Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36302e302f32332d3233203d3e20323731323034.roa
File:                     34352e3233362e36302e302f32332d3233203d3e20323731323034.roa (raw, json)
Hash identifier:          4hom/JXbSzo7DJsWl/Z3YU9lzifOUWUtCHi6sBtiLgw=
Subject key identifier:   98:80:88:7E:10:0A:6B:73:24:F3:4E:D2:1F:93:E9:09:9C:02:FD:1C
Certificate issuer:       /CN=835C14CFB8B603CCCA76EA942BA566861EC99E00
Certificate serial:       02BA0779A86914DDCF824AD2876E14E90C0BC535
Authority key identifier: 83:5C:14:CF:B8:B6:03:CC:CA:76:EA:94:2B:A5:66:86:1E:C9:9E:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36302e302f32332d3233203d3e20323731323034.roa
Signing time:             Fri 27 Oct 2023 21:09:22 +0000
ROA not before:           Fri 27 Oct 2023 21:04:22 +0000
ROA not after:            Fri 25 Oct 2024 21:09:22 +0000
asID:                     271204
IP address blocks:        45.236.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ba:07:79:a8:69:14:dd:cf:82:4a:d2:87:6e:14:e9:0c:0b:c5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835C14CFB8B603CCCA76EA942BA566861EC99E00
        Validity
            Not Before: Oct 27 21:04:22 2023 GMT
            Not After : Oct 25 21:09:22 2024 GMT
        Subject: CN=9880887E100A6B7324F34ED21F93E9099C02FD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:10:0d:33:1f:f3:33:c8:82:57:22:9a:96:4e:
                    ab:46:ad:fb:8a:b8:9f:6e:3f:66:1a:c4:25:bd:aa:
                    b6:d1:dd:ac:d2:1c:c3:39:46:7e:03:58:60:3b:41:
                    58:d7:b2:4e:c0:cb:ee:5f:fe:6c:90:1e:45:ce:02:
                    55:3d:26:e2:0d:fe:78:1e:c1:84:cd:40:d1:6b:be:
                    1f:b6:8d:ff:44:bb:4d:26:72:57:43:aa:38:99:0f:
                    52:52:c3:14:85:c9:a1:53:63:55:36:b6:c7:77:36:
                    c2:52:c3:5c:b1:c0:89:99:ca:ee:41:7f:97:01:4b:
                    9d:9c:0b:0d:d5:b0:6a:f8:f8:c4:95:e5:1e:3c:90:
                    01:e4:2e:9e:b4:8c:a4:a8:62:dc:18:74:1c:e5:44:
                    3d:26:16:59:cd:94:01:9f:01:bf:81:3e:ad:f0:f1:
                    56:ab:ff:23:be:dc:bf:10:7a:96:2b:7b:cf:14:27:
                    49:64:39:95:76:3b:63:ba:4d:7c:49:a2:ce:0a:ec:
                    9e:12:c9:74:11:37:06:ac:30:01:b0:ed:97:58:7a:
                    ab:ef:df:a7:cc:05:60:9f:63:06:2f:cd:74:33:68:
                    7b:d1:47:1e:ea:63:be:cd:ac:25:54:22:35:d9:2a:
                    af:b2:42:21:f1:40:2c:e3:28:7b:f8:6a:19:4b:c8:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:80:88:7E:10:0A:6B:73:24:F3:4E:D2:1F:93:E9:09:9C:02:FD:1C
            X509v3 Authority Key Identifier:
                keyid:83:5C:14:CF:B8:B6:03:CC:CA:76:EA:94:2B:A5:66:86:1E:C9:9E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/34352e3233362e36302e302f32332d3233203d3e20323731323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:e1:6f:d6:4f:2f:0b:93:e8:c2:f8:d6:24:83:7a:6a:82:22:
         98:7e:e0:90:3c:a8:88:5c:75:3c:82:be:f3:b7:2a:52:4e:ef:
         6c:e3:89:fb:0f:29:5e:9c:d6:69:c3:42:c5:a4:2c:69:5d:b2:
         ad:26:28:58:bd:37:9d:70:79:84:4f:36:43:d7:e0:35:ae:c2:
         1f:4c:98:c7:cb:fb:73:74:78:46:3b:f3:50:75:20:81:9f:0b:
         83:19:d5:7c:5b:74:ec:b0:b4:d9:5f:e1:e3:4e:93:5e:23:1f:
         6c:68:3b:ed:0b:5c:2b:ff:ff:23:91:a0:a3:b7:4f:3f:54:6b:
         ac:14:87:28:a8:76:d9:57:7f:bc:f7:5b:9a:bd:15:10:88:ec:
         c2:d3:5d:62:da:a0:d7:ac:b3:96:9a:b1:55:57:b5:76:29:a1:
         6c:0e:65:50:d3:08:f7:04:af:17:86:fc:47:10:3a:d1:83:b2:
         7b:ab:94:1a:f0:fb:fc:c5:05:ac:95:20:8f:8a:c7:5f:ce:13:
         07:ed:dd:53:d2:81:d5:cd:8e:bc:e8:c7:96:4c:b7:04:af:11:
         cb:54:9f:dc:da:5f:f8:50:a3:a9:3d:4a:19:a7:5d:ad:0e:af:
         b0:97:58:08:51:df:cd:e5:45:25:fe:3a:89:3f:3c:57:04:72:
         66:f2:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org