Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133322e302f32322d3234203d3e20323731323733.roa
File:                     34352e3232392e3133322e302f32322d3234203d3e20323731323733.roa (raw, json)
Hash identifier:          /8thSi1mfBzKIrY77SIdMNzIOjEDYo63zwjD4gj1VNw=
Subject key identifier:   34:3D:CA:B9:62:05:93:7F:29:0C:99:6B:EF:FD:D4:75:55:89:74:83
Certificate issuer:       /CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
Certificate serial:       75E8EE0A606DC4852ED35F65FC8DABF91A030A13
Authority key identifier: C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133322e302f32322d3234203d3e20323731323733.roa
Signing time:             Sat 29 Jul 2023 17:45:10 +0000
ROA not before:           Sat 29 Jul 2023 17:40:10 +0000
ROA not after:            Sat 27 Jul 2024 17:45:10 +0000
asID:                     271273
IP address blocks:        45.229.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e8:ee:0a:60:6d:c4:85:2e:d3:5f:65:fc:8d:ab:f9:1a:03:0a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
        Validity
            Not Before: Jul 29 17:40:10 2023 GMT
            Not After : Jul 27 17:45:10 2024 GMT
        Subject: CN=343DCAB96205937F290C996BEFFDD47555897483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:56:2c:99:e1:1e:c5:7a:c0:f8:18:d5:71:
                    be:64:79:31:ad:25:b0:bb:af:5a:37:6d:db:53:fd:
                    8a:b7:9f:bd:4c:bd:a0:58:4e:00:93:42:4c:2e:31:
                    7e:2c:ed:0e:9d:9e:64:bd:db:4e:f5:7e:69:83:3d:
                    2c:84:fb:d0:13:02:d2:9a:8b:af:57:01:a5:56:eb:
                    12:05:52:c4:ab:8a:b7:f7:f4:41:19:e1:13:64:dc:
                    07:3c:7a:d7:b2:10:53:e0:0d:46:37:fb:c9:16:4e:
                    7c:2a:07:74:49:f7:48:2a:26:af:20:74:73:67:3c:
                    a7:3f:ab:ab:cc:78:a4:6b:43:74:68:6c:57:e3:f3:
                    b9:87:51:0c:80:5a:90:a8:a0:08:2a:96:48:a6:1c:
                    30:bf:0a:70:0d:a1:e2:23:ab:75:02:1b:e2:f9:c2:
                    17:91:15:47:84:b8:da:56:a8:1e:df:a7:d2:31:ee:
                    ea:81:84:0c:e4:ef:be:ca:27:2b:02:ff:16:bc:8f:
                    96:d3:c3:17:93:82:79:47:0d:7a:2e:2d:a7:fd:15:
                    a6:23:51:38:0c:38:8f:5c:e4:4b:e5:01:d3:9f:67:
                    ad:af:97:43:fc:27:47:b8:f8:be:83:4e:c5:8e:9d:
                    0f:df:c9:a1:c0:e7:cc:76:81:20:2b:70:37:6d:36:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3D:CA:B9:62:05:93:7F:29:0C:99:6B:EF:FD:D4:75:55:89:74:83
            X509v3 Authority Key Identifier:
                keyid:C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133322e302f32322d3234203d3e20323731323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:3e:75:4c:51:ea:df:33:eb:9b:e7:bf:49:31:40:f0:49:63:
         d0:48:6d:d8:60:7e:f5:83:ce:d0:73:3a:c5:bf:70:5f:e7:6e:
         68:b8:a8:20:2d:02:e3:d0:31:6c:a8:28:53:2a:00:92:2f:16:
         0f:5f:fb:b3:5e:23:73:99:55:68:75:b1:67:e9:8f:55:87:85:
         c3:cd:d4:ce:c8:53:e2:2d:5c:13:b7:3d:19:ff:52:42:59:be:
         f0:92:b9:e3:31:f6:77:bd:ab:9b:d6:da:47:dc:49:d2:9e:b7:
         65:6d:51:db:88:08:5c:f2:c2:a1:11:39:8a:f3:7d:b2:d4:36:
         2f:fa:02:73:bf:4a:ec:b9:56:4d:46:1e:62:11:3e:b6:75:47:
         63:c2:a4:80:c3:fb:55:3a:c1:47:03:dc:a8:41:75:63:4c:80:
         e3:6b:43:96:93:9d:97:64:db:cc:fd:7e:5b:56:9f:48:ae:fc:
         e6:d3:48:fc:34:c8:3a:da:b2:db:e2:fe:25:04:f1:28:52:22:
         18:8b:41:49:ee:81:ff:70:5f:ca:7e:85:33:2b:4e:ea:23:27:
         66:64:46:6d:da:ad:24:ac:00:61:6d:da:58:9e:f8:47:16:5d:
         5d:27:97:f0:be:da:a2:87:87:d9:ce:44:68:5e:03:f9:1a:b8:
         df:d4:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org