Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/34352e3233302e35322e302f32322d3234203d3e20323637313730.roa
File:                     34352e3233302e35322e302f32322d3234203d3e20323637313730.roa (raw, json)
Hash identifier:          dqnadtfSpqgmmv1JMdSWKT0Lji1WEyl2eEUdiA/0poY=
Subject key identifier:   9B:3B:1A:D1:DF:58:E2:B9:D7:5E:9E:CB:9C:5D:F0:FF:8C:34:A4:FA
Certificate issuer:       /CN=0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F
Certificate serial:       496049C747F735E5082F9893CDC75613E058532D
Authority key identifier: 0C:DD:D4:A5:7A:EA:2D:AE:E8:4C:7E:46:41:B7:D9:55:7C:15:28:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/34352e3233302e35322e302f32322d3234203d3e20323637313730.roa
Signing time:             Fri 11 Aug 2023 18:56:30 +0000
ROA not before:           Fri 11 Aug 2023 18:51:30 +0000
ROA not after:            Fri 09 Aug 2024 18:56:30 +0000
asID:                     267170
IP address blocks:        45.230.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:60:49:c7:47:f7:35:e5:08:2f:98:93:cd:c7:56:13:e0:58:53:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F
        Validity
            Not Before: Aug 11 18:51:30 2023 GMT
            Not After : Aug  9 18:56:30 2024 GMT
        Subject: CN=9B3B1AD1DF58E2B9D75E9ECB9C5DF0FF8C34A4FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:72:1e:bc:a7:c8:5b:ec:23:a4:14:86:80:0f:
                    37:0f:56:93:1c:7c:82:e7:dd:5e:dd:9e:ec:07:3b:
                    1f:15:d4:83:c5:ab:c2:ec:38:97:bc:48:b9:b8:ed:
                    30:8c:e5:0f:65:ed:65:b7:11:08:09:d6:b6:7a:81:
                    43:bd:da:d3:e1:26:41:5b:5f:74:fb:29:32:bd:ae:
                    9c:07:b5:cd:6b:f0:59:b7:a1:89:92:88:35:74:5c:
                    73:bc:3c:eb:7b:2a:68:05:ca:37:85:84:76:e9:98:
                    79:e4:19:a9:f8:a0:d0:26:16:2c:c2:d9:a5:cc:b3:
                    c4:77:c6:e4:a1:b5:21:f4:4a:82:4f:5f:f5:22:55:
                    df:44:16:fd:e0:4c:4d:a2:4e:37:c4:09:89:1b:01:
                    e7:d4:0a:89:d3:0f:31:7e:2f:27:8b:31:3d:50:11:
                    ca:04:c5:cb:6c:1e:02:c7:8f:a8:65:9e:1a:7a:15:
                    3d:95:51:11:e7:20:e5:23:cf:35:58:50:15:0f:18:
                    4d:05:e1:4c:72:a5:38:52:ee:be:e1:1d:2b:b3:4d:
                    ac:33:59:f9:21:6a:c7:cb:df:df:61:d6:10:1b:77:
                    3a:33:00:de:85:d5:7f:6e:b7:57:de:3e:57:9b:17:
                    38:42:fa:e4:64:39:50:a5:43:53:4a:6e:7e:53:80:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3B:1A:D1:DF:58:E2:B9:D7:5E:9E:CB:9C:5D:F0:FF:8C:34:A4:FA
            X509v3 Authority Key Identifier:
                keyid:0C:DD:D4:A5:7A:EA:2D:AE:E8:4C:7E:46:41:B7:D9:55:7C:15:28:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CDDD4A57AEA2DAEE84C7E4641B7D9557C15282F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/34352e3233302e35322e302f32322d3234203d3e20323637313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:b7:2f:36:4f:5c:73:ae:f4:4d:ab:34:68:e9:1b:5f:83:fa:
         7b:d9:ac:97:c2:b7:45:ff:59:0c:1f:be:a6:72:ec:8f:3c:f2:
         07:ef:6b:94:df:85:01:8a:42:a1:52:43:57:ff:a1:dc:bb:44:
         3c:a1:f8:f3:44:31:3c:c1:9d:29:31:b5:d1:74:7c:81:02:e5:
         c6:b6:8b:cd:12:59:51:bd:54:b6:ee:d4:e2:a2:70:60:27:f0:
         e2:a1:8d:6c:f8:f4:bf:c4:5b:e1:ca:ac:fa:b2:7e:b6:c8:b6:
         c4:0b:a0:3a:17:0f:2d:60:26:dd:d2:7b:89:82:49:0a:67:ae:
         5e:51:d7:80:91:8e:f4:98:04:29:07:7e:e5:8d:79:60:67:d2:
         09:ed:fc:67:3a:74:b8:6c:30:b6:c6:b1:bf:8a:cf:1a:0b:7e:
         31:cd:70:b5:81:a9:0b:4d:86:fb:bf:63:d4:f1:50:6d:f2:ed:
         28:00:05:41:8b:1a:48:22:2f:e5:ba:e7:80:d7:d1:53:24:01:
         d1:fd:8b:02:74:57:d2:b7:36:d2:bd:a8:1b:67:83:bd:f2:6d:
         2d:df:25:65:01:b1:67:9a:35:55:d3:45:e4:a5:5c:6e:c3:0b:
         45:fa:ee:9f:87:e3:07:8a:3a:b4:3f:c6:26:38:9b:4f:10:70:
         dc:5d:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org