Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa
File:                     34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa (raw, json)
Hash identifier:          O76XtvRP+Old+JGFqhHkVWwH6A3Gn7bs0TT3+P6hGIs=
Subject key identifier:   69:DA:0C:6C:2D:92:C5:85:79:26:D0:00:31:63:9C:2D:99:E0:08:31
Certificate issuer:       /CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
Certificate serial:       7EE9BDE496311801338FA533B2A5CE15E7BA84BB
Authority key identifier: 67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa
Signing time:             Mon 08 Apr 2024 16:22:39 +0000
ROA not before:           Mon 08 Apr 2024 16:17:39 +0000
ROA not after:            Mon 07 Apr 2025 16:22:39 +0000
asID:                     266952
IP address blocks:        45.225.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e9:bd:e4:96:31:18:01:33:8f:a5:33:b2:a5:ce:15:e7:ba:84:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
        Validity
            Not Before: Apr  8 16:17:39 2024 GMT
            Not After : Apr  7 16:22:39 2025 GMT
        Subject: CN=69DA0C6C2D92C5857926D00031639C2D99E00831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:e1:2d:40:d4:35:04:c5:0a:b5:7c:eb:a8:
                    33:3e:cc:25:0e:e6:d7:9e:7c:af:d5:2b:c8:fc:87:
                    6c:80:02:b5:f2:e4:32:18:3c:11:05:55:a3:4e:1c:
                    af:dd:bc:7c:b5:ed:60:66:61:32:a3:4b:50:3f:b9:
                    88:bc:44:55:c4:b9:2e:2b:1f:d2:dc:32:50:e8:fd:
                    a0:5b:ab:87:1f:c5:69:12:47:36:bc:5c:7e:1c:eb:
                    f3:06:c4:89:f4:49:3a:95:3b:40:4f:b2:75:23:17:
                    0a:cd:42:65:25:a8:aa:53:70:30:73:f0:d3:37:1c:
                    bd:3a:ed:c0:cb:16:07:f1:1e:8f:08:c3:b6:9b:1f:
                    fb:a3:d6:2b:f2:c5:cb:f3:e2:92:dc:00:ac:ac:0a:
                    9b:49:67:8c:76:0d:69:79:49:de:76:49:ad:33:9f:
                    f5:53:0e:58:19:55:93:3d:f4:63:0d:c4:bf:1c:f3:
                    b7:68:bd:5a:b0:7b:35:99:64:d4:61:37:a8:8c:c1:
                    1e:f3:df:cb:1c:ff:32:04:cc:46:ac:2a:90:a3:7b:
                    91:69:c2:f3:09:e1:03:26:b2:43:30:ae:cf:8a:39:
                    23:0e:9d:6c:7a:ed:26:64:6e:69:bc:75:5b:7e:7e:
                    06:7b:2d:01:42:4e:dd:d6:ec:73:d5:95:1b:0f:95:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DA:0C:6C:2D:92:C5:85:79:26:D0:00:31:63:9C:2D:99:E0:08:31
            X509v3 Authority Key Identifier:
                keyid:67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/34352e3232352e3235322e302f32322d3232203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:63:18:c8:1e:15:f5:3b:a2:7b:5d:23:6b:02:f3:e9:ce:96:
         6b:2a:89:c2:a4:85:a4:4d:c3:8e:37:3d:76:27:14:52:b4:d0:
         1b:12:87:c7:72:ab:70:bd:05:e4:23:98:d2:50:c0:e0:08:ec:
         2a:0e:5b:a8:6c:4b:81:10:1b:21:1e:3b:59:90:9b:c9:ee:c0:
         3c:73:f2:38:71:03:b7:2f:6e:2f:a4:a4:94:55:45:30:d0:50:
         1e:77:97:9d:03:23:70:12:fe:dc:dc:e2:b5:06:6b:fd:c0:8f:
         36:f5:ed:7b:72:cb:84:3f:de:33:13:cd:0f:2c:cd:85:e6:82:
         7d:23:fa:90:39:8c:5f:e2:9a:12:20:1c:89:92:bf:ae:27:c7:
         6e:5b:12:9e:86:e3:03:58:75:0a:24:ea:bc:0f:9a:9c:0f:bd:
         f5:b8:bc:af:d5:16:10:a5:74:7d:b0:36:44:8b:01:44:06:b1:
         da:07:45:d1:a3:fc:fa:21:5b:51:17:a7:b8:4a:66:84:5c:b1:
         f0:9f:96:65:56:bd:ec:7d:6a:c0:42:f2:7c:be:16:f1:74:27:
         50:dd:1f:83:2e:3f:35:81:f9:cd:9f:ce:81:56:d2:31:88:b3:
         93:ae:3b:ab:d5:ad:e3:8b:3f:76:ad:61:81:d8:11:2f:a3:54:
         9e:9f:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org