Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231322e302f32322d3332203d3e20323637333733.roa
File:                     34352e3233342e3231322e302f32322d3332203d3e20323637333733.roa (raw, json)
Hash identifier:          K7DlHocHgt4PMVivjvTvpRJ0ldOQtUUom0VsxUXiEhc=
Subject key identifier:   71:FA:A3:BE:59:B4:AA:7C:CC:6A:30:93:BD:2D:CA:D6:21:42:06:B2
Certificate issuer:       /CN=F89980244713AB81D01873549DDA3669C892115F
Certificate serial:       2CECBA9B0653B607E8F3A041E9E2AEEDE7F6D76E
Authority key identifier: F8:99:80:24:47:13:AB:81:D0:18:73:54:9D:DA:36:69:C8:92:11:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89980244713AB81D01873549DDA3669C892115F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231322e302f32322d3332203d3e20323637333733.roa
Signing time:             Wed 28 Jun 2023 13:47:26 +0000
ROA not before:           Wed 28 Jun 2023 13:42:26 +0000
ROA not after:            Wed 26 Jun 2024 13:47:26 +0000
asID:                     267373
IP address blocks:        45.234.212.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ec:ba:9b:06:53:b6:07:e8:f3:a0:41:e9:e2:ae:ed:e7:f6:d7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89980244713AB81D01873549DDA3669C892115F
        Validity
            Not Before: Jun 28 13:42:26 2023 GMT
            Not After : Jun 26 13:47:26 2024 GMT
        Subject: CN=71FAA3BE59B4AA7CCC6A3093BD2DCAD6214206B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:a6:51:bc:61:53:c5:3d:1d:d1:60:bf:3f:
                    c6:e1:95:41:e8:4b:b1:4c:2b:c6:6d:00:b2:e1:d7:
                    e1:38:33:5e:c6:92:0a:48:55:5c:43:5a:7d:b6:dc:
                    ee:2e:38:80:eb:62:e1:36:20:c6:b7:0b:94:63:fa:
                    bc:f5:42:12:05:12:da:0e:bc:19:08:0f:9a:49:2d:
                    9d:41:5b:2b:c2:12:ae:a4:df:b3:24:7a:70:66:3d:
                    90:dc:fd:b8:cd:32:88:ca:5b:36:2c:c9:ef:0a:37:
                    eb:c7:7f:4a:6b:72:49:d9:60:04:a8:63:4f:38:f8:
                    24:ac:dd:f6:65:ca:2b:28:19:14:6a:5b:f4:7d:9f:
                    3f:58:08:46:e1:71:69:11:65:98:e7:60:c9:9e:25:
                    47:2f:cd:4c:e9:33:36:fd:89:e4:a0:8c:53:88:df:
                    0e:a1:61:0e:89:bd:b5:82:e3:ab:0b:37:0b:06:7e:
                    08:bf:2a:c8:c1:fe:cd:e8:eb:e2:9b:01:3f:24:ab:
                    0f:75:6f:e6:c8:51:ae:0d:c8:41:83:de:4b:b8:d6:
                    da:3c:1e:65:42:41:8b:d3:b4:10:5d:91:bc:75:05:
                    f4:9c:30:17:8d:fb:cc:61:ee:90:f1:6d:21:62:e6:
                    10:d2:74:c0:ec:51:00:13:15:7d:fb:41:46:86:80:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FA:A3:BE:59:B4:AA:7C:CC:6A:30:93:BD:2D:CA:D6:21:42:06:B2
            X509v3 Authority Key Identifier:
                keyid:F8:99:80:24:47:13:AB:81:D0:18:73:54:9D:DA:36:69:C8:92:11:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/F89980244713AB81D01873549DDA3669C892115F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89980244713AB81D01873549DDA3669C892115F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231322e302f32322d3332203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:14:0b:64:5d:31:44:92:a2:7e:23:0a:92:1d:a9:69:2c:ca:
         b0:60:e3:16:4a:b7:66:76:66:22:c4:b2:ac:dc:b0:17:ce:41:
         a3:f6:20:a1:e7:b8:5f:40:89:5c:db:f5:ae:dd:12:14:dc:97:
         65:d0:52:7a:40:37:07:64:11:69:97:1d:53:1f:8f:e2:b0:59:
         af:ed:02:33:d9:eb:e0:c8:0a:71:65:91:47:cd:8c:08:85:25:
         62:2c:09:af:10:e3:73:9b:c3:5b:33:aa:9a:a2:e0:22:27:b4:
         d2:9d:44:59:fe:e0:a4:21:19:6f:a8:6d:28:f7:ed:0b:ab:c6:
         d7:a9:49:0d:9a:18:be:c5:96:17:a9:da:1c:59:57:39:7c:ce:
         b7:60:e4:c4:53:aa:c2:d0:6e:2a:93:68:86:64:55:5b:6b:20:
         24:9a:c3:0f:2d:24:32:65:7a:3d:d8:fa:78:3d:19:40:be:a9:
         76:04:16:5c:7b:c5:d4:99:fc:5a:a3:c5:21:27:b9:06:03:29:
         93:a2:45:d4:d0:31:1c:f4:9c:b7:cb:41:e1:71:7c:ba:bd:75:
         06:e7:84:7b:33:33:ce:3d:98:c4:a0:27:c9:c0:1b:e6:ec:35:
         71:b9:76:d4:04:9a:eb:ac:af:81:15:4c:01:85:72:77:a3:44:
         1d:57:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org