Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32332d3233203d3e20323637333339.roa
File:                     34352e3233332e3230382e302f32332d3233203d3e20323637333339.roa (raw, json)
Hash identifier:          DzdWE01uNOq894ULrx6f7qi9u+eawTjl+PFXwOeyMQw=
Subject key identifier:   71:31:9A:73:B1:D9:30:64:C4:44:32:64:DD:F9:01:22:BC:F5:2E:3A
Certificate issuer:       /CN=A09087E55846274477AB0E4597FD754DB0509203
Certificate serial:       4685DFCD690B15F8613F821755A3C354CA56135D
Authority key identifier: A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32332d3233203d3e20323637333339.roa
Signing time:             Sun 09 Jul 2023 04:08:27 +0000
ROA not before:           Sun 09 Jul 2023 04:03:27 +0000
ROA not after:            Sun 07 Jul 2024 04:08:27 +0000
asID:                     267339
IP address blocks:        45.233.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:85:df:cd:69:0b:15:f8:61:3f:82:17:55:a3:c3:54:ca:56:13:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09087E55846274477AB0E4597FD754DB0509203
        Validity
            Not Before: Jul  9 04:03:27 2023 GMT
            Not After : Jul  7 04:08:27 2024 GMT
        Subject: CN=71319A73B1D93064C4443264DDF90122BCF52E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:1d:94:1c:d0:b1:cb:6d:87:88:98:78:55:
                    77:44:fd:d5:16:ec:54:e0:ee:cd:42:d9:a0:33:c4:
                    f7:8b:e9:08:39:5b:ba:ae:b7:fd:1f:a8:ca:d7:58:
                    23:a5:01:51:7c:3d:c2:7c:22:52:58:04:95:4b:45:
                    04:3c:a9:55:ce:12:75:10:09:90:2d:df:18:b0:05:
                    17:b8:8c:54:6e:65:a0:a1:10:5b:ed:5a:8b:86:25:
                    93:14:f5:11:99:e2:02:ce:2f:00:e0:34:2d:3f:d5:
                    7b:07:05:b3:f9:e1:e8:ac:52:9f:c7:f5:a7:a9:e4:
                    85:4e:bc:68:eb:fd:26:ba:d9:00:e0:08:f3:66:a8:
                    97:87:3a:07:53:63:b3:bd:89:1d:13:82:db:c0:c1:
                    6a:b3:ec:44:8d:19:0e:9a:8c:6d:cd:ee:a1:15:ec:
                    2e:cc:ab:7f:46:19:b3:59:bb:61:4f:41:29:2c:8f:
                    d3:0d:d7:ba:dd:92:13:34:86:74:8c:0e:e9:90:05:
                    73:f9:4b:25:26:80:b4:06:87:52:5e:eb:ca:ed:80:
                    0d:02:e0:3e:26:c2:40:e8:59:f9:b0:fe:e3:4d:61:
                    31:86:fe:4d:6e:52:34:f5:18:b9:4f:04:b9:a1:97:
                    98:8e:c9:ee:3d:7e:7c:4b:f9:c7:25:39:63:0b:77:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:9A:73:B1:D9:30:64:C4:44:32:64:DD:F9:01:22:BC:F5:2E:3A
            X509v3 Authority Key Identifier:
                keyid:A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/A09087E55846274477AB0E4597FD754DB0509203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32332d3233203d3e20323637333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:1c:ef:e2:0e:7e:72:a8:3a:b6:52:fe:36:d5:27:29:3f:
         1f:37:a5:87:82:6c:e6:f3:60:08:c4:b3:a7:cf:96:a2:2f:f4:
         41:a1:7b:ef:b7:28:d9:93:52:f8:68:b8:74:d3:ff:55:7f:97:
         d6:08:1a:66:f7:38:d3:3d:97:2c:df:aa:80:ec:dd:65:69:ec:
         7b:e9:0b:0c:bb:2d:af:6d:81:14:28:d6:92:ed:5d:bf:31:a0:
         6d:7e:23:94:3a:ed:3b:05:e8:aa:6f:c4:3e:e8:2d:f4:78:25:
         15:53:4e:67:33:ac:66:87:70:6f:34:f8:21:0c:94:da:ba:1a:
         f8:e5:b8:b5:ce:98:ea:04:ca:a3:f9:30:55:6d:24:82:6a:f2:
         98:a4:b9:f0:ec:9f:df:48:bf:42:86:3a:73:2f:66:39:17:8c:
         50:6f:fd:5d:20:87:cd:3c:04:09:b2:b4:12:bc:cb:d6:26:fb:
         f3:1d:6f:2a:48:d7:82:a9:4b:c2:fe:a6:65:97:a9:69:87:e5:
         9f:68:69:e5:62:19:55:4e:e4:e4:09:8d:cc:de:1a:24:21:7f:
         1c:01:71:cf:51:91:24:ba:72:6b:9b:4a:89:c4:5f:6b:34:7b:
         40:80:2a:64:70:f1:9a:e5:51:77:0b:1a:8f:8a:60:40:d1:fa:
         34:38:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org