Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133332e302f32342d3332203d3e20323731323733.roa
File:                     34352e3232392e3133332e302f32342d3332203d3e20323731323733.roa (raw, json)
Hash identifier:          YzmkyCNx3qDdvMSqr6A8iS9GPaOewIJJv57f26YtMyo=
Subject key identifier:   7A:C3:F3:93:81:B7:9F:CA:10:C1:DE:E7:64:E7:B0:2C:0C:F0:C5:65
Certificate issuer:       /CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
Certificate serial:       0B00421311EB038D1375D2A6F5AA215EE2D185F9
Authority key identifier: C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133332e302f32342d3332203d3e20323731323733.roa
Signing time:             Fri 28 Jul 2023 14:32:32 +0000
ROA not before:           Fri 28 Jul 2023 14:27:32 +0000
ROA not after:            Fri 26 Jul 2024 14:32:32 +0000
asID:                     271273
IP address blocks:        45.229.133.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:00:42:13:11:eb:03:8d:13:75:d2:a6:f5:aa:21:5e:e2:d1:85:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
        Validity
            Not Before: Jul 28 14:27:32 2023 GMT
            Not After : Jul 26 14:32:32 2024 GMT
        Subject: CN=7AC3F39381B79FCA10C1DEE764E7B02C0CF0C565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:2c:29:e8:5c:0b:2e:d2:0b:1a:2a:21:11:
                    ca:88:52:b0:03:9a:12:9d:57:1f:db:5c:30:9b:d8:
                    e0:ca:53:ca:37:fe:24:8c:a0:74:9b:c2:6a:ad:80:
                    df:66:46:47:74:e8:e2:38:0c:f2:8d:59:93:7d:f9:
                    2d:0a:8b:cd:51:3e:bd:66:8b:2b:23:25:cd:53:cb:
                    47:f6:b0:a8:fa:cf:34:92:e2:a8:71:17:0f:2b:52:
                    d1:fc:26:10:06:c5:48:a4:18:17:f0:c4:4b:5d:51:
                    f9:9e:82:0a:ce:c7:f8:25:9b:63:a8:d4:2c:de:01:
                    a4:77:93:c6:62:dc:22:99:6c:a2:d7:6e:51:84:21:
                    d8:91:f0:ad:47:a0:00:13:7c:ea:28:11:f4:18:d9:
                    1c:24:21:67:6b:ff:8c:23:f0:22:87:1b:24:79:cf:
                    1d:12:3f:5b:c1:5b:db:de:b8:33:43:3d:2b:6d:39:
                    74:ec:56:58:12:a4:52:77:60:01:90:2a:49:ef:65:
                    b5:0e:6a:b5:f1:b6:ee:88:41:88:d5:27:a4:c1:3f:
                    c9:bb:e2:a1:33:f9:fa:e5:40:a4:55:85:fd:54:d9:
                    2a:f0:c2:c1:36:5e:a0:a6:92:ed:2d:1a:cf:fe:69:
                    88:e7:84:c5:d4:59:5b:03:ba:c3:c8:1f:ae:46:4c:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C3:F3:93:81:B7:9F:CA:10:C1:DE:E7:64:E7:B0:2C:0C:F0:C5:65
            X509v3 Authority Key Identifier:
                keyid:C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133332e302f32342d3332203d3e20323731323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fa:fd:d8:ea:c2:1f:31:32:57:a8:15:ef:15:6c:cd:ac:51:
         ed:a2:db:b6:64:dd:a1:cf:d6:72:7f:2a:7b:1d:fe:c6:52:a6:
         b7:8c:04:96:ca:83:60:87:c4:c7:9b:a0:f3:37:be:44:b8:52:
         b4:24:80:f8:68:fc:16:e5:bc:be:5b:fb:f6:05:c4:b3:ce:dc:
         4b:54:7e:39:82:3f:5f:80:4f:af:22:d1:3b:c6:f4:9d:d7:5e:
         69:f4:11:6c:00:1b:5b:6f:59:d9:ff:60:dd:05:0a:ad:c0:b3:
         96:51:38:6b:85:56:f8:c9:4e:2e:25:7e:43:f9:ab:3f:e5:20:
         d3:2e:33:95:66:45:17:7f:1a:d5:b2:65:bd:a0:6d:96:b4:1d:
         6f:00:92:a3:94:e0:aa:f8:ce:37:d4:4d:57:27:85:21:ad:f1:
         c6:f0:0c:82:07:5c:78:71:d6:94:20:cf:89:9c:c3:30:1d:e4:
         17:b8:65:ac:a4:87:de:10:5f:a9:31:f9:e5:6f:ba:54:b6:65:
         1a:2b:1d:7d:e2:22:97:da:8d:c7:b8:8a:e5:3a:d9:23:09:fa:
         84:dc:48:10:75:b4:4b:3b:1e:80:02:48:fc:86:bc:7b:f4:dd:
         09:75:76:27:14:0a:22:ba:ac:db:f5:91:7f:b2:41:b4:a3:c3:
         c6:e1:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org