Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32342d3234203d3e20323636353833.roa
File:                     34352e3232382e31322e302f32342d3234203d3e20323636353833.roa (raw, json)
Hash identifier:          O5UDGo3VA320RAxLPmlEelaYCZ/koxgLkmGUcpJ0bG0=
Subject key identifier:   05:13:D9:92:F9:B4:6B:47:BA:58:BD:85:B1:05:9D:A0:A7:62:C8:40
Certificate issuer:       /CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
Certificate serial:       76DAF953F473173C86B4459661277856A5A05CCE
Authority key identifier: 52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32342d3234203d3e20323636353833.roa
Signing time:             Sat 03 Feb 2024 21:18:12 +0000
ROA not before:           Sat 03 Feb 2024 21:13:12 +0000
ROA not after:            Sat 01 Feb 2025 21:18:12 +0000
asID:                     266583
IP address blocks:        45.228.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:da:f9:53:f4:73:17:3c:86:b4:45:96:61:27:78:56:a5:a0:5c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Validity
            Not Before: Feb  3 21:13:12 2024 GMT
            Not After : Feb  1 21:18:12 2025 GMT
        Subject: CN=0513D992F9B46B47BA58BD85B1059DA0A762C840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:1f:0a:69:dc:d0:46:56:09:79:f8:50:a7:
                    49:9d:18:1b:2e:49:4a:30:f1:69:b0:da:07:2a:3e:
                    da:2c:1b:a2:5c:11:f6:02:ca:79:27:63:26:ad:38:
                    95:b4:60:25:8a:ec:e1:7a:e7:77:75:d3:be:c3:a7:
                    cb:63:60:8c:c4:92:8c:24:24:6f:57:f6:da:65:23:
                    7e:26:fc:bd:a0:66:9b:32:42:0a:51:4e:24:5a:f3:
                    82:d2:a2:90:15:dc:40:ea:aa:cf:0f:41:ff:0c:59:
                    3b:ac:fc:89:65:b5:df:be:77:64:bf:e9:d1:79:41:
                    d6:ea:fd:82:4e:7e:f1:68:d6:68:32:a8:a6:ec:ac:
                    d1:ed:7c:09:58:a9:95:8f:4a:91:21:c0:2a:47:b3:
                    3a:36:15:dc:3c:41:ec:6f:37:52:62:89:c3:66:13:
                    c5:30:cc:b2:73:aa:64:27:21:76:44:9a:11:84:8e:
                    0b:5f:37:e7:5d:28:5d:c8:2a:b6:53:66:86:f5:4f:
                    54:bf:e9:d3:10:c2:88:66:12:6b:ee:2e:90:40:88:
                    da:65:59:65:e3:3d:fa:a3:5b:76:df:8b:be:1c:5b:
                    32:24:8d:be:32:35:44:24:f5:19:72:88:f8:eb:b4:
                    38:60:57:cc:9a:08:3f:b8:75:ac:2a:45:31:fc:f5:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:13:D9:92:F9:B4:6B:47:BA:58:BD:85:B1:05:9D:A0:A7:62:C8:40
            X509v3 Authority Key Identifier:
                keyid:52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31322e302f32342d3234203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:13:4f:0a:3b:8b:0d:45:ba:e0:2f:6c:00:36:3b:18:8a:cc:
         c1:8a:35:a1:66:60:2b:3c:b6:76:28:53:f5:e8:31:bf:67:b5:
         6e:eb:99:ac:8f:bb:20:a6:f5:f0:87:05:88:95:11:70:d9:d8:
         65:1c:38:f1:79:af:5b:f7:f1:a5:33:41:32:d5:9a:38:6a:57:
         24:61:61:51:c4:99:61:97:45:84:c5:b8:af:ef:db:bc:2d:63:
         02:3a:36:5d:03:71:19:03:87:d3:1f:ca:c5:b5:75:ab:c4:c9:
         ab:41:58:c6:75:c1:72:22:7d:34:03:da:1e:03:31:5f:df:93:
         c1:40:ef:f8:a0:18:c3:24:ff:3a:c1:4d:c9:73:5f:11:3b:e9:
         76:24:9f:b4:ee:4d:df:16:8d:1b:e6:7a:04:2e:a1:55:db:35:
         cb:11:05:84:39:95:15:52:6d:d8:05:3c:c7:76:f7:a0:d7:b4:
         ba:d3:dd:67:a8:54:c3:16:fa:60:1b:52:d8:7b:36:08:6f:cc:
         d1:11:21:4e:8e:af:9a:b7:eb:d2:1e:91:81:9e:db:e1:f7:d3:
         2d:b7:30:40:aa:e5:70:d3:57:bf:a2:ea:77:18:b9:32:f4:17:
         ff:ca:bf:13:51:52:6e:29:f6:03:86:29:3a:89:87:dd:23:4f:
         51:51:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org