Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232342e302f32322d3232203d3e20323637333330.roa
File:                     34352e3233332e3232342e302f32322d3232203d3e20323637333330.roa (raw, json)
Hash identifier:          SQyKwXMjCiYS/dXnLrc4DvlSyz0jyG1Us6y9rKEDPKw=
Subject key identifier:   B9:CD:31:9D:9F:B3:F6:A6:14:30:7B:9B:C2:53:4F:13:87:0F:FD:F9
Certificate issuer:       /CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
Certificate serial:       2D99229053D0F25655A05BD2302B3AFC32AD652F
Authority key identifier: DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232342e302f32322d3232203d3e20323637333330.roa
Signing time:             Thu 14 Sep 2023 14:45:17 +0000
ROA not before:           Thu 14 Sep 2023 14:40:17 +0000
ROA not after:            Thu 12 Sep 2024 14:45:17 +0000
asID:                     267330
IP address blocks:        45.233.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:99:22:90:53:d0:f2:56:55:a0:5b:d2:30:2b:3a:fc:32:ad:65:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Validity
            Not Before: Sep 14 14:40:17 2023 GMT
            Not After : Sep 12 14:45:17 2024 GMT
        Subject: CN=B9CD319D9FB3F6A614307B9BC2534F13870FFDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:de:c9:2b:8a:99:3e:ad:d2:f9:89:1f:fa:
                    50:00:de:e0:7f:80:fa:68:6e:f6:01:91:18:89:fb:
                    89:9b:6c:85:82:e1:e0:88:a4:a7:53:ca:6c:d8:12:
                    eb:04:28:0a:92:2b:eb:7d:02:c0:8f:71:ec:07:c1:
                    21:70:e9:c6:8d:61:c7:58:44:5b:e9:e2:48:a0:07:
                    95:61:ba:35:2a:1b:6a:1d:7a:29:fb:37:d1:69:d6:
                    aa:1f:87:e4:27:34:20:03:2b:10:ae:14:25:78:93:
                    ce:51:a9:6d:3d:5a:94:9a:0e:07:e9:4f:44:01:93:
                    37:bf:12:53:90:35:b7:61:f3:cb:29:19:74:e1:71:
                    d4:e4:ff:06:01:22:37:ae:d4:60:71:a8:54:7d:56:
                    2c:e1:b6:bd:4d:11:71:25:e6:f2:6d:a4:83:0c:43:
                    68:bf:ee:29:34:64:81:59:94:2e:01:b4:72:60:ae:
                    74:85:d0:d2:50:67:53:d6:d1:4c:ea:02:9d:6e:bb:
                    38:4c:7c:9e:7d:c1:e6:5c:46:cd:3f:e1:30:e2:a9:
                    22:35:28:90:94:08:41:24:a6:9f:c8:b9:23:64:fe:
                    56:86:8e:0b:60:ce:5b:aa:8a:1c:bc:69:01:62:bd:
                    a0:3f:b1:79:82:9e:d7:db:ff:34:0b:a3:46:16:54:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CD:31:9D:9F:B3:F6:A6:14:30:7B:9B:C2:53:4F:13:87:0F:FD:F9
            X509v3 Authority Key Identifier:
                keyid:DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232342e302f32322d3232203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:04:55:2c:45:39:42:f6:43:4d:98:a6:93:12:5b:cf:28:64:
         d1:44:2c:16:41:20:75:7f:98:5b:b2:95:d1:af:1d:18:e2:d3:
         80:5b:1f:59:8b:86:8f:5c:3e:73:8b:dd:0e:f2:8b:9e:c3:e8:
         bc:1f:95:8c:b8:29:3c:e1:36:e4:61:26:93:6c:dd:2c:f4:46:
         17:65:60:af:26:ff:61:13:83:2a:d4:24:0c:01:6b:da:dc:ff:
         80:8e:27:c3:7b:25:75:a2:f7:fa:73:19:3a:76:e8:70:d3:04:
         b4:8d:c0:84:cd:fc:a1:68:10:ba:22:1f:73:e1:2e:1e:e8:a1:
         98:6a:e6:47:90:3d:7b:cd:09:ed:85:b3:42:e8:9f:2c:37:e9:
         2a:22:4d:38:ca:3e:ff:b4:b7:a1:56:a0:21:37:80:31:7a:a3:
         67:45:53:f3:f3:95:00:6c:21:f8:21:bd:ca:8f:c0:9a:98:2a:
         e9:7a:79:e5:59:aa:a2:10:14:fd:cc:b7:7d:53:a9:83:c0:7c:
         8a:0f:ed:1f:9a:e2:81:37:0d:38:6a:b6:fb:f0:c7:30:65:2d:
         ef:d1:36:d6:c6:1e:09:ce:6b:19:a3:de:4b:0d:bc:3c:1a:3b:
         32:ce:8f:07:d8:0d:ec:9a:d7:23:7e:ab:64:00:97:ea:3a:e8:
         4a:cb:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org