Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233332e38322e302f32332d3233203d3e20323638313932.roa
File:                     34352e3233332e38322e302f32332d3233203d3e20323638313932.roa (raw, json)
Hash identifier:          mUOCEInXpMcv263+11TL9oB5q5RYnEpjZiBg+zuKkYY=
Subject key identifier:   6B:32:50:C5:ED:2B:37:22:9F:B5:75:DB:2F:31:84:62:69:BD:D8:24
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       2B296C8F1B33CF21A406D852E05340B5A7084278
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233332e38322e302f32332d3233203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:36 +0000
ROA not before:           Mon 14 Aug 2023 15:53:36 +0000
ROA not after:            Mon 12 Aug 2024 15:58:36 +0000
asID:                     268192
IP address blocks:        45.233.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:29:6c:8f:1b:33:cf:21:a4:06:d8:52:e0:53:40:b5:a7:08:42:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:36 2023 GMT
            Not After : Aug 12 15:58:36 2024 GMT
        Subject: CN=6B3250C5ED2B37229FB575DB2F31846269BDD824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:91:53:58:b8:2d:94:6b:e7:ce:d7:3a:1a:
                    64:14:f7:48:c4:51:22:7c:54:bd:64:f8:45:f4:f7:
                    7a:96:57:eb:4c:d6:d9:7a:16:74:e8:a6:35:a2:c4:
                    7f:38:0d:11:4f:da:19:93:d8:2a:ea:6e:97:7c:4f:
                    f4:43:a6:04:4d:a4:dd:ae:65:67:c4:8e:66:9f:10:
                    41:04:8a:ea:64:cb:0c:67:87:5c:7a:c9:7a:4a:a0:
                    87:e6:ed:1b:9c:d6:47:c5:d4:2c:02:94:9b:fd:57:
                    9d:17:70:81:a4:e5:75:fc:76:2f:b0:ed:c8:0b:47:
                    ca:7c:7c:86:55:f2:e6:b0:cd:37:ca:17:6a:7a:7d:
                    8e:7f:12:d8:e4:e3:17:78:67:41:ec:93:0e:0e:a3:
                    bf:7f:38:e0:bc:57:98:d7:58:81:c8:e6:f4:c6:19:
                    6c:a6:e8:5b:40:08:ca:20:3e:24:e7:26:a3:5c:3e:
                    47:0c:0c:f2:00:6f:be:36:75:8c:a8:09:49:78:bc:
                    52:9d:c3:63:09:51:e1:f3:b9:26:89:a6:b6:20:9e:
                    e7:f6:dc:d7:82:4a:83:9d:ad:89:a6:34:c2:3d:0b:
                    dd:44:9e:ca:32:b5:7c:80:c2:33:49:1d:fa:b8:e0:
                    bd:03:8c:38:b1:49:07:73:0b:51:b8:e1:82:8a:1a:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:32:50:C5:ED:2B:37:22:9F:B5:75:DB:2F:31:84:62:69:BD:D8:24
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233332e38322e302f32332d3233203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:e5:49:57:31:2f:b8:39:49:8c:4e:af:21:e3:70:48:1c:
         bb:ed:4b:33:11:e8:52:f8:33:cf:dc:7f:ce:15:50:3e:f5:8f:
         79:be:f8:af:73:7a:5b:99:95:0c:6e:53:43:4e:91:21:ea:c3:
         30:a5:b5:df:ec:7a:b7:08:94:1a:70:cc:f9:5f:fc:51:66:e0:
         e4:b2:e3:8e:e5:f7:2b:50:c3:db:9c:6e:4b:43:8a:a4:0a:1b:
         ac:bc:47:88:71:5c:fc:71:45:0d:77:e6:41:c0:95:fb:d8:6b:
         3e:7a:64:dd:d1:84:e2:d3:e7:f6:bc:62:12:7b:c9:04:3c:8f:
         44:5a:8e:81:d9:15:ee:ed:eb:0d:f8:69:97:63:7d:6b:89:f0:
         30:75:9f:95:40:67:88:28:d2:fa:8e:fc:49:d9:f2:0c:0b:bc:
         e6:4a:7c:0b:72:c5:31:5f:1e:1c:2b:35:ec:f3:f7:70:8b:64:
         b1:60:f5:66:bc:11:2d:2c:c7:28:22:31:0b:57:41:f8:93:e5:
         da:c7:5f:98:2f:16:9b:09:1a:90:4f:a2:d5:0b:7f:55:53:92:
         17:f0:90:8e:93:6e:fd:da:85:a4:2e:f7:6a:02:76:22:76:68:
         91:99:19:9b:14:e8:fc:d2:74:17:51:61:22:26:85:9d:87:e2:
         60:8b:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org