Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233332e38322e302f32342d3234203d3e20323638313932.roa
File:                     34352e3233332e38322e302f32342d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          uNj96AumnDa1xUCBMV8Zb1ufWrLxmdlj8nnAqZsNIMw=
Subject key identifier:   A8:5D:6A:73:8E:8E:7C:18:CB:C7:55:2C:CD:C9:08:3E:20:50:D7:3F
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       3F959D9835D8ACF9122C306A6401B1FD1BA1408F
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233332e38322e302f32342d3234203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:33 +0000
ROA not before:           Mon 14 Aug 2023 15:53:33 +0000
ROA not after:            Mon 12 Aug 2024 15:58:33 +0000
asID:                     268192
IP address blocks:        45.233.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:95:9d:98:35:d8:ac:f9:12:2c:30:6a:64:01:b1:fd:1b:a1:40:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:33 2023 GMT
            Not After : Aug 12 15:58:33 2024 GMT
        Subject: CN=A85D6A738E8E7C18CBC7552CCDC9083E2050D73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:d8:56:0c:67:5f:fe:d9:52:66:e4:4c:8f:
                    fd:6d:20:f7:7a:31:a7:6a:93:07:2c:63:c5:5e:27:
                    ae:8d:ec:9c:81:93:e7:22:5a:22:0a:5e:cb:0a:71:
                    03:3d:6a:d5:eb:02:b2:d9:53:cd:3a:bb:92:1b:7d:
                    58:38:80:55:80:0b:ae:1c:e5:d4:4e:43:fb:81:cb:
                    30:6f:3f:0c:ac:ed:db:4f:ee:af:13:a8:d1:20:05:
                    4b:c9:7a:96:24:71:77:8a:f0:09:1f:24:62:57:5f:
                    c7:57:92:99:38:92:74:1e:a2:30:3b:3c:5c:37:89:
                    82:25:58:61:80:5c:46:2d:08:9f:54:44:d6:e4:b0:
                    c4:4a:f2:9d:86:ef:56:fb:71:ee:f4:5d:de:89:3e:
                    3e:34:5f:16:69:b6:84:4c:86:d1:f9:7f:08:11:3d:
                    ef:ba:49:89:5e:e5:e9:26:40:6c:4f:bf:6b:02:60:
                    08:c2:23:7a:46:c4:af:2a:26:7a:df:aa:f6:dc:68:
                    64:36:cc:b5:36:92:17:38:fd:17:2b:5b:ef:1b:82:
                    59:08:6a:1e:9a:ee:89:3d:1c:a0:13:7d:06:a7:82:
                    a2:af:15:e4:2f:4f:bc:49:5e:3b:fc:ad:d7:2c:a4:
                    65:05:96:db:86:44:c7:1f:56:7b:1b:88:84:41:d5:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5D:6A:73:8E:8E:7C:18:CB:C7:55:2C:CD:C9:08:3E:20:50:D7:3F
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/34352e3233332e38322e302f32342d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:3d:d4:3c:f2:0a:15:f9:36:eb:6c:77:0f:40:a7:9c:b4:2a:
         c6:02:6e:84:d2:bd:64:fd:10:8f:e8:dd:dc:cf:0b:3c:66:e3:
         46:83:ef:f4:ec:43:79:fd:9b:34:91:05:63:fa:0d:96:ed:69:
         12:ac:21:6f:f8:ab:58:44:53:8d:3c:ec:9a:34:31:34:8a:7f:
         c2:68:4d:0f:02:b6:ab:d9:7c:de:1b:81:0b:5c:b8:57:af:cd:
         98:c4:bb:4a:3b:8d:fc:13:de:5d:8b:f0:1a:8c:bc:ab:5f:b1:
         e2:ea:a4:49:f6:81:84:c4:5a:d3:c1:64:78:59:ba:4e:3c:62:
         04:48:12:70:d6:1b:12:67:10:8b:06:46:ae:57:77:b8:97:cd:
         ed:63:eb:76:9b:8a:4e:64:8d:d5:8d:6f:56:7f:f0:fa:b2:be:
         98:b4:02:ec:52:4f:4f:30:08:da:39:34:d2:4e:ce:c1:a4:55:
         25:de:bc:48:ef:09:54:3f:b7:d9:69:ee:71:0f:55:d2:e9:81:
         2c:e7:b6:d7:54:f1:21:87:56:a1:5b:92:97:8f:38:22:c4:4c:
         c5:43:6f:79:4e:02:b3:0d:97:2e:4b:d2:b5:0e:a5:94:8e:3a:
         1d:ae:de:12:08:36:94:a0:0c:7a:f5:5a:25:0f:5c:72:e2:d6:
         11:e9:0f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org