51D85B8F1FED559E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:be:b5:7f:2b:43:72:fb:bc:78:1b:ab:91:
                    27:f9:62:65:94:27:57:08:24:72:45:1f:f6:1c:dc:
                    80:98:7f:15:87:24:8f:50:76:8e:e4:72:74:2a:73:
                    58:d0:65:57:4d:7c:c0:73:ab:23:84:b0:77:1e:a6:
                    8a:13:fc:ea:9c:19:4d:e0:32:2e:03:77:1b:bf:b5:
                    15:69:91:25:cd:84:e6:f3:1a:c6:55:45:ea:8f:0c:
                    22:52:37:95:2a:60:b3:0b:4a:3e:58:8e:ba:f5:99:
                    b2:df:07:43:05:8e:ea:3a:da:b4:20:b1:d9:b1:18:
                    64:f8:0e:7b:7c:81:cd:f8:26:04:e2:bb:ab:c8:4b:
                    1f:02:03:6a:da:01:08:cb:15:88:fe:11:e7:3e:81:
                    01:bf:7f:eb:d5:2e:ef:3c:e8:6d:f0:59:f0:f6:15:
                    13:a5:d0:39:a2:25:65:3e:eb:12:c1:a1:96:b5:1c:
                    99:09:44:93:0d:7a:b5:54:06:40:73:fc:14:12:ee:
                    aa:c8:b6:61:76:2c:a3:e4:a6:f3:02:96:e3:ee:04:
                    94:35:82:32:55:4d:cf:07:aa:52:90:fe:2f:06:45:
                    38:68:71:9e:38:46:d4:19:5a:6f:bc:71:cf:cf:cd:
                    80:b8:40:6b:c1:36:ae:4e:fa:43:8e:63:bd:35:db:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:56:20:2F:5A:A9:45:C8:14:37:BB:2B:51:D8:5B:8F:1F:ED:55:9E
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:e6:01:8c:af:68:3c:86:12:5c:8b:21:69:ca:81:25:e7:f4:
         b9:33:d4:9b:50:5a:b1:96:e4:a1:46:38:f2:cd:f3:80:01:04:
         f0:e6:ee:09:78:f2:dd:c9:b7:88:d1:e7:c9:01:58:6a:ef:9e:
         08:2e:cd:6f:30:41:fe:9c:22:76:fb:ef:80:a7:f8:ee:7d:0e:
         94:69:59:ec:28:39:e2:88:2b:c5:89:26:0c:b6:fc:81:00:f8:
         b4:0e:90:e5:1b:49:83:7f:40:32:54:6d:56:c9:b5:52:64:8b:
         9a:36:b8:cf:95:3a:b3:a0:06:b3:04:93:63:91:fb:4a:66:f3:
         7a:a0:90:d7:a0:9c:0a:84:bf:ee:ae:27:04:ec:21:d9:a2:b3:
         4e:cc:d6:6d:3f:37:81:8c:8d:6e:05:c9:3a:4c:94:4d:e2:d1:
         a6:82:e0:92:7a:2d:7a:8e:f4:03:3f:71:00:68:84:a0:6e:f6:
         2b:76:cc:5d:37:87:c1:5d:59:85:ea:41:dd:ff:f9:b7:b7:42:
         ed:00:7f:50:55:a9:52:50:a4:83:e3:1b:2d:41:7d:ad:04:54:
         94:9d:36:55:49:8b:91:37:b1:5e:f3:a9:96:5e:5f:70:2e:47:
         82:ce:cf:3b:89:b8:2c:7e:94:25:13:a0:bc:d1:f2:8e:9b:61:
         11:6b:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org