Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232342e302f32342d3234203d3e20323637333330.roa
File:                     34352e3233332e3232342e302f32342d3234203d3e20323637333330.roa (raw, json)
Hash identifier:          EkSlTE4Jj6L9yVkBh0Dq/g1NB7l4/0hyXZFEYVJzC9M=
Subject key identifier:   9A:24:A6:E6:C7:AE:21:70:A3:D0:47:C8:D3:BE:B6:45:95:2F:2E:FC
Certificate issuer:       /CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
Certificate serial:       59BCF2861BF1B408631826D6E7A677B6C5B922B7
Authority key identifier: DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232342e302f32342d3234203d3e20323637333330.roa
Signing time:             Thu 14 Sep 2023 14:45:26 +0000
ROA not before:           Thu 14 Sep 2023 14:40:26 +0000
ROA not after:            Thu 12 Sep 2024 14:45:26 +0000
asID:                     267330
IP address blocks:        45.233.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bc:f2:86:1b:f1:b4:08:63:18:26:d6:e7:a6:77:b6:c5:b9:22:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBFD38621AE31C186B1722CFC87FE030F3321AE0
        Validity
            Not Before: Sep 14 14:40:26 2023 GMT
            Not After : Sep 12 14:45:26 2024 GMT
        Subject: CN=9A24A6E6C7AE2170A3D047C8D3BEB645952F2EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e5:62:09:f1:a6:da:d8:61:6d:36:4f:f8:a2:
                    b4:a4:04:23:a3:c1:c8:58:7e:2e:e6:ca:5f:93:7d:
                    82:c2:d1:ce:6a:80:45:6d:a7:01:41:99:fc:88:35:
                    11:2a:4c:f8:6d:c4:ab:a9:46:e1:20:f8:70:21:07:
                    e1:27:bf:dc:98:41:7b:95:d3:a8:05:01:3f:74:15:
                    3a:b1:85:d7:ac:32:50:0d:1b:af:41:fd:32:f5:61:
                    1f:47:7c:73:d1:f5:b3:90:2b:01:6f:c3:b1:bb:d0:
                    52:78:c6:76:3e:e1:87:c1:56:30:8d:0d:e8:fe:74:
                    2f:54:ba:94:73:5b:84:21:f2:55:05:ad:39:57:ed:
                    3d:b8:79:c5:62:fd:ba:ba:a8:e0:d8:93:e2:fa:71:
                    81:67:68:4b:62:02:5b:bf:21:c1:82:b7:73:f1:38:
                    d2:58:d7:e7:fd:1d:e7:ca:b4:7e:22:62:f4:b0:3c:
                    7e:1e:1e:ba:85:c4:b5:1d:bd:30:d7:4f:fe:c4:8b:
                    62:49:04:42:53:30:88:93:09:9b:3b:4c:5f:51:1d:
                    39:e8:fa:f4:c7:2b:fc:4f:ae:76:bd:72:21:34:89:
                    15:3d:68:d4:ce:b0:30:66:76:b5:28:fc:05:af:59:
                    7d:b3:79:27:bd:6d:8c:39:5a:4b:c9:9e:23:ea:44:
                    c6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:24:A6:E6:C7:AE:21:70:A3:D0:47:C8:D3:BE:B6:45:95:2F:2E:FC
            X509v3 Authority Key Identifier:
                keyid:DB:FD:38:62:1A:E3:1C:18:6B:17:22:CF:C8:7F:E0:30:F3:32:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBFD38621AE31C186B1722CFC87FE030F3321AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232342e302f32342d3234203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:d7:ee:3e:27:1b:04:f3:20:c3:d3:d1:ec:d3:0e:32:93:f3:
         90:1b:78:c2:b7:84:ad:5e:44:54:00:4c:70:c0:68:3d:2c:27:
         7c:e2:77:93:95:11:64:99:7e:e9:79:d4:24:3b:40:05:08:1f:
         d1:dc:c5:d7:09:5e:b8:e2:ae:0b:f0:9f:8e:b2:df:7b:d4:69:
         ea:ba:43:49:e0:85:b1:b0:87:ab:c4:1b:bb:01:a9:47:dd:50:
         74:8b:de:bb:6d:95:f2:55:b9:d4:49:fb:e5:7f:08:b0:3c:03:
         b0:bc:ba:6d:ba:62:67:0a:ab:9f:76:80:90:b6:4a:63:82:49:
         85:28:a0:89:b3:80:1e:df:86:24:dd:e4:19:37:05:18:e4:7c:
         b6:26:d2:4e:32:ff:9d:51:cd:9c:03:e5:bd:2f:12:41:e7:65:
         61:0d:65:b1:d7:6c:42:44:02:52:8a:15:4c:f3:e4:29:df:b2:
         4f:ea:ca:5e:83:8a:c0:e6:c5:30:72:a6:59:bc:84:f1:cd:97:
         aa:96:48:03:5b:a4:17:33:f1:9c:cd:82:80:ca:55:bb:52:1f:
         e5:84:4f:a9:97:ea:ad:41:c0:87:65:a3:45:f7:a8:55:10:cc:
         e7:a6:3c:50:95:e4:6c:96:33:9d:26:ba:07:90:a0:c7:a7:b7:
         a5:2b:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org