Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          9Ft/E6c9pCUsV1n2m3Gu5gbcI8t7oTeOLW8GhlI+v2Q=
Subject key identifier:   A2:0E:05:21:F0:9F:77:96:6B:C2:90:92:EE:8A:E2:2D:11:7E:7D:80
Certificate issuer:       /CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
Certificate serial:       3178CC16885D046BE9D206D3E15B64CECCE5DD1A
Authority key identifier: 53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa
Signing time:             Fri 02 Feb 2024 14:20:05 +0000
ROA not before:           Fri 02 Feb 2024 14:15:05 +0000
ROA not after:            Fri 31 Jan 2025 14:20:05 +0000
asID:                     267229
IP address blocks:        45.231.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:78:cc:16:88:5d:04:6b:e9:d2:06:d3:e1:5b:64:ce:cc:e5:dd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
        Validity
            Not Before: Feb  2 14:15:05 2024 GMT
            Not After : Jan 31 14:20:05 2025 GMT
        Subject: CN=A20E0521F09F77966BC29092EE8AE22D117E7D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:bc:76:8c:93:f8:8a:e8:32:ee:49:f4:2b:
                    3c:18:91:3e:cd:6d:9b:22:0b:36:04:73:ea:2d:09:
                    fc:9f:26:a7:fe:91:bf:11:a7:1b:b4:9c:a6:34:4f:
                    b0:a1:94:de:d3:0d:8a:74:d4:4a:d2:b9:e7:5a:4f:
                    82:92:32:57:e7:8d:00:b1:c0:bd:d5:15:85:2e:96:
                    d7:ae:38:81:c5:26:27:a0:fd:81:f4:db:8b:19:a9:
                    52:00:43:d3:40:38:4f:86:80:3d:83:24:a0:c3:ef:
                    18:d6:a8:b5:14:17:3c:fc:31:c5:17:22:2d:da:7a:
                    1b:56:3f:98:ce:0d:61:e8:45:dc:c0:50:69:93:2b:
                    78:79:58:e8:6d:8b:2f:11:4c:4c:e6:0d:c4:4d:b5:
                    b1:19:29:15:66:94:ac:11:8f:5d:30:e0:fb:76:ad:
                    35:ca:74:2b:9b:af:f8:f7:ca:f5:5b:2f:ee:63:96:
                    4c:64:01:77:fe:58:28:90:21:95:04:9a:38:2c:17:
                    26:96:ce:1c:83:c5:9b:33:68:34:4c:45:af:cc:19:
                    3a:88:e7:8a:6a:99:cb:b4:3f:22:1b:6d:6d:53:b3:
                    a6:92:f6:45:fa:47:7d:47:8a:f4:78:fd:45:3d:c9:
                    ec:23:5c:e3:81:08:29:84:ee:04:af:c0:01:1a:57:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0E:05:21:F0:9F:77:96:6B:C2:90:92:EE:8A:E2:2D:11:7E:7D:80
            X509v3 Authority Key Identifier:
                keyid:53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:f6:a2:e9:8e:50:7e:0a:a6:75:ef:53:73:c0:76:71:4b:
         18:d9:77:16:90:f4:c6:a9:f7:d9:88:05:7c:dc:13:7b:4b:e2:
         61:32:ab:fb:8e:a5:dd:1c:f4:4e:26:fa:9f:15:18:2e:99:e1:
         8a:32:c6:db:1e:52:9f:b0:c0:7d:31:8c:f1:98:ad:8a:cd:88:
         a7:51:05:c4:2b:7e:93:d8:a2:dd:d4:df:0c:59:63:d5:57:db:
         b3:a7:3c:c0:c3:c2:7b:f9:ba:52:7c:3e:ce:03:1f:2c:ac:22:
         76:57:3f:78:c5:eb:32:67:51:af:ca:a2:7e:95:9b:cd:cc:5a:
         9d:29:b9:9a:2d:ac:a4:1e:a8:b0:26:64:af:dc:1f:d5:12:0c:
         ea:05:e4:6e:b3:ff:38:3b:5e:e3:07:f3:2e:db:81:c1:7f:c5:
         86:06:ac:13:6e:94:95:06:13:4f:c6:23:4a:47:91:88:96:82:
         c7:47:e7:d1:84:f0:31:f2:43:04:d7:4e:2d:31:02:ed:6e:85:
         37:1e:ea:72:4b:ff:3b:01:a2:83:c7:4b:8b:3b:90:3c:55:ae:
         37:9a:cb:f7:09:f6:46:8d:2b:fd:7a:5e:13:ef:1f:8e:bf:d3:
         de:20:9f:0f:b0:c4:77:63:cf:b7:e5:9f:68:88:cb:22:50:09:
         55:f1:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org