Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133322e302f32322d3332203d3e20323731323733.roa
File:                     34352e3232392e3133322e302f32322d3332203d3e20323731323733.roa (raw, json)
Hash identifier:          F5/hweXcxJ8EvF4vfhjibUUJXEfr9DOC3aSg6gp4ZWc=
Subject key identifier:   2B:BF:FD:49:74:77:FD:45:27:08:48:53:BC:D9:85:D5:E7:30:E8:FF
Certificate issuer:       /CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
Certificate serial:       2FE248E350F56F411E13D01E4E889BEC9B230F62
Authority key identifier: C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133322e302f32322d3332203d3e20323731323733.roa
Signing time:             Wed 26 Jul 2023 14:10:16 +0000
ROA not before:           Wed 26 Jul 2023 14:05:16 +0000
ROA not after:            Wed 24 Jul 2024 14:10:16 +0000
asID:                     271273
IP address blocks:        45.229.132.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e2:48:e3:50:f5:6f:41:1e:13:d0:1e:4e:88:9b:ec:9b:23:0f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
        Validity
            Not Before: Jul 26 14:05:16 2023 GMT
            Not After : Jul 24 14:10:16 2024 GMT
        Subject: CN=2BBFFD497477FD4527084853BCD985D5E730E8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5d:0b:b0:79:3f:21:59:2d:52:6a:d9:bc:8f:
                    28:b4:ff:ac:4e:c7:a0:f0:32:52:f3:32:2b:ca:36:
                    ea:99:c3:51:28:b3:f1:c2:ec:56:38:6c:3a:cb:2a:
                    d7:42:b5:7e:c7:1c:fb:f2:b3:a0:37:79:25:49:fd:
                    c3:34:9e:7f:ee:cd:cf:6c:8d:09:ce:6c:f2:2b:8a:
                    63:5c:30:be:b4:67:bb:cb:41:b4:60:02:24:a6:02:
                    c2:38:00:14:cf:df:62:0b:54:45:87:7b:ee:21:af:
                    f5:e8:f3:29:84:1b:65:5e:b4:f8:bd:7a:c7:71:df:
                    47:a0:54:71:54:17:ef:36:e9:f0:1f:49:fb:23:59:
                    3a:0a:37:72:9c:6f:a7:d1:fe:3e:e7:17:fd:6a:73:
                    e6:11:c7:03:36:2d:32:c6:2f:c7:f9:c4:0a:d0:ae:
                    60:2c:c4:97:cd:c5:e3:07:ba:9a:82:da:cc:1b:a8:
                    df:00:79:95:7e:3b:cc:d7:1e:10:f4:e7:19:f3:eb:
                    e5:6f:5c:72:82:3b:d9:45:da:89:83:b6:aa:4e:ee:
                    9a:a3:fa:5e:f3:03:33:a7:d8:bc:8a:64:2d:9d:b2:
                    08:81:89:23:d2:07:33:ff:93:e4:16:09:da:f6:94:
                    f7:e7:1b:cb:97:e8:b9:c2:cb:cf:b3:e0:44:37:71:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BF:FD:49:74:77:FD:45:27:08:48:53:BC:D9:85:D5:E7:30:E8:FF
            X509v3 Authority Key Identifier:
                keyid:C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133322e302f32322d3332203d3e20323731323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:df:c5:a0:9e:2f:cc:b2:7d:d1:6e:1a:4a:6c:ba:e4:23:8b:
         72:a2:31:e4:94:f5:dc:6b:9b:c2:0a:3d:bd:d5:51:a5:52:a5:
         fe:fb:19:41:40:0f:2e:d3:e7:29:01:46:5d:c1:40:91:f0:eb:
         f5:52:d0:ff:6c:2d:88:23:23:69:90:e5:d2:8d:aa:ff:2e:0c:
         05:25:fa:e3:a9:95:91:d6:4c:44:b7:38:7d:fd:0a:5b:fb:2b:
         d8:1a:89:a5:c4:ab:05:bc:bf:f5:54:98:e1:9f:21:ff:98:17:
         dc:be:e2:99:97:ba:54:8d:06:79:da:7e:55:b3:4b:a6:11:64:
         b5:35:cf:7a:4a:79:17:6a:4b:7c:bc:34:5b:e2:56:db:3e:a7:
         a6:7c:e6:c2:af:8b:21:a9:aa:40:ed:b8:e7:18:fb:5f:52:7c:
         ef:4b:67:36:cb:6e:c9:b7:45:54:8e:7b:ac:e9:30:29:65:be:
         7a:d9:2c:3c:f5:70:01:b9:b0:5c:f4:8f:f4:0a:1b:9a:ff:f7:
         ec:28:cf:29:7e:5c:04:26:62:4e:df:b0:12:54:01:f3:5d:57:
         b8:bb:b0:6c:06:50:3c:eb:c6:26:fe:25:0a:38:2e:0a:38:80:
         15:7d:9f:45:a5:15:06:45:50:80:b6:bc:8a:99:41:84:98:8f:
         89:e2:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org