Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139382e302f32332d3233203d3e20323637333935.roa
File:                     34352e3233332e3139382e302f32332d3233203d3e20323637333935.roa (raw, json)
Hash identifier:          kYk6gvu38q+/AaLIcq28TxQxGJPvZ3touzIpYCyp09s=
Subject key identifier:   CB:B4:46:D8:20:74:42:8E:62:48:6C:DD:37:E8:5C:54:A5:AD:3B:63
Certificate issuer:       /CN=FCC7A10CD64B84116220258C164688796EE17437
Certificate serial:       509C7CCB536646D1FACF7643DB68998F06EF0AD7
Authority key identifier: FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139382e302f32332d3233203d3e20323637333935.roa
Signing time:             Thu 15 Feb 2024 13:48:05 +0000
ROA not before:           Thu 15 Feb 2024 13:43:05 +0000
ROA not after:            Thu 13 Feb 2025 13:48:05 +0000
asID:                     267395
IP address blocks:        45.233.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9c:7c:cb:53:66:46:d1:fa:cf:76:43:db:68:99:8f:06:ef:0a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC7A10CD64B84116220258C164688796EE17437
        Validity
            Not Before: Feb 15 13:43:05 2024 GMT
            Not After : Feb 13 13:48:05 2025 GMT
        Subject: CN=CBB446D82074428E62486CDD37E85C54A5AD3B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:be:cd:bf:a6:3d:37:d2:f2:0f:28:48:cf:d5:
                    a7:5f:5e:f5:60:c1:9b:2c:38:c8:cf:88:f6:cd:b2:
                    12:81:5b:77:56:43:d4:79:e8:6f:62:94:47:ce:15:
                    76:33:44:6a:e2:91:c5:86:2c:6a:9a:8a:74:af:0c:
                    df:36:cd:17:fb:1c:3c:88:64:fe:1c:22:ac:48:7a:
                    66:48:f7:49:4b:1f:2c:98:f4:05:5d:72:58:ce:cc:
                    45:19:f6:cb:40:66:3e:31:10:4b:9b:8e:fa:c2:d2:
                    dd:0c:c8:da:bf:bd:46:be:bf:b1:ed:79:1c:63:33:
                    a7:4c:57:81:ec:6b:5e:65:43:94:2e:44:9a:e1:41:
                    50:a0:61:fd:da:5c:a0:60:53:2d:6d:e2:8d:ba:01:
                    1e:1e:8c:6b:d7:09:c2:5a:50:75:1e:67:7c:bb:5d:
                    f8:db:70:1d:af:65:9b:ae:99:54:7f:1c:5d:11:89:
                    6f:aa:39:bf:75:0f:6e:08:5a:60:56:ae:51:52:76:
                    4e:be:b7:ce:d2:82:e3:de:45:93:43:3d:38:6f:79:
                    18:02:2e:82:17:6a:ea:a3:2e:f9:72:f0:62:6c:dc:
                    bf:6d:7f:61:2c:61:5a:97:88:d3:4e:25:27:d3:63:
                    17:09:c3:ac:16:ae:f1:51:48:16:f7:16:95:54:5a:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B4:46:D8:20:74:42:8E:62:48:6C:DD:37:E8:5C:54:A5:AD:3B:63
            X509v3 Authority Key Identifier:
                keyid:FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139382e302f32332d3233203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:3e:7b:23:89:3a:36:9d:25:2b:d2:67:7e:60:c0:a1:2f:db:
         20:dc:e5:f5:32:53:75:a3:bb:4a:af:f3:f9:21:8d:49:fb:8c:
         10:40:d5:25:b4:b9:1f:ef:82:74:fe:64:8e:99:79:3f:bf:e6:
         8c:c6:75:3a:b2:3a:76:93:21:b2:2c:b6:37:c0:dc:4b:6b:4e:
         c5:77:76:fb:36:ed:a5:1d:d7:40:35:4d:18:24:02:d5:42:b3:
         3b:bf:0f:5b:dd:9c:a1:28:4a:e6:2c:4a:e3:b3:94:1b:23:63:
         27:0f:8d:6c:85:10:e6:d6:75:9a:99:cf:45:44:85:e7:28:2a:
         93:7d:8a:0d:a0:7c:99:0a:b8:0c:20:05:f3:51:a3:1b:fe:44:
         65:c6:9b:9b:40:8e:90:a0:5c:94:d4:00:8b:f6:97:bf:4a:51:
         86:6f:71:3b:85:5f:62:6c:09:f2:62:87:0c:0a:31:f3:f5:af:
         df:52:01:79:47:0d:86:e2:29:59:dd:8b:2a:93:f8:8f:bb:78:
         46:d3:02:bc:c7:b9:b9:0a:cd:4e:cc:79:6f:fb:94:90:81:8e:
         b6:f5:f5:16:a0:61:ec:b7:fd:98:3d:a6:25:f7:6e:fc:a5:9d:
         ec:65:c9:ed:af:9f:fd:b9:3e:60:e3:ef:d4:d2:fc:eb:35:0c:
         a6:60:f9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org