Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132302e302f32342d3234203d3e20323637303132.roa
File:                     34352e3232372e3132302e302f32342d3234203d3e20323637303132.roa (raw, json)
Hash identifier:          /LwqdWVXmSa6N8OkOu2/CeoamMJ6b/Zq0RHRc6sj7us=
Subject key identifier:   23:59:1C:D0:CF:1A:17:2B:AD:73:25:A5:61:B4:57:DA:DA:CA:01:07
Certificate issuer:       /CN=524903D80649F057B87931C5F6D861489C4593B7
Certificate serial:       0E188AAF67E568E907E0F23C1F433042F9801D94
Authority key identifier: 52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132302e302f32342d3234203d3e20323637303132.roa
Signing time:             Mon 24 Jan 2022 16:09:31 +0000
ROA not before:           Mon 24 Jan 2022 16:04:31 +0000
ROA not after:            Mon 23 Jan 2023 16:09:31 +0000
asID:                     267012
IP address blocks:        45.227.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:18:8a:af:67:e5:68:e9:07:e0:f2:3c:1f:43:30:42:f9:80:1d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524903D80649F057B87931C5F6D861489C4593B7
        Validity
            Not Before: Jan 24 16:04:31 2022 GMT
            Not After : Jan 23 16:09:31 2023 GMT
        Subject: CN=23591CD0CF1A172BAD7325A561B457DADACA0107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:9e:88:37:54:1b:45:cc:09:33:f2:b8:85:
                    28:ea:c3:c4:86:29:b9:03:a9:5e:1e:13:c8:82:33:
                    b3:7d:52:fd:3d:ac:47:c9:60:f1:03:2d:93:e6:03:
                    ea:eb:68:75:a1:bb:77:c8:a6:1f:8f:49:53:13:41:
                    2d:16:0b:9b:59:fc:5d:f1:c2:31:11:d0:26:58:89:
                    39:61:9d:c3:73:b3:3e:99:ac:1e:1f:1f:fb:23:1e:
                    64:f1:fb:a1:b1:30:d9:d4:2e:cf:61:48:37:36:63:
                    53:99:7a:af:d7:08:5f:f5:6f:95:fa:2f:86:b0:22:
                    fc:a3:39:b1:5f:28:09:2d:e4:00:a3:aa:00:1b:2a:
                    97:67:5f:63:a5:31:f9:f0:fa:64:b0:2a:5a:37:1f:
                    ce:6c:49:04:08:26:ab:c8:4a:c8:fe:f3:84:c1:0e:
                    df:ab:a5:9d:57:c9:27:0a:f0:19:b1:28:b3:54:44:
                    b1:84:fd:56:9c:91:46:0d:42:fd:fc:c0:33:5f:19:
                    02:69:b8:27:c3:f0:25:bb:d3:9b:6b:3c:e3:98:83:
                    57:ae:56:db:8f:15:d6:86:d3:7c:c2:2e:15:73:08:
                    20:2e:57:b8:2e:19:6e:5a:7a:71:3a:1b:ad:c9:25:
                    12:2e:79:c2:9c:44:30:19:ce:44:08:0f:43:a7:b1:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:59:1C:D0:CF:1A:17:2B:AD:73:25:A5:61:B4:57:DA:DA:CA:01:07
            X509v3 Authority Key Identifier:
                keyid:52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/524903D80649F057B87931C5F6D861489C4593B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132302e302f32342d3234203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ed:8c:0e:2a:0d:a9:49:a4:d2:b9:19:c2:2e:9b:9b:82:0a:
         dd:32:46:ba:32:7d:8f:4d:ab:6d:d2:ae:cf:33:9d:9d:7f:ce:
         8d:f9:f6:d9:3d:c7:c4:96:a3:7b:54:99:1a:5f:ee:f3:47:34:
         2e:24:e5:63:ba:43:30:7c:64:16:d5:24:a6:31:8b:1d:93:a8:
         1d:db:b9:88:0e:47:70:05:c4:70:16:a5:89:24:13:c9:78:c4:
         64:b2:1a:5b:ad:67:18:2d:aa:20:15:8c:a5:83:22:1e:75:c9:
         13:ee:85:28:25:16:0b:10:1c:cc:0f:eb:f9:c5:fb:f6:c5:b7:
         63:81:9d:94:4e:38:96:bc:a9:2d:9a:9e:fc:bd:f0:d9:a7:10:
         e5:92:a1:b9:4d:fc:6c:84:8b:bc:02:5c:f3:f6:11:bf:aa:97:
         94:1b:71:7d:6f:b5:39:6a:7f:2b:ce:c6:08:15:10:f7:e3:8d:
         19:62:7a:6b:72:9e:98:74:26:fe:6a:82:94:7b:65:15:9c:db:
         a7:97:d2:27:c8:dd:0f:20:a5:3e:5d:60:87:32:c9:e1:3c:71:
         f6:9e:69:72:af:fa:29:a1:f4:95:6e:ef:99:db:6e:2a:05:eb:
         06:da:9e:e5:c4:28:1f:a9:2c:dd:a4:78:43:66:23:98:ea:31:
         f6:88:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org