Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232342e302f32342d3234203d3e20323637333330.roa
File:                     34352e3233332e3232342e302f32342d3234203d3e20323637333330.roa (raw, json)
Hash identifier:          JImTKS50MRC81TlZAacckvkddCurnNlGHqtkkDEK27s=
Subject key identifier:   D8:35:D1:51:1B:B6:2D:21:C3:62:A4:4A:38:B5:98:B9:34:33:22:AA
Certificate issuer:       /CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Certificate serial:       2F9508AF115D1DA8F883A96298BEC67E0DA0989A
Authority key identifier: D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232342e302f32342d3234203d3e20323637333330.roa
Signing time:             Wed 03 Apr 2024 21:51:56 +0000
ROA not before:           Wed 03 Apr 2024 21:46:56 +0000
ROA not after:            Wed 02 Apr 2025 21:51:56 +0000
asID:                     267330
IP address blocks:        45.233.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:95:08:af:11:5d:1d:a8:f8:83:a9:62:98:be:c6:7e:0d:a0:98:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1522A5217E184CA7B071011FCF96A20332AF33F
        Validity
            Not Before: Apr  3 21:46:56 2024 GMT
            Not After : Apr  2 21:51:56 2025 GMT
        Subject: CN=D835D1511BB62D21C362A44A38B598B9343322AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:75:01:b6:04:59:1b:d7:8e:40:eb:50:14:
                    8f:ff:33:fe:22:e2:32:3d:1f:91:8f:38:d3:b2:2b:
                    b4:32:4a:e5:02:3b:a8:23:d8:9b:47:f5:c8:d7:2a:
                    ad:0d:e4:12:e4:2b:3b:34:61:46:98:73:36:74:9b:
                    3d:a5:e9:5e:c8:bf:d8:6d:07:4b:8f:99:13:d5:de:
                    ca:c2:13:f8:ed:bf:27:95:15:7c:ac:ea:b6:fc:fb:
                    26:2c:b8:c3:7e:06:12:1a:4c:f8:1e:ba:64:5c:0f:
                    4c:d8:8b:ce:17:b6:95:8d:1f:0c:21:37:2d:19:9b:
                    e3:bf:6e:2a:8d:d5:eb:17:ec:e5:97:17:2d:46:62:
                    da:46:d5:d7:cd:9e:d7:f1:3a:c4:24:24:11:0a:db:
                    54:f7:a5:4b:b6:45:ee:6f:7a:35:75:ec:77:17:35:
                    37:78:5e:81:02:40:d9:97:e6:23:85:8a:10:85:96:
                    9f:9b:28:58:a7:09:73:43:c9:6a:cd:a6:b2:93:36:
                    bd:37:66:72:a5:c1:75:32:93:c7:ed:38:74:33:7c:
                    8a:b4:5d:36:15:cc:8c:94:c1:48:e1:07:98:6f:86:
                    ac:3b:66:e6:82:cf:12:8c:fe:7a:b8:88:8a:43:be:
                    3e:13:13:63:8a:13:c5:0e:05:b5:4f:5d:5e:18:d0:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:35:D1:51:1B:B6:2D:21:C3:62:A4:4A:38:B5:98:B9:34:33:22:AA
            X509v3 Authority Key Identifier:
                keyid:D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/D1522A5217E184CA7B071011FCF96A20332AF33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232342e302f32342d3234203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:f5:ff:ee:11:d3:d0:ee:24:8f:7e:ef:88:02:4a:83:6e:11:
         cf:d6:f1:c8:e8:f7:79:76:f4:78:50:c8:05:95:24:07:24:c9:
         ef:bc:50:78:5c:5d:fe:ef:23:d4:95:85:bb:db:fc:b3:bf:d0:
         5a:1a:8f:e2:74:6e:60:89:b0:5f:ba:ca:ea:06:a0:dc:23:33:
         50:7b:8b:b1:56:12:44:be:79:3c:22:28:46:d3:3a:5f:dc:fa:
         9c:24:b8:6c:6c:d1:81:aa:d0:6c:69:a9:b1:a4:91:0c:07:16:
         b4:c9:47:69:f0:21:85:4c:f2:72:ef:69:4b:96:b5:69:7a:44:
         59:e9:ad:2b:2e:d1:bf:2b:a7:a3:a9:80:b7:16:e9:82:ec:49:
         5e:c3:b8:25:77:4f:be:9e:28:97:14:09:9b:df:cb:91:9c:48:
         33:b2:da:ca:85:a7:c4:b2:60:aa:2c:41:02:55:c9:60:bf:9a:
         5f:7d:f7:38:6d:cf:38:b3:23:a9:53:5f:6a:58:9b:60:0c:80:
         e6:64:8c:04:30:3a:5a:fc:cc:80:e6:e8:42:de:d0:55:f1:50:
         ba:3b:43:c2:a3:6f:71:e0:21:ee:03:14:b2:cd:d0:9b:42:89:
         cd:1f:7f:68:11:41:59:6d:6a:97:9d:f8:75:0a:65:02:41:f8:
         f6:1c:87:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org