Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31342e302f32342d3234203d3e20323636353833.roa
File:                     34352e3232382e31342e302f32342d3234203d3e20323636353833.roa (raw, json)
Hash identifier:          NIiYYAnNFA6ijzAKxmrst0F50TPUcy36eEfgG4rsrVw=
Subject key identifier:   9F:5B:25:41:29:6C:27:B2:FF:B4:0B:7E:8E:E4:E1:8B:1A:45:55:F5
Certificate issuer:       /CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
Certificate serial:       414C8357FAC2AF136D33214DA5105208A8DD45D9
Authority key identifier: 52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31342e302f32342d3234203d3e20323636353833.roa
Signing time:             Sat 03 Feb 2024 21:18:14 +0000
ROA not before:           Sat 03 Feb 2024 21:13:14 +0000
ROA not after:            Sat 01 Feb 2025 21:18:14 +0000
asID:                     266583
IP address blocks:        45.228.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4c:83:57:fa:c2:af:13:6d:33:21:4d:a5:10:52:08:a8:dd:45:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Validity
            Not Before: Feb  3 21:13:14 2024 GMT
            Not After : Feb  1 21:18:14 2025 GMT
        Subject: CN=9F5B2541296C27B2FFB40B7E8EE4E18B1A4555F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:ae:43:93:f6:bf:fc:39:a4:94:1b:61:e9:
                    71:d7:0f:88:26:5a:cd:71:0d:a5:b3:d0:a8:70:50:
                    30:e1:04:42:0a:94:93:9d:f4:f8:79:6b:93:55:0e:
                    e1:e9:00:95:09:b0:b0:b4:c6:d3:fa:dd:e7:da:83:
                    c1:ba:f3:27:c5:1f:24:b8:cb:eb:11:be:e9:86:d3:
                    b0:d1:63:ea:c6:c6:5f:27:1a:0b:7c:9f:c2:9f:59:
                    4f:70:ec:82:84:20:4b:7b:57:69:17:94:ee:9a:14:
                    5f:03:e8:15:11:a5:50:03:36:1f:51:a9:21:49:57:
                    bc:10:3a:80:3e:d0:19:ec:e5:09:33:71:78:cf:d9:
                    f5:c3:ae:fc:4f:ee:c1:ca:ba:ff:5e:9a:6c:a8:0f:
                    4b:d5:27:61:b5:ee:67:f3:ce:f7:f2:11:67:e4:87:
                    01:dc:63:62:5d:01:4b:65:c5:1c:12:d6:9d:de:fc:
                    16:3b:73:47:5b:65:a2:69:a9:f4:3f:ea:cf:c9:48:
                    ba:45:15:ba:5b:ad:0e:95:70:f9:d4:a9:6e:a7:df:
                    86:13:3c:69:ed:6f:f0:79:50:24:61:ba:fa:47:7e:
                    2b:1e:4e:06:69:e8:e4:71:1d:0f:0d:ba:5a:6f:4a:
                    c5:03:28:45:83:db:9b:d3:b9:1e:7e:49:1d:e9:d8:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:25:41:29:6C:27:B2:FF:B4:0B:7E:8E:E4:E1:8B:1A:45:55:F5
            X509v3 Authority Key Identifier:
                keyid:52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/34352e3232382e31342e302f32342d3234203d3e20323636353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:82:ad:95:fd:84:96:51:dc:a2:3e:c2:44:52:00:12:47:87:
         9b:1c:84:1b:ff:91:aa:c6:94:27:9d:98:89:d3:b7:2b:ae:6d:
         96:aa:55:b5:d6:40:96:5a:68:f1:71:10:8f:68:b8:58:e5:e4:
         10:28:7c:fd:94:05:9e:f5:97:6e:7a:f4:7a:fe:cb:51:f4:82:
         76:7d:df:10:61:5e:c0:de:f3:23:8e:54:1c:43:7f:e2:74:8c:
         f8:7a:29:3e:66:f8:c8:4e:5b:f4:cc:04:54:aa:ed:1f:cc:af:
         5a:fd:f4:9a:68:a0:59:89:15:d9:cc:4e:e0:0d:24:44:85:12:
         c9:2e:0f:ca:3f:b8:32:5b:83:a5:63:c4:3e:c5:a3:8a:4b:18:
         12:3a:19:8a:87:f8:3f:e7:2b:26:e4:7a:35:40:a8:02:65:1a:
         97:02:cb:37:cc:a2:e3:f6:7c:42:d2:e3:ad:20:f1:9d:41:da:
         28:62:a5:61:c2:c3:19:d8:64:bd:cf:00:1e:1d:96:20:0a:b3:
         e9:02:3b:13:cc:2d:60:9b:08:d9:70:33:d7:b9:80:42:13:8e:
         b4:3e:83:ce:64:e0:a2:13:f3:49:d9:3f:71:fc:28:c6:1e:cc:
         49:58:2e:04:e4:46:95:0c:c2:ae:ab:0b:b5:61:3e:17:3c:9d:
         d5:f0:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org