Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132332e302f32342d3234203d3e20323637303132.roa
File:                     34352e3232372e3132332e302f32342d3234203d3e20323637303132.roa (raw, json)
Hash identifier:          UwcmeD9ysgubDBn7uTrDk6fWEx4PDPRXGtSABLyIxLk=
Subject key identifier:   0E:E0:4B:BA:81:EC:88:88:C0:FD:67:9B:4A:E9:1D:AE:8A:87:6B:B8
Certificate issuer:       /CN=524903D80649F057B87931C5F6D861489C4593B7
Certificate serial:       5E79D8E302AFFA7394193D0D755E1FBD3D3E059B
Authority key identifier: 52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132332e302f32342d3234203d3e20323637303132.roa
Signing time:             Mon 24 Jan 2022 16:10:34 +0000
ROA not before:           Mon 24 Jan 2022 16:05:34 +0000
ROA not after:            Mon 23 Jan 2023 16:10:34 +0000
asID:                     267012
IP address blocks:        45.227.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:79:d8:e3:02:af:fa:73:94:19:3d:0d:75:5e:1f:bd:3d:3e:05:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524903D80649F057B87931C5F6D861489C4593B7
        Validity
            Not Before: Jan 24 16:05:34 2022 GMT
            Not After : Jan 23 16:10:34 2023 GMT
        Subject: CN=0EE04BBA81EC8888C0FD679B4AE91DAE8A876BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:47:06:f3:04:de:2e:44:3a:db:4e:c5:9d:
                    6e:fa:69:ce:42:53:99:e1:4c:8a:a7:1c:77:24:a2:
                    ee:83:ef:c4:03:a8:74:cb:d7:27:9b:cc:02:8f:65:
                    ee:fe:69:60:e8:14:0c:64:a2:3e:32:b2:54:39:4e:
                    99:54:bb:7f:ce:06:6c:40:0d:c1:63:0d:7a:07:be:
                    98:ea:af:06:98:9a:0a:de:9b:8c:17:d1:6a:85:69:
                    1a:15:ba:f3:dd:ce:05:82:3b:29:10:8b:45:68:d0:
                    5d:9e:41:72:7b:d6:ec:c1:8d:d9:12:61:e9:48:a9:
                    0f:72:7b:a4:f6:58:18:55:14:f9:0b:01:33:39:d3:
                    ad:e8:e8:32:53:cd:7b:94:a8:10:1b:30:a8:36:7d:
                    6c:c7:18:6d:9c:76:7b:20:57:53:a5:2b:00:9d:a5:
                    f5:8b:c1:6f:ae:01:ee:39:58:7d:b0:8c:8a:9e:44:
                    1b:ef:15:19:50:99:5c:53:f1:cc:63:e4:ac:dd:9d:
                    81:c1:87:8f:f9:f5:18:1e:e7:88:5d:91:ec:bc:66:
                    1c:a2:a0:d3:47:90:86:90:7e:69:f8:c7:42:4f:f8:
                    92:5c:ea:13:ba:12:52:b3:0a:68:29:9e:e8:1f:d1:
                    78:3f:8a:2e:5b:78:40:17:6b:07:4c:73:ac:82:09:
                    f5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E0:4B:BA:81:EC:88:88:C0:FD:67:9B:4A:E9:1D:AE:8A:87:6B:B8
            X509v3 Authority Key Identifier:
                keyid:52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/524903D80649F057B87931C5F6D861489C4593B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132332e302f32342d3234203d3e20323637303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:33:a5:ec:9f:d9:75:31:e7:80:7a:ed:33:8b:98:1b:28:
         a7:30:95:98:72:5c:75:39:36:60:08:de:42:e0:14:f3:a3:d3:
         85:99:74:18:60:08:dd:09:b2:98:7b:b4:40:0c:03:d2:09:0b:
         c9:38:bf:87:f7:fa:14:4b:7a:5e:37:1c:6e:73:56:ad:79:d1:
         57:91:74:e4:a9:dd:76:1a:94:2a:50:cc:2b:5f:37:b7:fa:de:
         7b:bf:23:16:ee:22:55:2b:80:95:70:c3:4e:77:7a:a6:44:e3:
         0c:b6:0b:13:07:97:27:b2:fc:8a:d8:3a:e5:94:3a:75:ab:31:
         80:71:1f:d2:79:db:8e:47:a3:de:97:b6:c5:50:22:fa:00:a3:
         fc:63:ee:8d:b2:50:34:6a:2f:38:9e:88:b0:6c:f0:99:78:61:
         8e:e4:29:3b:80:17:1b:02:92:42:dc:6a:02:e3:45:62:4a:74:
         52:bc:e6:39:15:96:c8:05:60:6d:e7:3c:f2:c7:e2:6d:cf:aa:
         68:50:80:80:a2:ee:47:7e:b5:75:5b:7d:ab:e5:24:8f:c3:11:
         41:b4:48:2a:68:3d:04:75:2b:b9:9b:5b:07:c5:14:05:09:97:
         23:85:3e:34:8a:52:68:fd:29:8a:bd:2d:eb:ee:1d:c4:12:32:
         30:b1:ba:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org