Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa (raw, json)
Hash identifier:          CM5DlHw6tvHtjH2DBB3XCEYziHNrtRQIFVrLOhgOKEc=
Subject key identifier:   24:11:55:FE:CE:10:28:FD:FA:A6:1B:33:0C:ED:1B:13:17:24:DF:E9
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       2E51A038671315B50714C6C7E6FEFBA2405F1C7D
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:42 +0000
ROA not before:           Fri 08 Dec 2023 00:42:42 +0000
ROA not after:            Fri 06 Dec 2024 00:47:42 +0000
asID:                     268296
IP address blocks:        45.237.244.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:51:a0:38:67:13:15:b5:07:14:c6:c7:e6:fe:fb:a2:40:5f:1c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:42 2023 GMT
            Not After : Dec  6 00:47:42 2024 GMT
        Subject: CN=241155FECE1028FDFAA61B330CED1B131724DFE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:95:63:8a:63:46:a2:b7:3c:14:d5:0b:48:
                    75:39:93:e5:01:c2:62:b8:a1:ab:ae:db:19:7b:20:
                    0e:46:c2:84:56:76:ba:30:5f:0d:95:dc:0d:e4:81:
                    d2:83:c0:f4:4d:72:24:64:8c:e6:ce:7d:2c:8a:ea:
                    9f:fc:b1:98:9b:44:d2:40:48:91:af:dd:83:fb:a9:
                    3c:20:f7:02:fd:2d:55:69:a4:37:b0:46:df:2f:11:
                    94:de:ab:1b:19:a9:4b:89:dc:24:28:df:b0:b9:a3:
                    2f:4b:18:c6:a5:6f:a3:d2:21:14:9b:35:df:fc:0d:
                    2a:68:ea:d8:67:f6:dc:82:35:d7:0d:4c:e1:2f:f1:
                    9e:95:14:60:8d:b0:c3:2e:64:32:ed:be:77:46:31:
                    51:1d:62:f1:ff:9a:57:62:8c:79:35:88:76:f7:70:
                    bc:11:e9:ca:fe:b1:be:f5:4f:8b:12:62:84:42:b9:
                    fd:06:9d:fe:dd:a7:fe:09:86:09:b0:dc:27:7a:a1:
                    be:57:fc:22:ed:d3:df:f8:d8:23:82:0c:df:5f:44:
                    55:b3:87:0e:2e:4a:5a:c9:13:61:20:0e:7d:66:da:
                    f2:cc:4b:79:4e:b1:47:69:a6:78:be:e9:be:3c:d8:
                    06:c5:83:5c:bb:5c:c4:cf:90:03:0a:d5:25:06:a3:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:11:55:FE:CE:10:28:FD:FA:A6:1B:33:0C:ED:1B:13:17:24:DF:E9
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:02:3b:31:ac:b6:8c:13:cb:e1:42:3e:57:27:02:77:13:67:
         13:e7:6e:6d:5b:c5:2e:61:c1:41:30:bc:d8:97:29:60:c1:e5:
         6f:04:a6:62:9f:e9:a7:35:a7:16:72:8d:04:b7:b3:bb:8c:8c:
         09:9b:3f:9c:81:bb:bc:35:99:db:ff:10:2f:c4:20:e3:07:32:
         a4:72:32:82:3b:f8:91:f2:3e:86:fd:32:57:1e:1b:de:d3:21:
         ee:b8:dc:65:e4:bd:6b:01:cc:93:f1:c9:51:bb:66:2c:33:62:
         35:d8:66:88:c9:b2:4a:67:dc:7d:59:ad:cb:b8:a6:a2:96:00:
         01:30:ef:47:8e:f2:ed:96:19:f0:10:0e:ec:0d:a2:f8:3f:0c:
         7d:ad:24:24:a5:74:1d:54:98:8f:b6:de:87:27:6b:0f:ec:02:
         e2:ed:7e:89:5c:da:e5:85:83:33:2d:40:09:80:78:7d:db:c8:
         b7:80:9b:89:f9:1e:37:58:42:e6:0f:17:55:c1:51:f6:63:f6:
         3e:9b:88:8e:db:6d:95:eb:5d:d7:39:ae:07:ef:d3:11:e1:7f:
         e6:ec:7e:b6:14:c7:5f:52:c5:e5:9d:5c:87:56:03:41:38:35:
         20:43:01:44:fe:a5:7e:d8:73:fc:8f:c1:0d:87:0b:04:cf:be:
         e5:5f:a4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org