Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/34352e3233392e3234362e302f32332d3233203d3e20323638343832.roa
File:                     34352e3233392e3234362e302f32332d3233203d3e20323638343832.roa (raw, json)
Hash identifier:          XrCe+MVNNLdgMiP86HPItTPXUHAkApmkqlqjKK/rnTQ=
Subject key identifier:   5B:42:3E:EB:3B:F9:1D:7B:39:B7:BB:B4:26:7A:51:59:3B:7D:F1:DA
Certificate issuer:       /CN=94E4D0AA03B0607D73B2212CED372F813315BAAC
Certificate serial:       55C8962257DBD6FA47A58CC69127F6768E724B5C
Authority key identifier: 94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/34352e3233392e3234362e302f32332d3233203d3e20323638343832.roa
Signing time:             Tue 02 May 2023 13:41:46 +0000
ROA not before:           Tue 02 May 2023 13:36:46 +0000
ROA not after:            Tue 30 Apr 2024 13:41:46 +0000
asID:                     268482
IP address blocks:        45.239.246.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c8:96:22:57:db:d6:fa:47:a5:8c:c6:91:27:f6:76:8e:72:4b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E4D0AA03B0607D73B2212CED372F813315BAAC
        Validity
            Not Before: May  2 13:36:46 2023 GMT
            Not After : Apr 30 13:41:46 2024 GMT
        Subject: CN=5B423EEB3BF91D7B39B7BBB4267A51593B7DF1DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:70:fb:21:bb:7a:d3:83:c1:fb:33:be:13:98:
                    1b:d8:3c:01:93:6b:63:33:90:ab:14:4d:ff:da:be:
                    08:34:32:bf:ca:5f:87:69:09:3e:0b:4d:46:34:05:
                    f3:4a:87:6e:1d:22:bd:ce:dc:54:be:7a:37:5b:6b:
                    5d:8c:71:52:a9:c6:4e:d3:fd:10:af:b2:52:b8:5c:
                    a9:19:95:fc:cc:3f:01:72:76:17:62:ef:b1:b1:75:
                    98:a3:f7:f0:bc:4f:90:b9:09:92:e2:c2:80:0a:60:
                    1f:a7:c8:9c:4f:c0:73:e3:27:d6:da:fc:f3:c8:50:
                    c1:23:4b:0e:96:aa:13:bb:35:c4:cf:0d:41:dd:b9:
                    3c:66:cd:3a:78:a9:07:f6:9f:eb:ba:f6:8c:98:82:
                    d3:4c:94:41:95:46:2f:f5:36:b4:59:cb:e1:63:55:
                    6f:a9:97:3a:03:ef:0a:6d:f4:33:ec:46:a5:56:1e:
                    20:c1:d4:bb:f2:76:3f:34:f6:66:06:96:44:0c:28:
                    09:18:23:04:c7:99:d3:18:ab:ca:3e:39:36:9b:4a:
                    44:86:d1:05:1d:0e:49:8a:08:53:7b:93:dd:36:ef:
                    d2:d9:b5:b6:bb:65:fb:8e:d7:0d:c6:6d:ff:41:bd:
                    fe:01:cc:c2:22:17:37:87:ab:ee:91:a9:8f:74:6e:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:42:3E:EB:3B:F9:1D:7B:39:B7:BB:B4:26:7A:51:59:3B:7D:F1:DA
            X509v3 Authority Key Identifier:
                keyid:94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/34352e3233392e3234362e302f32332d3233203d3e20323638343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:b0:03:64:b2:f9:2f:54:d6:50:7e:56:dd:13:cd:46:09:fe:
         0f:3d:2a:ac:53:0f:3f:27:22:3a:40:17:0c:78:a2:a7:d8:f1:
         40:ce:1f:b6:4a:73:c0:06:db:b4:77:f6:30:dc:6c:39:54:bd:
         a4:4d:68:5b:59:35:35:79:50:a6:23:81:bd:ed:ab:3e:ac:5f:
         d3:13:d1:c5:e0:38:7c:7d:47:5f:89:b9:8a:ef:f5:f2:d8:2e:
         65:8f:f3:24:1f:9b:79:05:74:87:7a:d1:0d:e8:e5:cd:01:0d:
         45:5c:f8:1a:75:38:71:e9:75:07:33:d0:a8:db:68:e8:52:38:
         48:81:21:d0:d5:00:c0:e9:20:56:3c:22:5f:5d:68:58:c5:ef:
         4c:82:42:77:34:f6:ed:57:d4:78:02:17:77:8b:d9:aa:6c:6e:
         43:d6:82:8a:76:4e:26:ca:5a:35:fa:ce:1a:48:10:9f:ae:4d:
         55:05:72:b5:34:d9:b9:a2:e2:56:24:c6:9a:59:f1:a8:31:9e:
         3b:a1:22:cf:b8:ec:e6:48:7b:a2:95:7d:65:f7:da:96:37:22:
         1b:46:1d:82:e0:53:89:2d:81:cd:17:9c:d2:73:58:4a:17:19:
         3b:a4:ed:82:6c:65:db:0e:be:ca:c7:a4:76:ce:d1:03:a0:0e:
         04:04:74:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org