Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          ZMyWdqsxc+mSGV7qfVIM7TYcCTOlEN04kkNtx83Z3wE=
Subject key identifier:   9F:57:50:37:2E:F5:AD:FE:97:23:C4:F0:C3:2B:37:93:5A:E1:16:79
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       68D09886EC3C4ADEF88E1D144B9F3AB4DD405E24
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:48:03 +0000
ROA not before:           Fri 08 Dec 2023 00:43:03 +0000
ROA not after:            Fri 06 Dec 2024 00:48:03 +0000
asID:                     268296
IP address blocks:        45.237.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d0:98:86:ec:3c:4a:de:f8:8e:1d:14:4b:9f:3a:b4:dd:40:5e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:43:03 2023 GMT
            Not After : Dec  6 00:48:03 2024 GMT
        Subject: CN=9F5750372EF5ADFE9723C4F0C32B37935AE11679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:27:77:0b:a9:16:5f:76:14:db:bd:84:f7:
                    8e:29:c2:3b:75:95:63:93:b8:9b:2e:8a:26:33:52:
                    71:cd:a9:af:dd:15:7f:b9:30:31:4a:c2:29:7d:26:
                    73:3d:38:2f:d2:5d:32:f7:7a:7e:4a:d1:cd:20:a4:
                    c9:d2:35:6b:40:37:b4:65:67:85:b4:81:78:6f:ec:
                    b9:51:c5:07:1b:36:eb:11:69:c7:97:9e:fb:7f:dd:
                    0a:88:a5:e4:15:ce:33:22:f4:cc:d8:56:a4:4e:68:
                    03:e3:04:ba:53:a5:3a:78:d9:de:e4:12:ce:ea:5b:
                    89:0a:39:29:b5:e2:3f:df:61:7f:1b:cc:40:eb:b8:
                    31:16:6e:ff:4d:f1:83:a3:ca:a9:2c:56:fb:a8:e3:
                    48:1e:31:77:eb:00:cd:fd:ff:fc:0f:e3:c7:c6:ac:
                    af:41:68:0a:a0:30:2a:e6:80:3c:2f:3d:09:a7:77:
                    56:29:00:56:e3:0d:b4:7a:12:4c:23:23:84:94:ba:
                    ec:59:df:0c:52:50:aa:63:7f:4b:b6:6d:aa:09:c9:
                    c5:eb:07:07:31:6d:85:7a:a4:a1:47:54:14:ae:98:
                    5f:8c:4e:97:7e:7a:36:f9:bc:16:dd:78:58:45:b6:
                    1e:53:97:0a:a1:5c:fe:6c:1e:72:30:82:54:40:6a:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:57:50:37:2E:F5:AD:FE:97:23:C4:F0:C3:2B:37:93:5A:E1:16:79
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234362e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:db:d5:01:6e:d1:41:3a:88:8b:67:44:9d:b5:30:29:83:
         8a:d3:13:77:ba:9a:79:0f:51:13:b3:a5:27:4b:73:2b:1d:5c:
         ae:4b:3a:0e:77:90:4c:f6:d4:64:4b:0a:ce:80:5f:86:9d:ec:
         56:8b:3d:71:ef:ba:38:51:f6:df:9c:82:4c:de:cb:b6:30:36:
         23:d0:12:49:70:95:bd:eb:12:bb:28:2c:9a:d3:bb:fa:9e:48:
         9d:07:36:1b:aa:e5:0f:ac:97:af:77:c1:92:9a:0c:b6:0e:40:
         4a:c7:0a:f0:80:bd:d0:5a:10:93:36:23:4e:d3:99:54:da:8a:
         df:95:41:c3:9d:bd:97:d6:94:86:bc:45:41:30:ad:f1:dc:10:
         29:d4:41:3c:96:b1:c5:5c:6d:aa:1d:60:35:1d:4a:26:b1:ac:
         bf:50:ef:c8:6f:1e:ab:3f:d0:1b:94:fd:9f:23:5f:a5:2d:b6:
         d0:2d:87:44:d1:f2:b9:c0:cc:7e:6f:d3:2e:a9:e6:21:ff:1d:
         6f:1d:55:fe:c0:53:74:9d:23:75:a4:38:cb:a4:0c:52:c8:83:
         e6:2a:f8:6f:18:92:ad:27:f7:8d:ae:8f:9a:23:98:7d:fc:3a:
         ec:27:ca:95:01:d7:4a:20:1c:a7:f7:b0:05:ac:7d:2e:7c:9d:
         19:45:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org