Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139362e302f32332d3233203d3e20323637333935.roa
File:                     34352e3233332e3139362e302f32332d3233203d3e20323637333935.roa (raw, json)
Hash identifier:          we0f41P+duQ+e53NFbjBGy5JR6TZf4Ru86j63Cncm9E=
Subject key identifier:   B4:6C:23:95:0E:D2:64:C7:BC:6B:4F:0F:40:E0:84:FC:A0:F0:3D:89
Certificate issuer:       /CN=FCC7A10CD64B84116220258C164688796EE17437
Certificate serial:       27E9F8BA7DB1553E0D72044414375E26AC52F9EA
Authority key identifier: FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139362e302f32332d3233203d3e20323637333935.roa
Signing time:             Thu 15 Feb 2024 13:47:58 +0000
ROA not before:           Thu 15 Feb 2024 13:42:58 +0000
ROA not after:            Thu 13 Feb 2025 13:47:58 +0000
asID:                     267395
IP address blocks:        45.233.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e9:f8:ba:7d:b1:55:3e:0d:72:04:44:14:37:5e:26:ac:52:f9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC7A10CD64B84116220258C164688796EE17437
        Validity
            Not Before: Feb 15 13:42:58 2024 GMT
            Not After : Feb 13 13:47:58 2025 GMT
        Subject: CN=B46C23950ED264C7BC6B4F0F40E084FCA0F03D89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:85:a6:39:ef:06:d5:75:e8:f5:7b:ef:a2:
                    bd:68:6d:8f:aa:b7:e0:58:88:41:d4:e4:88:de:13:
                    c9:30:57:0a:bf:25:6a:cd:46:d4:2a:9b:b9:9c:ba:
                    8e:e6:92:6d:7e:65:58:d2:71:49:4c:84:e1:d0:26:
                    ed:df:54:07:72:a7:24:97:1d:d4:22:eb:f2:e9:0b:
                    1a:c5:43:c6:eb:13:de:64:ab:a3:7a:ed:55:9a:7f:
                    af:f3:0b:e4:eb:0b:45:c6:1f:e0:72:6c:3b:19:67:
                    7e:d8:11:ca:dd:c2:e1:9d:57:0a:1d:79:3b:04:12:
                    79:1f:0d:37:c7:18:55:5a:6a:72:c8:9b:41:3a:9a:
                    31:f9:1f:1c:c3:a4:fd:ca:d6:99:26:22:d1:cb:20:
                    72:e5:2d:ff:46:5d:10:19:dc:e1:cb:22:3a:29:08:
                    ac:31:4e:b7:94:60:bb:ba:ca:9a:db:de:16:1c:ec:
                    0e:df:45:78:a3:eb:81:ea:0a:86:3e:e8:6c:25:91:
                    8e:b9:2d:23:f0:c2:09:38:de:b9:d3:f4:5a:c2:f4:
                    c5:d2:a9:32:3f:83:bf:f9:f1:b6:4b:c0:88:74:07:
                    d4:71:27:e9:5d:e4:bd:6a:97:f5:96:ff:52:0c:f6:
                    87:16:2f:bf:81:0f:24:7d:a4:61:88:64:2f:df:e5:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:23:95:0E:D2:64:C7:BC:6B:4F:0F:40:E0:84:FC:A0:F0:3D:89
            X509v3 Authority Key Identifier:
                keyid:FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139362e302f32332d3233203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:d6:d4:7e:7c:f0:5d:c3:ca:23:35:7f:4a:4e:fb:68:f4:
         f8:73:b5:0c:96:e7:77:f2:f8:c0:bc:22:1b:c6:d0:2d:8f:5e:
         43:e4:68:ca:25:98:1c:8b:f4:6f:37:ac:28:77:33:e1:98:8c:
         de:21:69:52:ab:b8:39:dc:f4:67:d2:56:96:11:4c:5c:b1:0d:
         7e:f8:fb:0c:7a:b2:e3:1f:8f:f2:30:9c:10:35:1f:e0:e4:c7:
         9a:c7:8e:9f:c3:73:27:40:f1:60:6a:e7:44:d7:a5:1a:c8:0c:
         4e:ed:e5:f6:b9:70:29:d6:df:19:33:9e:22:6b:5f:7d:25:a4:
         43:98:92:54:07:2d:1d:07:44:7a:1f:5e:11:00:11:e0:44:50:
         0a:77:f4:60:64:c9:42:0a:f1:66:88:c7:2f:70:a5:cf:28:da:
         38:44:1a:a4:fd:b2:b0:34:cf:a3:4d:bf:10:27:a5:bc:dd:95:
         9d:7d:f6:ba:5d:f1:0f:06:60:98:e0:a8:2b:08:cf:ab:cc:8b:
         5d:c8:75:39:d3:06:48:b7:7e:22:ce:c4:09:6b:8d:4d:31:61:
         a7:30:00:fa:2d:52:9c:60:80:db:09:9a:fa:31:ca:d3:e5:d4:
         ee:f3:27:95:13:50:ce:7e:67:c0:ed:95:74:4d:95:40:44:c5:
         04:54:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org