Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133342e302f32342d3332203d3e20323731323733.roa
File:                     34352e3232392e3133342e302f32342d3332203d3e20323731323733.roa (raw, json)
Hash identifier:          nXgMf5en4SIRBHwVJu74slbfMcK804KqxI/RCIFQybg=
Subject key identifier:   2C:1D:29:C3:CD:BC:5E:F3:C4:31:1B:BD:D7:EC:2C:D6:68:47:27:47
Certificate issuer:       /CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
Certificate serial:       19D241E6166F303F3A0CE33EC60C9C8A949210CC
Authority key identifier: C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133342e302f32342d3332203d3e20323731323733.roa
Signing time:             Fri 28 Jul 2023 14:32:47 +0000
ROA not before:           Fri 28 Jul 2023 14:27:47 +0000
ROA not after:            Fri 26 Jul 2024 14:32:47 +0000
asID:                     271273
IP address blocks:        45.229.134.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d2:41:e6:16:6f:30:3f:3a:0c:e3:3e:c6:0c:9c:8a:94:92:10:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C882C008D311AF28DC5EF81CA1783297EFE34DEE
        Validity
            Not Before: Jul 28 14:27:47 2023 GMT
            Not After : Jul 26 14:32:47 2024 GMT
        Subject: CN=2C1D29C3CDBC5EF3C4311BBDD7EC2CD668472747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:aa:9d:b2:14:02:fc:f9:4d:0c:dd:4e:2a:e5:
                    e1:d0:94:5d:44:93:1d:6c:a3:17:6c:2c:b6:16:00:
                    37:38:ff:68:53:d8:ae:ac:88:8e:ad:48:b9:07:2d:
                    a4:54:f7:0f:d2:fd:be:17:ad:6d:79:6f:71:b1:bb:
                    c4:02:03:5e:9a:45:4a:62:d0:f4:a2:5d:15:c5:71:
                    f1:07:4b:6d:19:c2:6f:1a:f7:a5:ca:98:e1:97:7c:
                    2d:eb:e3:db:27:ff:09:bf:71:b6:8c:1d:ff:c0:b7:
                    c0:7f:d7:4d:5f:22:28:d4:18:2b:3a:9d:8d:ce:70:
                    22:48:08:2b:d9:bf:24:15:e9:6b:71:c0:9d:2d:02:
                    f1:88:23:85:30:a0:1c:bd:38:60:0b:86:c7:27:7f:
                    31:4a:bf:36:6d:05:10:fc:63:ba:ee:3e:47:db:6c:
                    66:e7:63:b3:22:92:ff:0c:50:01:d5:35:3f:72:2f:
                    5a:e7:04:54:f6:e2:fa:59:22:86:82:c6:4d:1e:a9:
                    9f:a2:81:a9:66:83:50:10:e4:38:49:ff:ce:32:c6:
                    86:8b:f6:0e:a7:0c:b6:a9:6b:0b:28:d4:b8:c7:56:
                    0a:21:ce:4d:00:28:a0:99:da:4b:1e:71:96:94:76:
                    5c:e2:5a:42:b1:2e:18:91:7c:e4:83:17:c0:a0:46:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1D:29:C3:CD:BC:5E:F3:C4:31:1B:BD:D7:EC:2C:D6:68:47:27:47
            X509v3 Authority Key Identifier:
                keyid:C8:82:C0:08:D3:11:AF:28:DC:5E:F8:1C:A1:78:32:97:EF:E3:4D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C882C008D311AF28DC5EF81CA1783297EFE34DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/34352e3232392e3133342e302f32342d3332203d3e20323731323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a7:b0:9c:69:80:21:3e:3c:d6:69:3c:a7:78:1c:10:2d:29:
         19:ee:36:2e:b3:10:06:6f:f0:5b:ab:ca:4a:83:e6:ca:51:9a:
         8e:41:30:e8:74:45:1e:2b:44:86:ad:75:8e:d6:54:59:49:79:
         04:1e:16:a8:94:c9:98:99:74:7d:42:b9:4b:66:47:37:b1:1f:
         7a:bb:c6:1e:da:2f:6e:94:61:bf:e5:08:79:97:ef:a5:7d:5d:
         49:23:8c:c9:62:03:0e:d2:41:de:e7:9c:28:9b:71:37:1c:7b:
         d8:b2:04:4d:69:57:c4:d8:86:e3:0b:47:ef:3e:00:2a:ad:78:
         c8:5b:7f:d1:a0:00:f2:71:19:0e:eb:69:c1:47:cf:a3:bd:fb:
         70:75:2e:78:dc:e5:d9:97:2d:c2:75:0e:52:2a:76:4a:bb:4a:
         41:82:cb:99:0e:83:37:59:de:44:54:23:a1:9c:83:7d:eb:13:
         85:c2:2f:7f:60:a1:8e:74:27:05:9a:b2:fd:0d:82:00:39:c9:
         f5:2e:de:b8:bb:57:41:c4:c3:9e:42:e6:b2:e8:b7:5f:0c:5d:
         e2:85:c6:b1:34:7e:54:9e:e6:fa:6a:ed:80:77:28:b1:c7:bd:
         97:03:0d:51:0a:01:6c:35:ef:d7:bf:4a:23:cd:45:dc:03:ce:
         f9:13:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org