Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa
File:                     34352e3233302e32342e302f32322d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          amgXHNLLmjfcqOwR16oAgAVbVjCfGxVHqky42N/YSeQ=
Subject key identifier:   68:24:FF:F6:D9:82:42:E9:5D:6F:1E:3A:3D:34:B8:3D:7A:78:7A:9F
Certificate issuer:       /CN=4502CD1B49644F16402D764130FC71B676EC91F0
Certificate serial:       6E64D78CB2C0CFDB9431DFDAE753DF7E3345ADCD
Authority key identifier: 45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa
Signing time:             Wed 31 Jan 2024 12:36:50 +0000
ROA not before:           Wed 31 Jan 2024 12:31:50 +0000
ROA not after:            Wed 29 Jan 2025 12:36:50 +0000
asID:                     262893
IP address blocks:        45.230.24.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:64:d7:8c:b2:c0:cf:db:94:31:df:da:e7:53:df:7e:33:45:ad:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502CD1B49644F16402D764130FC71B676EC91F0
        Validity
            Not Before: Jan 31 12:31:50 2024 GMT
            Not After : Jan 29 12:36:50 2025 GMT
        Subject: CN=6824FFF6D98242E95D6F1E3A3D34B83D7A787A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:c9:90:1a:eb:fa:64:5e:aa:fe:ea:d2:24:
                    08:fa:06:18:f7:cb:61:ee:c9:a7:d6:08:5d:09:d7:
                    f2:67:4d:1e:c9:63:df:1a:d0:05:9d:1c:00:55:e5:
                    8a:f8:d3:2c:3c:ef:a9:44:65:82:8f:7d:14:1c:f0:
                    22:18:ae:1e:54:98:fb:f8:d9:b7:41:e2:6d:6b:ac:
                    85:30:01:a7:22:0a:34:8e:69:10:30:0c:31:a7:62:
                    58:75:91:b3:18:14:da:1e:f5:93:c8:f5:ca:49:ed:
                    82:1d:4d:42:c2:13:f8:5e:57:66:ee:1d:6a:49:46:
                    91:af:a4:af:1a:6e:9e:40:a0:75:9e:cd:83:58:9e:
                    eb:51:dd:bf:17:6b:c9:26:10:54:04:93:0a:f4:b5:
                    36:82:10:f1:ce:4d:30:bc:66:f0:e4:6c:65:55:7d:
                    8c:f7:23:29:11:93:c8:7b:ff:fd:f0:0b:63:d2:00:
                    39:81:47:9c:1e:5b:bc:04:18:cb:e4:1b:1a:27:43:
                    86:a4:6c:f0:f0:5d:fe:86:fc:32:5f:16:e7:c1:fa:
                    b6:80:1b:dd:30:fd:5d:f4:15:fb:5f:2e:a5:5f:72:
                    51:b4:1b:76:28:79:d6:b7:15:54:31:09:77:a5:b5:
                    24:02:bf:3a:49:9b:c0:29:21:0f:37:29:4d:8a:e3:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:24:FF:F6:D9:82:42:E9:5D:6F:1E:3A:3D:34:B8:3D:7A:78:7A:9F
            X509v3 Authority Key Identifier:
                keyid:45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:25:4b:e8:06:3d:0e:4f:22:ac:b8:42:0d:a4:d7:b7:d6:
         7a:a5:74:9a:77:92:9c:04:ef:00:7f:2c:e9:6a:86:59:95:9b:
         85:30:6d:7b:0e:20:c9:85:d5:61:82:ae:25:cb:ff:71:96:6f:
         8b:ae:43:d0:78:d0:9f:fc:98:af:63:90:e6:ff:3d:7f:75:83:
         34:9d:88:aa:bd:37:80:c3:6d:67:72:30:c3:a4:86:01:d9:17:
         82:a1:8c:eb:62:d5:05:1b:5c:4f:90:83:b5:2e:9c:8f:39:ad:
         a6:2b:f7:b0:57:05:8f:e6:01:e5:b0:a3:04:f6:d3:7c:6b:e1:
         59:d1:79:76:e1:67:11:b0:b6:c0:2e:00:69:10:c3:f4:41:34:
         e5:87:6a:a4:bf:4d:14:8b:fb:70:d2:eb:23:15:a0:40:94:75:
         16:7f:c7:80:c5:9f:9c:44:62:8d:7f:67:b7:6c:2f:eb:69:71:
         bc:0d:d6:29:4a:a1:60:9c:1a:66:44:ae:53:5a:d4:35:e1:2d:
         fc:99:80:06:68:78:1a:78:ce:94:49:c5:ef:5e:6c:13:55:17:
         a9:62:bd:45:21:5f:db:12:02:4a:f6:a8:8e:99:28:a3:f2:db:
         fd:78:72:ec:9a:c5:ae:de:e6:7a:8f:57:3e:1c:bc:f3:58:6f:
         94:a7:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org