Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232372e302f32342d3234203d3e20323637333330.roa
File:                     34352e3233332e3232372e302f32342d3234203d3e20323637333330.roa (raw, json)
Hash identifier:          8qbEARN8UGZMiik9AhzK5FSULOlvapw71kcZcEQaVW8=
Subject key identifier:   A2:04:18:4E:21:7D:32:2A:5C:9D:52:4E:DE:CB:F1:E2:4A:1A:B4:B0
Certificate issuer:       /CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Certificate serial:       6D428E6351712DED7A647C5150BE1278373B2FF4
Authority key identifier: D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232372e302f32342d3234203d3e20323637333330.roa
Signing time:             Wed 03 Apr 2024 21:51:56 +0000
ROA not before:           Wed 03 Apr 2024 21:46:56 +0000
ROA not after:            Wed 02 Apr 2025 21:51:56 +0000
asID:                     267330
IP address blocks:        45.233.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:42:8e:63:51:71:2d:ed:7a:64:7c:51:50:be:12:78:37:3b:2f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1522A5217E184CA7B071011FCF96A20332AF33F
        Validity
            Not Before: Apr  3 21:46:56 2024 GMT
            Not After : Apr  2 21:51:56 2025 GMT
        Subject: CN=A204184E217D322A5C9D524EDECBF1E24A1AB4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:82:c8:ce:a1:d9:7c:b4:b2:b3:d4:96:6c:
                    59:d0:31:78:ae:26:7d:a8:92:35:ed:1d:3c:79:90:
                    bd:9a:b4:4a:c1:c5:e5:ab:d2:5c:5d:d5:ab:85:ce:
                    e7:2f:d7:f9:32:25:68:fb:7e:8a:c4:bf:4b:f4:57:
                    fb:b2:e6:44:be:b8:5a:f5:88:f6:b8:4e:11:45:96:
                    2d:cf:82:3a:c1:f4:1f:c6:8d:64:12:59:76:d1:36:
                    73:a8:4b:29:b7:c2:34:09:af:47:60:01:af:46:1d:
                    41:d3:8f:34:e2:db:d9:a0:c2:4b:09:45:95:f7:dd:
                    72:5b:e4:6c:b3:6f:4b:6f:0c:99:a6:53:42:95:13:
                    74:a5:c9:aa:65:cd:50:7f:20:dc:41:70:66:11:97:
                    d9:ed:17:90:0b:47:18:85:8c:bf:c8:ca:46:17:73:
                    bc:9c:9a:1e:31:7d:e7:e7:b5:80:02:c7:45:97:d3:
                    4b:0b:87:77:a7:76:85:e8:fd:75:10:67:ee:69:6d:
                    b8:f5:2d:ea:24:3d:30:81:61:7c:4d:43:27:26:03:
                    e3:41:8a:7c:0b:ef:60:2e:93:ea:39:3f:75:48:e4:
                    c0:e6:b4:45:9e:60:ff:1b:8e:7d:62:a8:f7:17:b1:
                    87:3f:21:d0:72:f5:d6:86:3a:c5:98:92:f6:ab:b1:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:18:4E:21:7D:32:2A:5C:9D:52:4E:DE:CB:F1:E2:4A:1A:B4:B0
            X509v3 Authority Key Identifier:
                keyid:D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/D1522A5217E184CA7B071011FCF96A20332AF33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/34352e3233332e3232372e302f32342d3234203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:6e:b9:57:90:83:fa:02:d6:7b:7a:68:c6:22:79:36:fe:
         d6:c3:1c:c6:4d:75:3d:3b:a9:4f:76:a0:ab:df:b9:9f:95:b6:
         82:c4:f1:05:a5:bc:f1:1b:9f:fb:e1:2b:e0:ab:57:05:3a:fd:
         4f:b1:a7:ab:12:07:28:56:29:d1:57:8c:90:ba:97:21:71:b6:
         a5:6b:d4:bf:13:65:17:1f:b9:5a:ab:6c:1d:9f:c7:c3:e8:34:
         48:20:d4:e1:1a:af:0d:17:e2:cb:60:c8:ec:a9:00:8f:a3:ed:
         b0:36:fe:bd:f1:d4:ab:31:86:26:70:99:87:6c:c4:1a:3e:45:
         ce:4a:ad:70:fa:f3:48:ff:cc:a5:77:88:ea:5e:07:8e:45:c5:
         bb:cf:28:64:c8:c3:c7:ab:7c:14:bb:a5:72:c8:9d:2b:c5:3e:
         c7:61:00:8b:ff:2d:bb:03:21:0a:15:8b:a4:39:76:ec:74:96:
         11:ed:d9:30:03:7b:4c:62:30:4e:75:7c:df:40:c4:fe:1c:39:
         e5:6f:b6:c5:8e:39:46:10:17:a5:5d:52:e8:d5:6c:e5:bd:d6:
         73:05:c7:6b:29:df:39:ab:37:bc:d6:d7:83:38:47:1d:5b:25:
         8a:44:ab:a9:0a:60:27:1a:b0:f6:e4:95:7a:45:c5:3b:ae:71:
         f6:29:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org