Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/34352e3232352e3136382e302f32322d3234203d3e20323636393938.roa
File:                     34352e3232352e3136382e302f32322d3234203d3e20323636393938.roa (raw, json)
Hash identifier:          o/y0LfceqNdZ4MiwQAWFpOTqjzWi+k+J8n/ZjiNyrfw=
Subject key identifier:   74:80:6B:11:1D:EE:A0:D5:CD:AF:4B:72:D6:86:C8:20:90:CD:7F:46
Certificate issuer:       /CN=2CD97A9413B1CCB310B498A74E162C20325B5DCF
Certificate serial:       350FF46A2284012BFEEF48EE46B829CA1B96DDC3
Authority key identifier: 2C:D9:7A:94:13:B1:CC:B3:10:B4:98:A7:4E:16:2C:20:32:5B:5D:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/34352e3232352e3136382e302f32322d3234203d3e20323636393938.roa
Signing time:             Thu 30 Nov 2023 14:19:08 +0000
ROA not before:           Thu 30 Nov 2023 14:14:08 +0000
ROA not after:            Thu 28 Nov 2024 14:19:08 +0000
asID:                     266998
IP address blocks:        45.225.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0f:f4:6a:22:84:01:2b:fe:ef:48:ee:46:b8:29:ca:1b:96:dd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD97A9413B1CCB310B498A74E162C20325B5DCF
        Validity
            Not Before: Nov 30 14:14:08 2023 GMT
            Not After : Nov 28 14:19:08 2024 GMT
        Subject: CN=74806B111DEEA0D5CDAF4B72D686C82090CD7F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:89:e1:8b:c7:1b:f0:a1:e3:c9:a6:b1:1d:3b:
                    da:c9:b4:11:b7:89:7f:52:ad:ac:63:6b:af:d6:fa:
                    5c:64:b4:9b:77:ce:c9:62:fc:26:ba:cf:6d:70:5e:
                    13:d0:03:9a:df:8d:db:27:b2:18:7c:11:54:8b:71:
                    5e:44:ef:0a:08:60:98:b9:80:3e:6a:50:80:fa:cc:
                    8e:9d:ad:63:a8:62:26:46:63:09:7d:ce:60:eb:48:
                    a4:ea:13:7b:12:88:e1:cf:42:64:62:b7:53:70:9d:
                    5e:63:de:79:01:f0:80:6e:5d:f5:01:ee:9d:2a:c2:
                    f6:53:72:bd:45:23:1d:e5:b5:6b:94:8e:c3:29:dd:
                    89:f1:09:e7:5c:8d:58:de:94:05:f7:3a:00:c8:56:
                    a0:d0:dc:79:11:02:a1:91:08:fc:b9:52:71:6e:67:
                    14:20:06:2f:33:6b:3e:ac:18:fc:1c:f9:a7:98:6d:
                    d5:13:c6:5f:c2:48:5c:e7:93:01:d6:01:a6:4b:6a:
                    92:0f:5e:6d:bb:e2:f7:13:37:ab:27:2a:1f:ee:7c:
                    32:8d:7a:0e:dd:39:88:58:97:9e:38:85:da:b2:fa:
                    28:f5:0d:ac:6e:11:3b:fa:f3:4a:de:16:b7:70:00:
                    94:19:ea:a0:64:73:8b:f6:61:f7:b3:2e:dc:97:ca:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:80:6B:11:1D:EE:A0:D5:CD:AF:4B:72:D6:86:C8:20:90:CD:7F:46
            X509v3 Authority Key Identifier:
                keyid:2C:D9:7A:94:13:B1:CC:B3:10:B4:98:A7:4E:16:2C:20:32:5B:5D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD97A9413B1CCB310B498A74E162C20325B5DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/34352e3232352e3136382e302f32322d3234203d3e20323636393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:d1:3d:c9:18:7d:47:69:80:88:d9:fa:d7:e5:94:8f:25:19:
         4a:1a:5d:30:04:c8:ca:df:6b:30:16:06:4c:13:49:1b:6f:a9:
         9a:78:0f:1a:6e:27:e7:a8:82:be:ea:59:b7:d1:cd:ce:73:a3:
         5a:86:b0:a4:7b:29:74:62:71:1f:e4:dd:e6:3f:0c:70:db:68:
         c8:41:f0:e3:b2:aa:20:b7:78:d6:65:6e:53:05:7b:ef:0a:ab:
         94:d5:a2:de:09:e0:b7:51:41:74:7d:15:0f:89:e1:c2:81:c3:
         2f:58:93:05:ff:8c:b7:67:24:cd:4d:21:52:31:c0:04:53:09:
         e8:3b:f7:24:6e:2a:96:e9:16:a5:8d:8d:d4:67:dd:01:f4:d2:
         ba:5a:92:0d:23:cb:c6:f2:54:48:30:65:1c:c9:06:9d:71:15:
         51:aa:c9:3d:c1:fd:2a:f9:38:b0:6f:19:0d:57:e1:0a:72:a8:
         29:2c:34:c6:d1:cc:10:0b:e4:3a:61:f5:f2:6b:46:75:66:15:
         d7:82:28:1d:12:e6:01:39:1d:8d:7a:ab:8b:1f:99:70:2d:21:
         c6:06:3a:19:39:40:2a:96:e1:05:3d:ae:3f:3e:15:3f:be:3f:
         07:64:3b:08:bf:eb:c6:44:36:18:e8:20:3d:20:20:3f:6e:bb:
         d3:5b:79:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org