Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa
File:                     34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa (raw, json)
Hash identifier:          xgw60E07ExzS080P6yHH5cqCetm6oCNgS2aYVf6R+dA=
Subject key identifier:   DC:37:33:45:6D:4B:73:73:3F:3D:48:C8:86:58:FD:B5:64:9F:F6:82
Certificate issuer:       /CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Certificate serial:       6AEB4C114CBAFC8CB29663CF4916EA7FD1C95D51
Authority key identifier: 95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa
Signing time:             Sat 23 Sep 2023 13:28:21 +0000
ROA not before:           Sat 23 Sep 2023 13:23:21 +0000
ROA not after:            Sat 21 Sep 2024 13:28:21 +0000
asID:                     267334
IP address blocks:        45.233.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:eb:4c:11:4c:ba:fc:8c:b2:96:63:cf:49:16:ea:7f:d1:c9:5d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
        Validity
            Not Before: Sep 23 13:23:21 2023 GMT
            Not After : Sep 21 13:28:21 2024 GMT
        Subject: CN=DC3733456D4B73733F3D48C88658FDB5649FF682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:9c:ff:8f:53:4b:59:0d:c3:88:1d:b1:42:
                    fd:e6:d9:77:62:f4:14:a7:d7:e9:c8:46:57:32:8f:
                    a5:f1:2c:ef:0b:4e:b2:93:a1:8e:93:12:b8:03:57:
                    d6:17:e8:1f:30:a7:b4:60:e4:b8:25:6b:65:94:4c:
                    59:8c:3e:c6:42:e7:44:6f:0b:72:41:c5:8c:a8:e1:
                    09:02:51:06:b4:79:3e:48:15:ca:c9:88:86:69:ab:
                    de:1f:f8:16:58:6c:70:ee:11:ed:e1:53:11:3a:69:
                    c7:cf:79:0b:c2:dc:6c:57:93:8e:4f:78:a9:00:52:
                    91:ce:81:da:e2:d3:be:1f:7d:8c:48:4b:35:cc:f0:
                    a9:f2:6b:71:27:54:cd:2f:cb:7d:50:fd:b0:13:27:
                    78:1e:32:9d:e4:29:00:f3:bb:10:4c:dc:89:b4:e5:
                    3f:91:4a:98:b6:74:1e:92:c2:8c:79:51:80:09:b0:
                    f3:f2:b1:97:4e:c4:4a:20:18:75:52:e4:b2:33:73:
                    23:3a:80:70:40:86:f5:23:20:3b:aa:4a:bc:2b:76:
                    4b:95:b1:8f:ed:24:41:f8:bd:ca:07:01:bb:e6:e8:
                    63:1e:8a:b1:38:db:b6:08:8e:ae:b6:d6:a3:5a:0e:
                    df:3f:52:d4:9a:fa:ae:1e:46:7a:3c:6e:0b:ac:1a:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:33:45:6D:4B:73:73:3F:3D:48:C8:86:58:FD:B5:64:9F:F6:82
            X509v3 Authority Key Identifier:
                keyid:95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235322e302f32342d3234203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a5:98:9c:72:5e:0f:3e:ff:5e:d5:c2:04:a5:47:81:64:6a:
         c1:36:30:3d:f3:95:53:9b:bb:95:e0:39:47:af:05:fd:81:65:
         6b:d7:09:42:e7:13:a0:c3:8d:ea:af:b4:d3:f7:b1:e3:a6:f9:
         90:0c:30:ae:db:b7:72:57:1a:7e:6a:b7:ec:12:dd:56:50:27:
         74:81:bf:07:b6:f2:ba:a3:18:1f:16:9a:44:ee:11:a8:fd:99:
         5e:d5:e0:51:39:e5:79:74:0e:78:0c:70:d1:9a:ee:04:af:e5:
         70:e1:ec:4c:6a:49:41:6b:53:33:5a:b2:a8:6e:93:dc:e7:31:
         e0:bd:bc:fa:fc:d4:49:b0:0e:5c:8a:e2:55:07:e8:05:f5:b4:
         83:cd:ce:bb:e4:a5:5b:a3:c7:8d:64:54:69:31:e6:07:23:9f:
         87:8e:11:a0:c4:39:c5:64:03:5d:9f:0e:05:d9:38:44:c9:92:
         0e:9b:2a:ee:50:49:1d:25:03:df:91:b7:4e:c4:ff:1c:f6:f6:
         f2:7d:dc:0c:29:79:df:b1:12:5c:0c:3e:63:fd:96:a5:78:7b:
         60:45:92:c2:84:1d:04:c5:4e:4a:92:80:24:2b:11:4f:40:5e:
         17:98:3b:2d:be:ad:60:f3:7a:7e:91:10:6d:9c:5d:7f:1a:52:
         07:2f:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org