Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa
File:                     34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa (raw, json)
Hash identifier:          skzqGbBwRVdMi6vY0nN3+U5ux7sRghugC9poUpnS+XI=
Subject key identifier:   16:98:84:AA:C8:43:9C:0C:C6:4F:CE:D6:49:CA:71:12:D8:F3:B7:A6
Certificate issuer:       /CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Certificate serial:       6EEA3F8C94994B6CDF41331586306FB464F83B04
Authority key identifier: 95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa
Signing time:             Fri 20 Oct 2023 20:59:28 +0000
ROA not before:           Fri 20 Oct 2023 20:54:28 +0000
ROA not after:            Fri 18 Oct 2024 20:59:28 +0000
asID:                     267334
IP address blocks:        45.233.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ea:3f:8c:94:99:4b:6c:df:41:33:15:86:30:6f:b4:64:f8:3b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
        Validity
            Not Before: Oct 20 20:54:28 2023 GMT
            Not After : Oct 18 20:59:28 2024 GMT
        Subject: CN=169884AAC8439C0CC64FCED649CA7112D8F3B7A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:7b:08:a2:e4:79:56:b2:4d:05:3a:0f:b6:
                    1d:63:99:fe:15:fc:b1:fc:42:9f:a6:dc:36:ce:5e:
                    b6:4a:61:a5:f2:bf:8c:c3:3e:fc:47:47:37:c5:01:
                    8e:61:dc:1b:54:7c:a3:41:43:76:40:87:9a:e1:73:
                    35:1f:61:16:5e:64:f3:2a:47:b6:21:a3:ea:29:c7:
                    c5:15:fc:8e:38:6a:75:20:66:c9:c6:07:d5:6c:50:
                    ff:b6:8f:15:32:66:25:eb:88:23:c1:84:89:10:82:
                    75:31:26:a1:e4:fe:07:ea:86:c7:7c:0a:e7:75:2e:
                    0d:e9:53:b2:60:52:12:0b:05:e0:2e:e5:bf:73:56:
                    8d:c8:e8:a6:be:b6:0e:ec:8f:75:8b:d1:eb:b6:87:
                    08:27:05:c8:88:ae:01:40:d7:db:a0:39:a7:7a:60:
                    7e:bf:e9:b7:25:e8:be:da:21:24:ab:90:23:7c:38:
                    d2:e5:d9:6d:68:6b:db:b3:a6:3e:81:5a:c5:6f:e3:
                    8d:2d:40:ec:79:36:f0:a3:67:f8:77:3d:8d:c5:d4:
                    5d:1c:48:db:bf:34:ad:3d:de:33:fb:4c:fa:80:dd:
                    b6:b8:72:78:ce:36:3f:be:df:7d:c4:92:c4:fc:46:
                    a4:c6:de:c1:9d:f9:47:3d:2e:83:d5:4e:4f:75:aa:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:98:84:AA:C8:43:9C:0C:C6:4F:CE:D6:49:CA:71:12:D8:F3:B7:A6
            X509v3 Authority Key Identifier:
                keyid:95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235322e302f32322d3232203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:36:d7:5a:4f:31:2b:84:0b:7a:0a:7c:fb:8c:a4:c1:45:4f:
         c4:2e:13:b5:10:6c:18:80:7a:15:65:84:9f:21:23:16:5a:f6:
         3c:7b:f0:31:ba:89:a5:b4:fd:24:eb:0c:4d:47:1e:43:10:38:
         a0:ce:2e:b7:59:5e:dc:37:24:4e:93:d2:0d:0c:77:78:4a:36:
         d0:82:4c:5d:87:dc:d6:6c:7d:dd:e2:94:cf:8d:31:cd:c4:29:
         02:d7:e1:2a:b3:37:bd:b4:1c:dc:28:4e:26:32:42:50:ea:54:
         5c:18:96:fb:8b:5c:5a:b3:fe:4f:52:96:05:26:08:b9:8a:d7:
         6c:a2:a6:cf:14:a3:e6:94:62:12:fe:f5:af:6e:be:bb:35:48:
         b7:f8:d5:2f:6a:43:b4:33:6c:9c:70:cc:d1:37:80:f4:9e:30:
         e4:be:e5:d1:9f:97:f2:c0:5e:a2:a4:5c:80:98:a4:8d:1a:e7:
         da:c5:d6:51:5c:fd:95:96:63:b0:ee:4f:f4:5f:ba:c5:24:8a:
         10:a5:43:42:e7:f8:d0:b6:2a:0b:04:1d:68:ae:ed:66:11:30:
         d9:c3:49:aa:3d:7f:80:da:e7:ea:e6:d0:03:5c:56:71:0c:19:
         18:51:3c:4b:d3:53:d9:d9:68:73:d9:29:97:62:b5:95:87:cd:
         bc:d6:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org