Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233332e38332e302f32342d3234203d3e20323638313932.roa
File:                     34352e3233332e38332e302f32342d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          pfUiBiiZ8keGh6H/hlEOWczadUeP2/H2eg5j1Euj+m8=
Subject key identifier:   72:CD:F3:F2:AA:4C:55:95:68:71:49:56:B4:C5:6C:70:95:EB:F0:69
Certificate issuer:       /CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
Certificate serial:       64C105BDAFE332E63E89F65D69C62BCE27949401
Authority key identifier: 91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233332e38332e302f32342d3234203d3e20323638313932.roa
Signing time:             Sun 27 Nov 2022 05:23:14 +0000
ROA not before:           Sun 27 Nov 2022 05:18:14 +0000
ROA not after:            Sun 26 Nov 2023 05:23:14 +0000
asID:                     268192
IP address blocks:        45.233.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c1:05:bd:af:e3:32:e6:3e:89:f6:5d:69:c6:2b:ce:27:94:94:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9196DD3555A3B15AB662F32F036A015CAC7C79A1
        Validity
            Not Before: Nov 27 05:18:14 2022 GMT
            Not After : Nov 26 05:23:14 2023 GMT
        Subject: CN=72CDF3F2AA4C559568714956B4C56C7095EBF069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:7f:c7:b7:c3:7b:a1:24:44:3b:5a:f4:62:
                    f6:10:df:d1:27:7f:11:3d:8f:24:06:5b:5d:53:3f:
                    fb:d9:bb:a1:9c:ef:3d:f6:61:95:9c:f6:05:7c:50:
                    e4:d0:d9:64:59:5c:93:62:37:35:f0:a1:ae:a6:56:
                    3d:b5:e2:4c:10:e6:12:35:98:a9:a9:08:9d:26:03:
                    e3:da:39:16:9c:88:e9:de:2c:ae:4f:c3:c1:f0:0f:
                    18:d5:71:c1:c9:88:44:5a:2d:27:b3:33:fd:69:0a:
                    ab:87:1d:64:c2:2f:de:9e:e9:5e:dc:6a:ac:44:21:
                    77:18:f6:23:39:e0:16:d8:b1:fc:34:c3:65:35:7b:
                    a3:bb:13:cf:21:06:53:e2:21:5f:c2:02:11:64:10:
                    2f:e9:97:bf:16:08:8d:87:f9:40:96:fe:bd:b7:5f:
                    4c:6e:e8:a8:f0:a4:81:92:dc:7b:90:d2:34:1d:a5:
                    75:e2:ce:43:04:2d:56:d6:a2:d6:11:f6:97:1d:00:
                    98:86:06:8a:39:8e:04:ec:55:5e:09:58:de:b9:0b:
                    79:0e:33:bb:3f:69:4a:f3:18:4a:6c:04:10:c9:90:
                    06:84:18:69:27:ef:4d:be:dd:c7:0e:4f:f9:b3:fc:
                    aa:dc:cd:93:65:44:08:8c:39:36:18:5a:29:32:80:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CD:F3:F2:AA:4C:55:95:68:71:49:56:B4:C5:6C:70:95:EB:F0:69
            X509v3 Authority Key Identifier:
                keyid:91:96:DD:35:55:A3:B1:5A:B6:62:F3:2F:03:6A:01:5C:AC:7C:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9196DD3555A3B15AB662F32F036A015CAC7C79A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233332e38332e302f32342d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:2d:e7:77:63:7c:13:e1:0e:aa:74:9f:22:61:6d:3d:53:8c:
         67:d4:80:e9:8e:53:4e:1c:fe:69:60:a4:34:47:e1:c2:d6:36:
         5a:10:ff:97:d8:11:5e:77:18:01:2c:9f:9a:fa:60:39:01:6b:
         8e:85:41:93:ce:7e:34:17:05:2e:08:81:49:d1:2a:45:38:e8:
         e8:95:12:7f:7a:94:95:a9:8f:b1:05:5b:12:fa:5c:ae:20:36:
         38:ae:96:55:32:eb:e2:49:83:88:7a:45:e6:e9:8a:fb:ef:bd:
         59:d8:dc:6b:ee:73:37:8b:b9:cb:e9:24:e0:8c:bf:9d:07:34:
         87:5d:44:d0:ee:5b:54:91:10:db:9a:75:e3:ba:d0:c0:f3:be:
         d9:56:2e:01:0f:15:a8:7c:6e:38:22:8b:fc:31:8b:56:60:86:
         ff:c5:ad:9a:24:29:30:7c:f9:75:0f:ba:0f:4a:f8:75:04:f4:
         2b:66:ac:13:a3:68:39:af:78:46:22:63:81:30:e2:c4:a7:39:
         2d:6c:64:c5:79:b2:49:f5:26:7e:fd:c5:1e:5a:7a:2b:dc:f9:
         64:1d:1a:e6:a9:09:42:5e:fb:29:5a:7f:00:25:a3:ab:3e:65:
         e9:db:9a:33:0c:71:7e:af:4e:7b:a8:61:98:70:59:33:6d:be:
         b9:ac:8e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org