Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa
File:                     34352e3233332e34342e302f32322d3332203d3e20323637323933.roa (raw, json)
Hash identifier:          GqL/bLg3WX1D1CkwRTH2GksmIoD+BU7b3qjt2YIZpZU=
Subject key identifier:   32:BA:A6:27:3C:75:1F:4B:78:8D:3F:31:3A:D5:BF:C2:AE:9E:BA:08
Certificate issuer:       /CN=4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9
Certificate serial:       6CC103271DC1AEC9595E3C67BE81CE1893837DC5
Authority key identifier: 4D:2B:9B:62:6E:48:13:E1:FF:30:8E:EC:A3:0C:10:E7:D9:2C:5E:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa
Signing time:             Fri 09 Jun 2023 20:16:33 +0000
ROA not before:           Fri 09 Jun 2023 20:11:33 +0000
ROA not after:            Fri 07 Jun 2024 20:16:33 +0000
asID:                     267293
IP address blocks:        45.233.44.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c1:03:27:1d:c1:ae:c9:59:5e:3c:67:be:81:ce:18:93:83:7d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9
        Validity
            Not Before: Jun  9 20:11:33 2023 GMT
            Not After : Jun  7 20:16:33 2024 GMT
        Subject: CN=32BAA6273C751F4B788D3F313AD5BFC2AE9EBA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:57:85:19:d9:93:7e:47:c9:89:d4:99:53:3c:
                    35:49:0e:6f:31:3e:7f:15:16:05:a9:df:b7:7e:1e:
                    78:83:6c:f9:c0:2e:b8:14:ea:36:63:b6:5a:92:cb:
                    c0:c3:a1:9a:a6:a4:92:15:fc:bf:b8:23:a7:b7:39:
                    65:2e:8a:f4:8e:ba:12:d8:b1:76:40:f1:9b:20:d5:
                    98:62:df:26:4f:19:4e:da:50:ec:bd:41:dd:79:cd:
                    4e:5b:92:e9:72:47:36:91:6a:5b:ad:52:bb:98:3f:
                    bc:da:7c:a7:d5:08:ad:e3:5d:78:78:3d:44:f5:f4:
                    d8:ac:af:6e:56:45:ea:eb:4a:d1:40:84:62:14:14:
                    7d:85:ea:74:ed:f8:9f:13:63:27:15:46:cf:40:f4:
                    4e:56:81:11:8e:1c:2e:0e:61:9d:20:d5:63:38:cb:
                    43:09:33:13:93:4b:68:d9:2d:63:ba:af:4f:1b:47:
                    f5:d1:bc:b6:1b:4c:7b:85:4d:87:3c:5a:b1:c1:3c:
                    5d:ee:26:d4:c7:b0:1d:d1:46:6a:13:46:62:ca:11:
                    ae:b2:b0:02:b2:dc:43:4d:b3:f1:a0:fe:21:82:00:
                    b7:fb:78:c7:fb:45:a6:38:19:df:63:6d:5b:8b:55:
                    28:74:3e:7e:3b:c7:76:0c:59:f7:a4:21:45:37:3c:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BA:A6:27:3C:75:1F:4B:78:8D:3F:31:3A:D5:BF:C2:AE:9E:BA:08
            X509v3 Authority Key Identifier:
                keyid:4D:2B:9B:62:6E:48:13:E1:FF:30:8E:EC:A3:0C:10:E7:D9:2C:5E:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D2B9B626E4813E1FF308EECA30C10E7D92C5EA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/0/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:d6:ba:f8:6b:4c:8a:ff:4d:a7:d6:2f:ac:ce:98:b2:25:ea:
         d2:69:c3:1f:39:5f:89:ce:7b:7a:f6:7e:6b:66:cc:fd:44:5c:
         67:46:12:29:6f:b4:c6:d0:59:4b:c7:f8:a8:45:8f:d4:bf:2b:
         3e:bf:5b:91:88:7b:c1:cc:35:80:20:65:85:c0:54:bb:8b:c2:
         55:0f:43:13:dd:8a:2d:b5:3d:b5:39:64:ad:43:de:b8:b6:4e:
         f6:96:c7:ec:48:68:fe:37:2c:11:b4:b3:b7:8f:ba:e9:5d:aa:
         99:f6:34:d3:8e:1f:d7:e3:f0:6a:e3:db:f0:39:2d:dc:f2:c0:
         1b:ce:f6:3f:3f:f3:56:f8:6a:a3:4d:20:4b:61:a2:5c:2b:d0:
         f2:95:56:5a:9a:7e:60:65:34:31:45:3f:1d:ab:99:5e:f1:3d:
         71:16:9d:69:d4:5e:38:41:ef:4d:5f:08:a0:2d:44:78:4e:90:
         92:d4:52:48:94:36:78:cf:f8:7c:bd:68:41:39:f6:0d:e4:8a:
         e7:4e:39:c2:59:19:6c:2e:04:25:d3:80:e4:e1:ad:4d:6c:f9:
         4c:27:24:a3:07:93:b0:3e:b3:d6:4b:f0:b5:6e:d9:42:8e:0f:
         f2:77:4e:f5:60:48:67:c2:1f:28:7b:4f:4f:52:c5:9f:db:c3:
         97:6b:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org