Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36302e302f32322d3232203d3e20323731323034.roa
File:                     34352e3233362e36302e302f32322d3232203d3e20323731323034.roa (raw, json)
Hash identifier:          o9bP3OWamsW322Hl342FKj1+zzxREwN4Oc+PPD3pwDY=
Subject key identifier:   1A:36:84:ED:EC:58:B9:36:4A:74:50:A0:17:60:1D:18:21:8C:DA:01
Certificate issuer:       /CN=835C14CFB8B603CCCA76EA942BA566861EC99E00
Certificate serial:       39A74B0FD30104B2B663402A6757B1EE14C9E006
Authority key identifier: 83:5C:14:CF:B8:B6:03:CC:CA:76:EA:94:2B:A5:66:86:1E:C9:9E:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36302e302f32322d3232203d3e20323731323034.roa
Signing time:             Fri 27 Oct 2023 21:09:22 +0000
ROA not before:           Fri 27 Oct 2023 21:04:22 +0000
ROA not after:            Fri 25 Oct 2024 21:09:22 +0000
asID:                     271204
IP address blocks:        45.236.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a7:4b:0f:d3:01:04:b2:b6:63:40:2a:67:57:b1:ee:14:c9:e0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835C14CFB8B603CCCA76EA942BA566861EC99E00
        Validity
            Not Before: Oct 27 21:04:22 2023 GMT
            Not After : Oct 25 21:09:22 2024 GMT
        Subject: CN=1A3684EDEC58B9364A7450A017601D18218CDA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:1e:93:f4:ef:f0:be:47:49:19:92:3c:64:
                    17:8e:0d:55:f2:5a:03:fa:d3:6a:38:ce:dd:b4:d6:
                    14:a0:d4:22:5d:64:36:d5:c0:7c:36:d3:98:32:c2:
                    fe:38:3b:99:09:92:50:f1:45:5a:de:17:8c:a0:aa:
                    72:ce:dd:28:84:0a:6c:82:70:f2:15:bb:5b:3d:4a:
                    8b:ab:9b:05:54:b6:2c:e4:04:e5:68:56:27:85:08:
                    04:89:c7:77:86:75:78:df:ba:7c:0c:f7:cc:98:d1:
                    5f:25:7b:14:6e:9d:bc:9f:5a:45:7a:7b:74:e1:34:
                    2a:0f:cf:d6:1d:67:80:8a:87:db:9f:a0:b1:38:cd:
                    59:c2:c0:5f:75:bb:1a:b9:bf:0b:55:78:1d:65:60:
                    48:51:e9:97:20:6d:d5:53:74:7d:0c:08:df:24:54:
                    60:39:6c:71:a9:c5:67:de:24:3d:5b:7f:32:a7:f7:
                    87:7a:25:cd:73:7b:e7:02:6b:d8:47:db:19:74:30:
                    19:23:23:0a:3c:a7:8e:04:6d:c1:c8:07:b2:3c:0e:
                    b3:f6:bd:ed:f9:0c:8c:ef:56:b7:92:ef:bb:2c:a5:
                    0e:72:35:e2:fb:8c:fa:a7:66:be:db:84:a3:29:a0:
                    86:fd:6f:c2:a4:34:cf:05:f1:cf:46:ef:f0:cd:b8:
                    2d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:36:84:ED:EC:58:B9:36:4A:74:50:A0:17:60:1D:18:21:8C:DA:01
            X509v3 Authority Key Identifier:
                keyid:83:5C:14:CF:B8:B6:03:CC:CA:76:EA:94:2B:A5:66:86:1E:C9:9E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36302e302f32322d3232203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:bc:3f:83:33:88:c1:b2:7a:ed:90:4b:9a:2f:5f:03:98:
         d3:cb:6d:43:d5:2a:79:cb:88:40:b4:0f:c8:23:80:ca:98:65:
         3d:89:85:05:6b:3e:42:67:0f:6f:7a:82:77:c2:06:4d:92:3f:
         57:ec:14:12:25:62:1e:b4:a0:e3:66:8b:79:63:06:49:76:1a:
         f3:2a:84:5f:24:45:91:e3:cd:44:a0:3c:fa:8d:d9:20:91:e0:
         7a:b1:5e:89:31:0d:60:ae:48:fb:ae:cc:2c:8b:1d:e4:b7:7a:
         b1:f8:be:2d:b7:b8:c9:bf:fd:48:1e:5b:1c:58:e8:a0:ab:cb:
         ef:b6:e1:f1:18:5a:3a:ac:5a:3a:5e:e4:ac:df:05:07:7f:2f:
         95:45:cc:8a:b6:8e:5c:fe:62:c5:01:57:8e:4e:1e:fc:99:64:
         cc:3b:1c:b8:e8:eb:e2:87:8f:5c:5d:df:12:18:99:07:78:4a:
         50:49:99:43:d3:10:e2:97:5d:18:4b:79:e7:f1:47:c5:2c:72:
         f5:79:99:51:14:ab:31:32:0b:97:70:40:06:c5:d2:21:1f:f9:
         13:06:0a:26:20:94:92:0e:53:e3:07:7c:23:00:1e:ae:03:b2:
         1d:6d:42:45:0c:42:25:97:e1:1c:38:54:0b:6c:75:ba:d5:c3:
         a7:5d:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org