Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133322e302f32342d3332203d3e20323731323733.roa
File:                     34352e3232392e3133322e302f32342d3332203d3e20323731323733.roa (raw, json)
Hash identifier:          MW40Q1buc/JYxIU+RoWx2SmJpVbHebdG/tIElQD2XQY=
Subject key identifier:   6B:BB:37:2C:4E:B9:72:9F:78:B2:C2:D7:AF:75:DE:6C:7F:70:6E:37
Certificate issuer:       /CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
Certificate serial:       1D8966DC8E8AD67803DAE55986C033710156CEB0
Authority key identifier: C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133322e302f32342d3332203d3e20323731323733.roa
Signing time:             Fri 28 Jul 2023 14:32:17 +0000
ROA not before:           Fri 28 Jul 2023 14:27:17 +0000
ROA not after:            Fri 26 Jul 2024 14:32:17 +0000
asID:                     271273
IP address blocks:        45.229.132.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:89:66:dc:8e:8a:d6:78:03:da:e5:59:86:c0:33:71:01:56:ce:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
        Validity
            Not Before: Jul 28 14:27:17 2023 GMT
            Not After : Jul 26 14:32:17 2024 GMT
        Subject: CN=6BBB372C4EB9729F78B2C2D7AF75DE6C7F706E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:83:b1:71:12:dc:01:d8:d2:f4:e9:89:e8:78:
                    70:41:84:6c:4a:69:80:40:1c:13:42:eb:cf:ca:cd:
                    16:43:55:94:07:97:47:a7:e8:0d:10:e3:03:f8:0b:
                    4f:73:c1:a9:6b:91:be:10:4c:28:8e:b1:19:3b:60:
                    d3:49:4a:13:a5:cf:d2:d8:04:18:79:7b:37:f7:23:
                    05:6d:c8:8a:a8:74:b9:9c:8c:58:5c:45:d4:d9:8d:
                    c1:e6:cd:54:67:c7:c0:13:d5:cb:1c:54:b3:c4:0f:
                    83:52:bb:a6:c8:78:24:ce:95:d2:e8:03:1d:b4:d0:
                    8c:da:fe:13:b7:b2:e8:91:54:a7:3b:64:30:a4:4f:
                    96:df:e2:54:7d:f7:73:e1:77:bf:88:4c:09:be:5d:
                    25:9f:f6:d8:7f:0a:1e:c3:ba:f8:02:ad:51:0e:cf:
                    a1:d4:d7:15:6c:9c:7f:75:16:21:56:c3:0d:20:7c:
                    61:a1:0b:70:0a:23:2e:2a:c5:15:b4:1c:14:2f:05:
                    ac:a0:67:f4:bd:d4:6e:99:5e:a2:af:7e:0b:a1:2a:
                    d6:70:6b:4d:ff:0b:c7:a1:22:d4:31:08:1b:f0:d1:
                    8b:42:21:cb:47:54:7a:7e:60:7f:15:4e:c1:b0:e3:
                    62:02:0f:1d:7f:42:5a:79:d7:12:df:bf:58:97:c2:
                    71:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:37:2C:4E:B9:72:9F:78:B2:C2:D7:AF:75:DE:6C:7F:70:6E:37
            X509v3 Authority Key Identifier:
                keyid:C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133322e302f32342d3332203d3e20323731323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:92:25:f0:63:16:b1:99:4c:1b:41:57:20:b3:27:43:a1:
         d7:03:bc:a3:b0:84:57:9f:7c:bf:b8:06:e4:55:01:e2:86:9c:
         13:73:ad:2e:96:b0:81:c4:b7:b7:e8:60:d8:f3:87:ea:d2:51:
         09:38:dd:46:25:a7:41:e6:d6:99:ba:dd:fa:07:f2:ec:37:27:
         45:5d:9c:56:e6:9a:c1:54:a6:3e:07:01:f1:ae:74:78:8b:0e:
         f9:43:dc:72:dc:df:fa:3d:fc:35:2c:bd:51:ac:24:74:fd:0f:
         5c:c6:f3:7d:a2:fe:ce:6c:b2:14:52:1d:aa:fc:9b:c5:49:f1:
         71:10:82:4c:22:58:61:3d:8b:87:a7:2f:7e:4d:3f:21:fd:fd:
         9b:a8:25:bd:47:a5:32:cb:29:2e:9a:8b:80:21:07:cb:f1:22:
         ce:29:0d:ba:be:35:2a:6f:69:3b:16:c6:28:2c:c8:9a:6f:79:
         9b:36:3e:c4:39:32:60:6d:56:a1:d4:4d:75:d1:42:93:61:2f:
         93:f9:94:5b:ec:d9:73:ff:a2:ed:c0:ef:75:2c:f3:35:f9:24:
         e3:62:1a:fa:d1:43:07:72:60:71:30:14:4c:63:b3:f1:2d:4d:
         4f:88:36:8c:9d:73:e5:e5:af:b4:f6:54:d7:1b:00:59:9d:50:
         5a:04:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org