Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/34352e3233302e32342e302f32342d3234203d3e20323632383933.roa
File:                     34352e3233302e32342e302f32342d3234203d3e20323632383933.roa (raw, json)
Hash identifier:          3nOqs4xVi7rJx+snLhAH4SF9hrVjrYPWYIkFNePLb2Q=
Subject key identifier:   5F:19:26:ED:6A:9C:62:76:D8:DC:33:68:40:43:45:DB:0F:02:A4:D1
Certificate issuer:       /CN=4502CD1B49644F16402D764130FC71B676EC91F0
Certificate serial:       2D7630890C30B7511BB9576401A6D80A8FDB3198
Authority key identifier: 45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/34352e3233302e32342e302f32342d3234203d3e20323632383933.roa
Signing time:             Mon 14 Aug 2023 20:05:32 +0000
ROA not before:           Mon 14 Aug 2023 20:00:32 +0000
ROA not after:            Mon 12 Aug 2024 20:05:32 +0000
asID:                     262893
IP address blocks:        45.230.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:76:30:89:0c:30:b7:51:1b:b9:57:64:01:a6:d8:0a:8f:db:31:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502CD1B49644F16402D764130FC71B676EC91F0
        Validity
            Not Before: Aug 14 20:00:32 2023 GMT
            Not After : Aug 12 20:05:32 2024 GMT
        Subject: CN=5F1926ED6A9C6276D8DC3368404345DB0F02A4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:bc:09:46:3b:4a:c2:0e:59:d2:be:84:ec:
                    28:d2:ae:93:02:fc:f8:05:f9:57:88:23:7a:37:ef:
                    be:d1:67:73:e2:d2:fd:38:f0:9e:cb:ca:64:71:ad:
                    46:a6:93:37:a6:a2:9a:f3:f0:d5:3d:88:cb:19:4b:
                    86:ba:4a:14:66:da:ef:a7:26:a7:7b:d0:55:b6:fb:
                    fd:7f:8b:d8:17:b2:a6:9c:cc:6b:61:bf:26:12:ee:
                    5c:58:9f:2c:ae:49:6d:22:83:f2:fe:f4:d3:23:c9:
                    d9:e7:28:36:7b:05:84:ea:42:60:36:2d:9c:98:f6:
                    f8:27:eb:eb:2c:85:8d:fc:6a:4f:65:62:45:97:bc:
                    4d:c1:51:0c:35:49:12:5a:0e:1c:2c:d5:6c:a0:a8:
                    1c:dc:ad:2f:b3:7e:5f:ff:2e:39:a7:03:d0:56:85:
                    30:0f:93:05:4b:a3:b6:eb:26:fa:a3:3e:f7:a7:c8:
                    31:7e:c9:59:86:b0:31:10:26:13:18:d0:d0:3d:34:
                    f7:2b:2b:f7:95:c3:f8:16:14:b4:20:a0:9a:b9:b0:
                    8e:18:4d:4d:74:8d:ec:a0:e6:f5:78:2d:f1:4f:ce:
                    2f:a0:26:3f:cf:be:90:b2:3e:eb:22:63:76:58:42:
                    8f:05:41:39:92:2b:de:e1:55:87:b6:3c:86:99:84:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:26:ED:6A:9C:62:76:D8:DC:33:68:40:43:45:DB:0F:02:A4:D1
            X509v3 Authority Key Identifier:
                keyid:45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/34352e3233302e32342e302f32342d3234203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f2:37:a8:6b:a7:d0:f5:ac:e5:d7:be:81:4c:7b:b2:f9:b1:
         50:1c:b0:fe:67:a0:15:1d:9a:0b:c5:10:c7:02:85:11:bc:ca:
         29:13:22:58:df:31:9b:c0:69:92:f4:69:12:c7:10:59:2b:e6:
         ce:1b:da:fe:12:b5:ef:4b:1d:22:d5:7e:70:a5:cf:c8:0a:46:
         78:a1:0d:27:3b:c1:30:ce:a9:c5:74:96:e6:58:d7:5a:01:3b:
         4d:8f:3e:33:75:ce:a7:14:2b:d7:01:bb:5e:ca:69:00:16:fc:
         43:23:e3:3c:ba:8a:26:50:e0:fe:e6:a7:4e:9c:06:24:3d:ba:
         19:bc:10:4b:fb:07:7f:c6:dd:fd:a9:42:f0:a1:bb:66:0c:b4:
         69:0c:0b:cf:06:1f:de:58:28:12:f8:8f:90:af:0b:22:d3:db:
         22:42:c9:7a:af:f3:d6:e9:35:62:f0:b7:57:94:fe:c9:6a:d6:
         c5:f8:a7:8a:34:95:43:df:77:a3:e6:0c:7c:67:1b:75:ac:aa:
         17:80:10:d3:1e:87:86:1c:5c:f3:ec:15:9e:6a:fd:48:a8:13:
         27:20:a7:09:c3:79:a9:12:fd:6c:4b:57:f9:61:b8:52:20:d1:
         2c:79:fa:07:38:6b:a4:53:34:b6:e0:4e:45:28:47:3d:20:05:
         58:83:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org