Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233352e302f32342d3234203d3e20323637313737.roa
File:                     34352e3233302e3233352e302f32342d3234203d3e20323637313737.roa (raw, json)
Hash identifier:          F1cqiz7ZMuNk8KB6jAAxFKd4GDKLtkZpG5l1GasS44Q=
Subject key identifier:   94:64:A0:4C:56:BD:79:51:8D:AD:EF:0E:98:1E:C0:E9:FF:7B:15:89
Certificate issuer:       /CN=C44E62B2983D2F0879112A160E42CAF2382FA628
Certificate serial:       7C5A62FDFBED6A0737DB2C06925EE51B9EF7DF7B
Authority key identifier: C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233352e302f32342d3234203d3e20323637313737.roa
Signing time:             Tue 07 Nov 2023 20:35:38 +0000
ROA not before:           Tue 07 Nov 2023 20:30:38 +0000
ROA not after:            Tue 05 Nov 2024 20:35:38 +0000
asID:                     267177
IP address blocks:        45.230.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5a:62:fd:fb:ed:6a:07:37:db:2c:06:92:5e:e5:1b:9e:f7:df:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C44E62B2983D2F0879112A160E42CAF2382FA628
        Validity
            Not Before: Nov  7 20:30:38 2023 GMT
            Not After : Nov  5 20:35:38 2024 GMT
        Subject: CN=9464A04C56BD79518DADEF0E981EC0E9FF7B1589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:a2:ae:fa:15:c9:92:69:c2:26:b4:b3:c9:
                    58:4a:19:50:22:f9:0c:9b:a7:d7:d6:a6:31:1a:b0:
                    aa:8b:7a:40:84:e5:62:cf:a7:be:d7:32:8e:aa:92:
                    58:78:44:85:3b:1b:d8:77:d3:3c:93:b8:4f:b9:66:
                    f1:d2:dc:62:c2:3e:33:51:7f:c0:0b:17:5d:02:52:
                    df:e5:8e:95:a3:6a:67:43:ed:67:4b:2c:d3:9f:88:
                    2b:17:8f:31:b4:9f:ea:eb:f9:8b:0c:aa:08:78:21:
                    af:2e:88:ed:16:d9:52:85:7a:3e:eb:50:fe:9c:83:
                    87:e1:86:7b:2b:57:fe:07:57:8c:a7:ed:b3:88:a0:
                    a0:92:0e:1d:2a:a3:68:c4:88:42:f3:39:25:43:67:
                    cd:61:bf:bd:a4:3b:cf:23:35:86:fb:96:0e:25:d1:
                    ae:40:65:b1:ad:94:d9:ad:8e:1e:81:34:ba:92:e4:
                    ea:f1:db:62:c7:39:5b:42:f8:96:b6:f0:3d:b5:4b:
                    7a:6e:be:4d:1c:db:93:c0:54:81:62:92:3f:03:a6:
                    f5:49:b7:52:be:9d:09:d6:4f:ed:4d:60:9c:ad:16:
                    99:bd:62:e7:75:06:63:b1:28:4f:fe:bb:1e:45:a1:
                    06:5b:38:bf:91:db:51:51:9e:9f:cd:db:d5:21:e6:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:64:A0:4C:56:BD:79:51:8D:AD:EF:0E:98:1E:C0:E9:FF:7B:15:89
            X509v3 Authority Key Identifier:
                keyid:C4:4E:62:B2:98:3D:2F:08:79:11:2A:16:0E:42:CA:F2:38:2F:A6:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/C44E62B2983D2F0879112A160E42CAF2382FA628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C44E62B2983D2F0879112A160E42CAF2382FA628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/0/34352e3233302e3233352e302f32342d3234203d3e20323637313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ae:4d:01:e1:76:10:cf:f4:09:3d:80:cf:10:c4:0d:d3:0b:
         17:47:a9:08:2a:67:04:ac:8b:c8:7f:d6:6c:d2:0d:57:a3:72:
         b6:ce:69:c6:c9:b7:24:1a:03:81:e3:c4:b0:76:b1:8e:b6:5d:
         db:e1:3a:75:17:ca:8f:f4:b9:1c:10:d9:cf:25:e2:42:8d:eb:
         49:bf:bc:c8:5b:55:9c:92:be:63:ec:fd:c9:95:c5:5c:a9:af:
         11:15:a5:7d:90:20:8a:78:43:5c:33:cc:72:a6:db:ca:eb:a8:
         29:b9:51:36:9e:98:98:02:5d:4f:7b:6e:3c:2f:4c:84:f0:cf:
         a0:4e:63:21:17:ac:92:85:73:0c:11:5f:0b:35:0c:8d:17:42:
         79:36:69:c2:5a:6f:47:ca:2a:80:64:fc:c3:2d:a1:4e:44:18:
         3c:54:6a:f9:3b:f9:b7:ad:d6:9e:d4:82:9a:db:ee:a3:51:e8:
         d8:27:50:16:90:1c:33:d4:2c:f7:29:68:a1:2e:69:d4:54:a1:
         5a:8f:78:22:ff:5c:c0:f2:f1:3a:70:40:d7:68:fe:b9:37:0a:
         fa:4d:d0:9b:3c:f0:50:4b:02:de:4c:91:54:80:c4:d0:34:a9:
         2f:8c:9d:08:cd:cb:5c:50:b2:53:3d:5e:a6:b2:5a:46:70:d2:
         d5:e3:f1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org