Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa
File:                     34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa (raw, json)
Hash identifier:          BZsgYMSDAD39yCWu6QZHe4l/CdStQ747LHmMu30SYkA=
Subject key identifier:   8E:5F:B4:CA:9C:EF:54:57:FA:C3:E4:D0:D0:4C:FC:3C:DD:14:18:43
Certificate issuer:       /CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Certificate serial:       3675F8D042F6CEA32E94DE61E56B6E9BDE2982D5
Authority key identifier: D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa
Signing time:             Wed 03 Apr 2024 21:51:57 +0000
ROA not before:           Wed 03 Apr 2024 21:46:57 +0000
ROA not after:            Wed 02 Apr 2025 21:51:57 +0000
asID:                     267330
IP address blocks:        45.233.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:75:f8:d0:42:f6:ce:a3:2e:94:de:61:e5:6b:6e:9b:de:29:82:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1522A5217E184CA7B071011FCF96A20332AF33F
        Validity
            Not Before: Apr  3 21:46:57 2024 GMT
            Not After : Apr  2 21:51:57 2025 GMT
        Subject: CN=8E5FB4CA9CEF5457FAC3E4D0D04CFC3CDD141843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:46:ae:0a:8c:25:da:1e:6c:47:9d:64:86:
                    e2:d4:09:4c:71:c0:09:f7:9e:1a:05:d0:a7:05:32:
                    96:a2:c5:e3:07:a0:b0:d9:bd:69:b9:07:79:21:c0:
                    49:ce:31:a6:44:e0:ad:6e:94:af:fe:ec:85:32:26:
                    f6:0e:ca:d8:b8:1d:22:d0:09:92:ab:38:5c:45:78:
                    4d:72:52:e0:f6:0e:46:06:9f:ee:0a:4f:af:b3:c3:
                    49:32:7a:d8:6c:db:c3:f6:b3:be:8a:71:c3:05:46:
                    b2:e7:20:13:a3:2c:9c:95:f7:06:e6:6c:45:9f:a6:
                    30:fd:d9:b0:60:39:89:10:4a:c3:f4:36:9d:80:47:
                    41:bb:65:0c:ed:00:44:89:f4:2c:7d:1f:37:9a:d8:
                    19:8f:9a:0d:6e:3c:e3:f5:b2:36:7f:d0:5c:f4:42:
                    70:33:21:25:ab:8a:34:1c:7c:f0:70:08:5a:f4:9b:
                    b3:5b:59:b0:c8:42:c1:fd:0f:92:ea:71:20:fb:8f:
                    7c:ec:e9:88:8b:77:39:50:d0:56:01:7c:e9:d0:ee:
                    c5:81:f7:c2:97:b5:d6:a7:be:09:e8:3b:cd:9c:e3:
                    38:3a:01:2f:8a:e6:9a:fb:c0:69:92:5a:ad:90:2a:
                    02:6f:d1:55:2b:c3:ac:21:1d:b5:15:4a:2f:a0:fb:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5F:B4:CA:9C:EF:54:57:FA:C3:E4:D0:D0:4C:FC:3C:DD:14:18:43
            X509v3 Authority Key Identifier:
                keyid:D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/D1522A5217E184CA7B071011FCF96A20332AF33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232352e302f32342d3234203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:51:c1:a1:54:f3:92:3b:d6:13:06:6d:f8:73:1c:5e:df:99:
         a9:40:0d:52:45:6c:13:9c:7b:eb:c2:10:2c:12:40:db:1f:2d:
         1e:93:b4:4b:5d:39:96:cc:70:4b:48:f8:dd:3d:f7:80:2b:a5:
         df:6d:32:05:56:68:cb:0e:8d:09:f0:87:04:40:28:fd:fc:41:
         94:11:97:d5:14:76:9a:f3:a0:a0:b8:21:4e:9c:f9:a9:ec:c8:
         bd:d7:58:68:83:38:40:88:46:48:2b:d8:89:d8:52:bf:a9:3e:
         0e:cd:ca:78:cf:63:50:3c:2c:08:ce:01:4c:55:95:1a:f8:f2:
         4d:4e:fc:48:54:6d:99:37:b3:35:7f:cd:48:0c:59:68:0b:c5:
         d5:0b:33:a9:ce:18:f3:26:30:41:a9:ce:63:bf:bf:80:40:87:
         16:ed:05:8d:3e:60:5f:59:02:4e:bc:9c:ca:39:a8:3c:b8:2d:
         b2:e5:98:03:1c:34:09:63:66:80:64:0d:02:3b:11:44:54:b0:
         6f:ce:60:e5:ba:f7:fd:93:7f:6c:a3:51:ba:8d:1f:5d:f3:08:
         6c:8d:ed:4f:0e:f8:20:3d:46:45:7b:a4:76:c3:1a:d4:90:51:
         69:99:90:0b:a2:0e:a9:f7:5d:23:eb:5d:ce:8c:67:c6:30:c6:
         88:c3:11:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org