Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          s5v1Vitgk8EWWoZFsYeu8tGDUH7t5r21ECczWr7SdAc=
Subject key identifier:   EB:2F:D5:15:34:7B:82:12:FC:3B:31:94:37:29:35:43:6A:DC:AC:18
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       185D06BD3330B70C68426FE3F68C139A40074900
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:48:09 +0000
ROA not before:           Fri 08 Dec 2023 00:43:09 +0000
ROA not after:            Fri 06 Dec 2024 00:48:09 +0000
asID:                     268296
IP address blocks:        45.237.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5d:06:bd:33:30:b7:0c:68:42:6f:e3:f6:8c:13:9a:40:07:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:43:09 2023 GMT
            Not After : Dec  6 00:48:09 2024 GMT
        Subject: CN=EB2FD515347B8212FC3B3194372935436ADCAC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:6d:b5:80:4b:e9:56:6b:26:2e:0f:77:b1:
                    b9:0e:fb:59:51:ca:70:ea:6e:af:f8:04:db:68:06:
                    de:53:67:8e:35:6f:4f:a5:47:95:c9:fc:ed:f7:ea:
                    b9:ac:09:f0:79:db:2c:e1:cb:3c:d0:6a:b8:c3:ce:
                    33:56:6f:dd:c4:f3:51:97:48:87:e4:cc:cd:8d:f0:
                    b3:cf:25:cd:44:b0:ec:81:07:b6:83:16:64:2e:4e:
                    6d:60:8d:2b:a0:f5:b3:11:74:3e:91:98:97:01:69:
                    a3:da:97:e7:9b:5b:9c:f7:11:46:d5:79:bd:13:37:
                    20:9f:01:50:11:47:2c:93:cf:03:a6:70:07:19:aa:
                    a3:8c:85:1a:ad:c1:1a:37:c9:65:b3:1d:18:58:a1:
                    32:13:0d:ad:8f:37:ab:c4:cc:a7:bf:69:7e:11:eb:
                    8a:45:e3:7f:9a:cf:cf:1d:c0:3a:7b:6f:54:b2:d1:
                    ab:bf:0e:6b:26:93:08:55:9d:99:76:4e:1e:f5:42:
                    94:3a:36:10:c3:3d:b2:bb:37:01:3d:7f:e3:8a:35:
                    ce:15:b4:bd:0d:19:43:2f:c7:f4:d9:d0:2c:10:bf:
                    76:53:43:08:27:fd:85:b4:31:ce:c6:ed:48:07:fa:
                    d2:3d:97:9f:8c:33:f9:13:c2:33:81:18:b8:25:0e:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:D5:15:34:7B:82:12:FC:3B:31:94:37:29:35:43:6A:DC:AC:18
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:f7:7d:af:1f:32:af:72:cb:93:e0:25:99:77:20:59:68:
         80:f8:2f:a1:6d:51:ec:62:cd:7a:17:46:ef:c4:0b:14:e5:ee:
         32:d0:04:1f:9c:d4:63:da:fa:9c:25:b1:6e:df:03:46:be:5b:
         81:b5:c0:25:c7:b9:92:35:90:50:68:10:ab:6e:86:25:fa:85:
         2a:4d:bb:a5:ea:e4:aa:1d:37:92:5c:da:cf:71:74:c1:a7:03:
         40:51:89:04:a5:16:b2:6e:10:4d:50:df:6b:d3:b3:ea:0f:7e:
         b5:47:1f:44:c1:de:1c:b3:ff:d5:9d:82:69:5b:e2:55:15:25:
         26:c0:07:6b:81:01:7a:b7:84:34:eb:67:ca:d0:6c:ba:b6:43:
         d4:91:a7:87:97:58:92:d4:bb:c7:7c:e8:16:f2:c8:0d:23:41:
         26:34:85:84:da:91:38:bd:60:ae:06:91:9e:24:02:a3:b6:e6:
         95:b6:63:d8:30:1a:5b:f8:57:db:03:81:2f:fd:82:30:1d:56:
         5d:fe:46:cb:a1:4d:71:86:fb:0e:74:fd:89:c9:24:a6:66:b9:
         ea:d0:b0:fb:f9:ea:27:5f:82:ac:7f:d0:e1:3d:6f:b1:33:3a:
         fb:d6:19:21:57:be:1f:3e:ab:b0:f5:87:1a:0d:7a:85:b2:7c:
         de:4d:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org