Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa
File:                     34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa (raw, json)
Hash identifier:          FpPh6NU4KWhoWKo62gm5BmAeC78C5effmwMhJkfu1hg=
Subject key identifier:   97:4D:89:7D:07:96:02:1D:1E:0B:62:4A:FD:E7:65:2E:8D:C1:7C:2D
Certificate issuer:       /CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
Certificate serial:       49614E6E8654B729064EACD0203DD70484D21280
Authority key identifier: 67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa
Signing time:             Mon 08 Apr 2024 16:22:40 +0000
ROA not before:           Mon 08 Apr 2024 16:17:40 +0000
ROA not after:            Mon 07 Apr 2025 16:22:40 +0000
asID:                     266952
IP address blocks:        45.225.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:61:4e:6e:86:54:b7:29:06:4e:ac:d0:20:3d:d7:04:84:d2:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67C9B36E52F1BDDD88B130F32B29E9230A0FAD43
        Validity
            Not Before: Apr  8 16:17:40 2024 GMT
            Not After : Apr  7 16:22:40 2025 GMT
        Subject: CN=974D897D0796021D1E0B624AFDE7652E8DC17C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:b2:be:e6:34:1f:4e:2e:8d:58:c5:05:7f:
                    ee:27:fe:a3:f8:9f:e2:9e:72:e5:fb:98:87:45:3a:
                    94:71:02:23:65:07:34:c0:0d:6e:bf:34:7f:b7:31:
                    59:1b:bb:31:b9:7f:8d:45:34:41:5e:53:17:88:17:
                    ce:cc:78:0c:45:3b:ed:1b:f2:cc:69:7a:a5:cd:a0:
                    a8:75:18:3a:e4:3c:b2:a8:1b:fe:24:d8:5a:0e:30:
                    46:a0:bf:49:08:be:c4:81:0a:8a:4c:99:19:0d:41:
                    0f:46:29:2d:32:7d:8d:e2:1c:59:e6:ec:aa:5f:10:
                    e8:f8:77:7c:a8:9b:5a:75:73:fd:11:0c:d9:82:0c:
                    e5:29:51:76:f2:eb:1e:11:c3:5e:f1:e5:0c:2b:f3:
                    21:25:e7:88:4e:90:1e:01:c7:2a:d3:1e:15:59:b9:
                    8a:54:64:6f:65:2c:e3:ea:a8:8c:ec:89:96:a0:3f:
                    43:f7:29:1d:60:fc:62:ef:aa:3e:8a:eb:c9:c5:c5:
                    04:03:00:00:6e:00:73:fa:d4:41:96:ce:db:78:dc:
                    14:a4:ea:07:85:a8:74:1e:ad:86:d1:7a:4b:1f:58:
                    4f:cc:ae:e3:58:aa:8a:a3:8e:e6:ec:14:8a:ec:29:
                    35:40:f4:6b:c1:1a:85:4f:c6:f0:1e:6b:11:82:34:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4D:89:7D:07:96:02:1D:1E:0B:62:4A:FD:E7:65:2E:8D:C1:7C:2D
            X509v3 Authority Key Identifier:
                keyid:67:C9:B3:6E:52:F1:BD:DD:88:B1:30:F3:2B:29:E9:23:0A:0F:AD:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67C9B36E52F1BDDD88B130F32B29E9230A0FAD43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/1/34352e3232352e3235342e302f32332d3233203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:86:71:2e:66:46:d2:1f:a1:8c:2f:d4:98:67:1b:97:bf:10:
         28:39:10:5d:45:0e:48:24:dd:f4:99:c0:da:5d:d7:e7:b9:9e:
         70:ca:ce:23:dc:93:0d:6e:f4:ca:3b:f6:20:4f:0b:88:7e:53:
         08:6f:78:1a:90:78:91:6e:be:e8:18:74:70:e7:16:a5:54:eb:
         34:c2:70:70:52:8d:4e:76:13:fe:2b:f6:e0:df:8d:4e:e4:55:
         84:9c:40:71:8e:82:86:c0:4e:3e:04:a5:74:ed:62:0a:2a:63:
         c6:1e:83:c3:cf:38:3a:30:78:03:32:ef:11:4e:93:d8:70:19:
         41:7b:2f:dc:0e:76:35:45:a9:af:50:33:09:78:ca:85:7d:a2:
         e5:aa:eb:0b:43:7b:74:87:3c:be:45:0e:e9:bd:96:ee:dc:f4:
         f8:7f:f5:5b:51:c2:4c:4d:ac:c2:56:8c:2a:f6:f4:c8:b6:0e:
         d6:31:92:4e:67:b4:64:72:40:7b:9d:b1:79:6b:50:a6:24:1d:
         3f:df:de:8b:b4:13:32:f1:69:14:23:a0:96:28:ff:27:f7:ae:
         a1:fb:3f:4c:b3:bb:c3:0c:98:f6:b9:9c:0f:88:a7:fd:10:bf:
         98:0c:e8:1b:91:fc:00:4c:33:62:61:c4:4d:10:62:a4:07:a0:
         8b:b3:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org