Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139392e302f32342d3234203d3e20323637333935.roa
File:                     34352e3233332e3139392e302f32342d3234203d3e20323637333935.roa (raw, json)
Hash identifier:          d40Ge9Son9tED5jvL2z7Dfbcn4c04dhAYHJT/5wwKS8=
Subject key identifier:   34:3F:04:16:70:0A:F5:82:57:71:3D:AC:AA:24:81:97:F7:ED:29:3B
Certificate issuer:       /CN=FCC7A10CD64B84116220258C164688796EE17437
Certificate serial:       64FCFA8458AFB61AEEC0A59D33000F12A663DC3A
Authority key identifier: FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139392e302f32342d3234203d3e20323637333935.roa
Signing time:             Thu 15 Feb 2024 13:48:00 +0000
ROA not before:           Thu 15 Feb 2024 13:43:00 +0000
ROA not after:            Thu 13 Feb 2025 13:48:00 +0000
asID:                     267395
IP address blocks:        45.233.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fc:fa:84:58:af:b6:1a:ee:c0:a5:9d:33:00:0f:12:a6:63:dc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC7A10CD64B84116220258C164688796EE17437
        Validity
            Not Before: Feb 15 13:43:00 2024 GMT
            Not After : Feb 13 13:48:00 2025 GMT
        Subject: CN=343F0416700AF58257713DACAA248197F7ED293B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:aa:3b:b8:c6:aa:29:ad:e5:4e:eb:6c:07:
                    8b:67:31:88:0f:b3:42:f4:73:ad:48:3e:3b:27:ee:
                    a2:87:5d:a6:55:7c:f4:84:51:47:30:7f:74:fe:b0:
                    22:1b:bc:cd:25:ae:6a:72:eb:ee:00:1d:cc:1e:d7:
                    01:bf:a2:63:c2:53:62:20:eb:a4:08:99:2b:50:c5:
                    95:e9:49:59:1b:62:9c:71:f4:3e:7a:5f:56:c7:10:
                    9f:1b:45:4d:a8:71:85:a7:78:71:72:40:24:1c:1a:
                    4e:0c:31:8f:5e:b5:db:7c:41:c1:64:8b:8d:da:bb:
                    0c:fe:0d:9f:68:46:3b:4d:a6:1a:22:a9:5c:dd:da:
                    57:fd:74:49:c4:28:8e:34:3a:6d:3c:74:bf:cb:69:
                    34:d2:88:c2:cd:1c:21:b6:f5:d3:7c:ca:26:eb:6e:
                    36:2c:d5:ac:9b:d9:04:b7:63:3c:cb:69:79:9a:5c:
                    97:e0:50:32:c9:4e:19:f0:01:e6:6f:e5:6e:ee:59:
                    58:71:89:45:ea:3e:3a:ca:de:79:c1:44:7d:69:4f:
                    05:d3:f3:39:a2:31:0a:41:15:0c:58:68:c8:41:76:
                    1d:74:3e:80:9d:cc:78:4c:bb:69:88:9a:0e:25:cd:
                    1b:72:bf:b4:4e:e7:76:83:c3:ed:4d:9d:f3:fb:a4:
                    4f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3F:04:16:70:0A:F5:82:57:71:3D:AC:AA:24:81:97:F7:ED:29:3B
            X509v3 Authority Key Identifier:
                keyid:FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/34352e3233332e3139392e302f32342d3234203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:80:8b:8b:d8:ec:b3:67:5b:b5:b6:1e:dc:b9:c9:6f:97:a3:
         a2:eb:c9:04:b0:cc:67:69:08:b9:27:c5:81:a2:57:39:0c:15:
         78:bd:06:59:b2:8d:61:3e:40:a9:4b:b5:cb:3c:5b:23:e5:15:
         6d:b5:87:e3:18:4b:5a:08:46:20:70:b7:65:fc:a0:8d:4f:83:
         da:bf:bf:a0:2c:6e:ff:28:86:1b:a1:b0:46:0e:c9:db:7d:85:
         95:51:98:4e:2a:24:c1:f8:4c:92:3f:68:d3:2c:87:37:80:42:
         6a:68:b4:a7:8d:25:9d:da:e9:b7:5a:98:b6:ee:de:79:75:fd:
         bd:5c:0e:3f:c3:5e:43:d8:1b:73:11:69:50:c7:ac:21:a8:2a:
         7a:3a:c6:e9:70:fd:26:de:89:80:29:43:36:35:92:25:f9:ac:
         16:46:0c:55:64:50:1d:32:2c:82:62:5c:24:b0:a6:9d:c9:8f:
         ba:34:e9:05:51:de:2e:10:71:cb:4e:6b:06:43:10:80:a8:45:
         3d:a2:69:97:d3:3a:cc:35:e3:de:f8:5a:df:06:02:92:b7:40:
         09:41:9b:89:3f:4e:47:a0:05:0b:6a:c0:3d:50:82:ae:f2:62:
         5c:40:67:d2:f1:0a:bd:fa:a6:27:f5:dd:67:55:d6:46:54:b3:
         4c:38:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org