Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230302e302f32332d3233203d3e20323637303732.roa
File:                     34352e3232352e3230302e302f32332d3233203d3e20323637303732.roa (raw, json)
Hash identifier:          fNqTjJiOjmKcM/u21VSRoeetj8sikcFZQjsGnX01SwQ=
Subject key identifier:   FA:56:FB:AC:FD:3F:C0:C2:E8:07:92:C4:87:15:91:0E:93:82:5A:CC
Certificate issuer:       /CN=02D248AA52D660570300A2C537102DC174ED8461
Certificate serial:       2B8996DC8716E5F0153FBC7CA79FC00885E0B8EB
Authority key identifier: 02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230302e302f32332d3233203d3e20323637303732.roa
Signing time:             Thu 09 Nov 2023 18:00:00 +0000
ROA not before:           Thu 09 Nov 2023 17:55:00 +0000
ROA not after:            Thu 07 Nov 2024 18:00:00 +0000
asID:                     267072
IP address blocks:        45.225.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:89:96:dc:87:16:e5:f0:15:3f:bc:7c:a7:9f:c0:08:85:e0:b8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D248AA52D660570300A2C537102DC174ED8461
        Validity
            Not Before: Nov  9 17:55:00 2023 GMT
            Not After : Nov  7 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:cb:e3:11:94:7a:19:5b:25:c4:14:2c:38:
                    02:3d:af:b1:49:9a:c7:1a:dc:79:aa:24:a9:7f:7a:
                    f3:b1:41:28:87:75:b4:54:a0:31:41:2e:dc:0c:c1:
                    11:c8:4b:fb:c0:8b:c0:6d:a4:a1:84:60:0c:1e:5c:
                    ec:61:9d:a5:70:35:09:f8:39:c8:da:df:79:53:6a:
                    b3:c2:2e:68:5e:94:c4:de:6b:39:6a:0e:a6:52:e7:
                    cb:2b:59:d2:89:c6:64:b7:98:f3:9d:a1:22:8d:a2:
                    56:f7:35:58:bf:b0:49:13:1f:c7:a2:5e:fb:c6:99:
                    b3:21:19:d2:7a:c1:9a:48:18:83:14:8a:4d:42:e2:
                    54:e0:be:ad:da:09:bb:40:af:6f:73:60:73:13:18:
                    89:c8:5d:8e:6f:04:5e:55:0e:5a:6e:c5:31:1c:bd:
                    2f:92:05:f6:60:47:e1:8a:9b:96:7a:96:21:67:1f:
                    41:0d:68:35:ac:e6:11:18:07:11:24:02:d8:73:ab:
                    e5:c8:ea:46:50:26:16:33:c3:e5:35:a1:c0:37:95:
                    65:12:3d:72:49:87:75:88:59:d0:07:b5:6d:f0:6f:
                    b0:00:68:de:b2:97:9a:ba:38:fd:14:0b:7d:28:e5:
                    5d:c4:23:44:e3:10:ea:f5:24:7e:e0:74:b7:ce:2a:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:56:FB:AC:FD:3F:C0:C2:E8:07:92:C4:87:15:91:0E:93:82:5A:CC
            X509v3 Authority Key Identifier:
                keyid:02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/02D248AA52D660570300A2C537102DC174ED8461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/34352e3232352e3230302e302f32332d3233203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:7f:ec:68:85:2f:8f:57:7a:ad:ed:ac:e4:03:7d:f6:71:bb:
         48:d9:b3:d6:52:4d:ba:6b:fd:d7:af:2e:2c:b2:89:86:6a:ca:
         7b:ab:af:a3:75:d4:75:95:2f:6a:13:17:19:7a:a6:64:d3:13:
         3e:57:e8:62:85:05:b0:91:06:dc:95:7d:0d:c3:a0:bd:9b:49:
         4c:f3:0b:2c:bd:ae:f2:44:90:b1:5d:9f:30:10:fb:3c:9e:33:
         f5:5e:d4:6e:6e:2a:fe:30:08:a2:45:ca:9d:90:a9:69:23:20:
         71:fb:f5:a4:b6:43:b4:40:85:6d:77:1c:27:84:a5:a6:cd:2b:
         fb:c8:dc:98:6d:00:7a:ed:2d:28:28:73:c1:89:4c:f9:ca:5a:
         f0:5e:8c:fc:ee:ff:82:08:15:2e:44:c8:88:93:f5:a4:f2:dc:
         29:49:db:d0:b9:0f:15:fd:eb:f3:61:47:a6:6b:fa:fe:8b:46:
         4e:4a:83:5b:19:cb:86:30:0a:55:15:41:11:9f:ae:62:e9:06:
         f7:e6:59:8a:8f:7f:80:63:7b:9b:b6:05:3f:3d:a1:23:ff:80:
         2c:18:00:de:f9:5f:3c:85:45:10:91:1d:e8:33:41:7f:e3:1e:
         b2:64:43:d8:18:7e:fa:5d:fe:63:25:11:11:c3:3e:2c:c9:dd:
         8a:04:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org