Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233322e302f32342d3332203d3e20323637313737.roa
File:                     34352e3233302e3233322e302f32342d3332203d3e20323637313737.roa (raw, json)
Hash identifier:          YuM2VBnbDvPYD26jeXq6iTkYTPxrP1qwDuKRRH4bDOA=
Subject key identifier:   F4:20:0C:9D:C3:C8:1F:6E:EB:14:08:C5:CD:3E:7F:19:54:61:44:DE
Certificate issuer:       /CN=C44E62B2983D2F0879112A160E42CAF2382FA628
Certificate serial:       652CB0FFBB7043A86E5D909898421D7029C5D1F0
Authority key identifier: C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233322e302f32342d3332203d3e20323637313737.roa
Signing time:             Tue 07 Nov 2023 20:35:38 +0000
ROA not before:           Tue 07 Nov 2023 20:30:38 +0000
ROA not after:            Tue 05 Nov 2024 20:35:38 +0000
asID:                     267177
IP address blocks:        45.230.232.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2c:b0:ff:bb:70:43:a8:6e:5d:90:98:98:42:1d:70:29:c5:d1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C44E62B2983D2F0879112A160E42CAF2382FA628
        Validity
            Not Before: Nov  7 20:30:38 2023 GMT
            Not After : Nov  5 20:35:38 2024 GMT
        Subject: CN=F4200C9DC3C81F6EEB1408C5CD3E7F19546144DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:67:98:60:ba:9d:e2:15:33:c4:3b:e5:10:
                    b5:40:19:b7:bd:b3:1e:e1:cf:74:df:1a:eb:57:5b:
                    47:86:d5:67:2f:39:55:30:9f:e6:1a:6b:4b:0f:79:
                    31:66:b8:70:0b:ca:1f:3c:05:43:cb:c2:b0:78:34:
                    56:4d:d3:6a:55:c1:7f:33:ca:41:60:a0:70:35:5d:
                    af:11:12:24:35:66:3a:96:ea:53:44:49:eb:84:66:
                    1e:cd:5e:e9:09:a9:9b:6c:ab:da:c3:d3:01:c7:4f:
                    fa:7e:34:fd:81:3b:04:eb:af:15:84:ba:d8:1c:1b:
                    fc:4a:69:91:06:dd:f8:a0:44:a6:38:90:81:68:48:
                    10:c7:b4:65:2c:ec:e0:d6:76:9a:c9:ec:74:81:15:
                    a8:d2:44:32:d1:1e:7c:75:60:4c:e5:47:1e:c3:be:
                    16:e4:e6:77:cc:9b:54:6c:00:3c:45:cb:db:cb:58:
                    74:cc:c3:dc:ff:a2:97:e9:a9:2a:d1:2d:1a:ac:3b:
                    d7:47:bb:82:c4:3d:d7:6b:98:4d:1f:41:21:db:f2:
                    5c:a7:6a:d0:d5:cb:01:75:04:0c:02:28:52:70:b5:
                    4b:c2:b3:a4:1f:a6:5b:c7:d6:5f:85:9b:c3:39:d2:
                    42:c3:3b:95:cb:16:83:2f:30:4e:78:47:91:e9:a6:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:0C:9D:C3:C8:1F:6E:EB:14:08:C5:CD:3E:7F:19:54:61:44:DE
            X509v3 Authority Key Identifier:
                keyid:C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/C44E62B2983D2F0879112A160E42CAF2382FA628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233322e302f32342d3332203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:51:a4:8e:53:3c:11:67:f1:ed:0d:59:e9:d2:a0:08:ca:b7:
         1f:4e:6a:c7:80:04:98:f6:9a:ee:b2:a9:83:54:be:9a:fd:10:
         34:91:34:7f:f1:7a:0a:9d:3b:d8:bd:21:14:dc:e0:02:ed:be:
         9a:31:22:3b:8a:37:5d:48:2f:9e:20:d8:ef:75:bf:4e:4b:42:
         8c:0f:87:c4:e4:87:ce:2a:39:76:01:0a:00:77:92:81:5a:19:
         1c:8b:ab:40:a5:2b:71:cd:c2:71:10:c8:c9:bd:fa:e0:13:04:
         f0:a6:27:e6:bb:84:a2:0a:08:55:c4:75:00:d5:35:db:51:86:
         f3:90:12:8d:3b:e9:8f:eb:ff:9a:ab:d0:35:75:fb:4f:3c:e2:
         d4:1a:4f:2d:82:0b:80:98:38:11:6c:7d:66:5c:d7:28:53:99:
         a7:b9:1a:e0:6f:b5:bb:4f:03:88:7f:69:af:63:8b:d0:76:31:
         21:c1:0f:29:be:bb:be:2f:41:ed:e6:19:46:95:46:47:dc:84:
         1d:0f:92:a3:3d:f1:e1:09:eb:24:d9:2c:5f:3b:9f:2a:d1:b0:
         98:91:01:c2:0f:44:82:ae:ca:6d:04:fd:35:74:ed:cd:a0:60:
         80:ac:dc:b3:34:86:02:7a:bc:af:66:5f:4f:e4:c8:5e:4e:a0:
         db:88:23:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org