Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa
File:                     34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier:          H+KXdcXNNh03mUPBud6Ub+VJYK1/qRzbYVq1ZWnblaI=
Subject key identifier:   0A:E7:17:77:5A:34:25:1F:5A:3B:DB:AF:6D:0C:46:B5:2D:5F:5B:9F
Certificate issuer:       /CN=AA12D77A3D660B58B730B5BC3AD963D31490F6A1
Certificate serial:       596E9FF2AA47981184B013986615E23579A8BB47
Authority key identifier: AA:12:D7:7A:3D:66:0B:58:B7:30:B5:BC:3A:D9:63:D3:14:90:F6:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA12D77A3D660B58B730B5BC3AD963D31490F6A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa
Signing time:             Tue 14 Mar 2023 13:37:44 +0000
ROA not before:           Tue 14 Mar 2023 13:32:44 +0000
ROA not after:            Tue 12 Mar 2024 13:37:44 +0000
asID:                     267373
IP address blocks:        45.234.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6e:9f:f2:aa:47:98:11:84:b0:13:98:66:15:e2:35:79:a8:bb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA12D77A3D660B58B730B5BC3AD963D31490F6A1
        Validity
            Not Before: Mar 14 13:32:44 2023 GMT
            Not After : Mar 12 13:37:44 2024 GMT
        Subject: CN=0AE717775A34251F5A3BDBAF6D0C46B52D5F5B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:e9:31:d0:2a:ff:b2:37:4d:9c:08:fd:0d:
                    a3:b6:9b:fd:79:ca:a8:8b:07:8d:58:e6:6e:0d:e3:
                    d9:d0:51:bd:a6:a6:c0:89:2b:4b:88:81:58:36:5a:
                    c3:8e:21:b3:bd:a7:e8:11:96:ec:ae:5c:65:fc:51:
                    02:d0:9b:d4:55:51:0b:9b:f0:7c:8f:53:4b:43:bb:
                    d9:0d:b7:93:d0:f9:93:99:9f:dc:55:47:0e:cc:5c:
                    98:77:f6:82:88:c6:4a:c1:17:64:05:8c:77:66:ba:
                    f2:a4:94:57:57:a7:4f:cd:29:67:b3:98:6e:a6:56:
                    53:7d:63:2f:db:73:cd:50:bb:10:78:5d:2f:6f:1b:
                    42:bd:40:df:0c:2c:16:09:32:a8:fc:cf:2a:2d:67:
                    37:50:ad:75:a7:51:8e:57:80:2b:f7:35:aa:78:43:
                    6a:17:a1:46:30:12:48:14:c9:3c:fe:89:8a:8d:4b:
                    ee:1b:a0:bc:70:a8:ad:3f:9e:eb:f6:72:7f:70:35:
                    cc:70:39:49:d1:fc:9a:22:b0:1a:ea:c1:e4:4f:a4:
                    12:9d:59:c8:aa:3e:ef:11:3e:63:a4:ac:9e:66:bf:
                    92:2b:72:64:f1:ea:76:3f:d9:9b:c6:6a:90:cb:37:
                    81:4f:f0:4e:bd:15:43:95:e9:ce:56:73:fa:75:2f:
                    01:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E7:17:77:5A:34:25:1F:5A:3B:DB:AF:6D:0C:46:B5:2D:5F:5B:9F
            X509v3 Authority Key Identifier:
                keyid:AA:12:D7:7A:3D:66:0B:58:B7:30:B5:BC:3A:D9:63:D3:14:90:F6:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/AA12D77A3D660B58B730B5BC3AD963D31490F6A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA12D77A3D660B58B730B5BC3AD963D31490F6A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:58:a8:0f:14:36:ca:45:f1:7c:75:86:9a:7b:1f:e9:49:53:
         b4:6f:e5:42:a8:6a:a1:fa:9d:6e:c9:1b:bd:8b:ca:bc:c5:c6:
         0b:5e:09:2b:b7:e6:b0:a5:f4:62:63:84:47:23:e5:f9:71:9a:
         6d:2f:e2:85:c4:e6:24:b1:fa:71:35:1f:6c:97:3c:40:7e:c8:
         42:29:25:f2:03:e6:ee:a8:65:0a:08:5d:61:3d:f3:06:e4:01:
         e6:9a:c6:33:5b:a7:c1:e9:07:de:ec:78:6f:07:22:ee:40:a8:
         5d:5a:80:50:c2:ea:8a:33:6f:b6:59:d7:73:db:f5:69:c9:37:
         cf:83:01:ae:c8:d1:74:5e:25:9e:73:1d:16:09:0a:77:25:a8:
         09:a3:13:a4:22:c1:c2:07:5e:f7:a3:ca:1f:c8:a8:0e:b2:ea:
         dd:a8:0e:8b:fa:6b:02:5d:bb:ac:39:19:42:ce:2e:ad:3e:c5:
         ea:ef:03:12:c3:6c:f1:44:21:55:f4:d5:93:32:aa:bf:17:9b:
         ea:43:9d:1e:eb:2a:36:a7:22:2d:64:a6:fd:ca:de:8f:bd:58:
         e1:4f:16:82:3e:32:c0:b4:f0:34:92:c8:df:98:09:8b:c0:47:
         71:70:0c:dd:7b:67:4b:00:3e:e5:a1:44:39:41:48:80:aa:34:
         df:71:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org