Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32302e302f32342d3234203d3e20323638323737.roa
File:                     34352e3233372e32302e302f32342d3234203d3e20323638323737.roa (raw, json)
Hash identifier:          ndODx3jBd2scrfWqyYsJcuIGX96TKmtI179jBSB3bgA=
Subject key identifier:   1D:B0:80:05:9A:E4:D0:AA:91:29:EA:74:52:7D:20:50:E4:DD:82:A1
Certificate issuer:       /CN=E9F384C706E4A5CEF9A232E6DB03918B52C871F1
Certificate serial:       4EA3B5787B804C4E1C5AE5F4E7139D16A92F0F1B
Authority key identifier: E9:F3:84:C7:06:E4:A5:CE:F9:A2:32:E6:DB:03:91:8B:52:C8:71:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32302e302f32342d3234203d3e20323638323737.roa
Signing time:             Sun 20 Aug 2023 15:42:53 +0000
ROA not before:           Sun 20 Aug 2023 15:37:53 +0000
ROA not after:            Sun 18 Aug 2024 15:42:53 +0000
asID:                     268277
IP address blocks:        45.237.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a3:b5:78:7b:80:4c:4e:1c:5a:e5:f4:e7:13:9d:16:a9:2f:0f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F384C706E4A5CEF9A232E6DB03918B52C871F1
        Validity
            Not Before: Aug 20 15:37:53 2023 GMT
            Not After : Aug 18 15:42:53 2024 GMT
        Subject: CN=1DB080059AE4D0AA9129EA74527D2050E4DD82A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:df:fc:06:93:bd:5f:28:03:7e:ca:ce:ac:
                    b3:20:47:e3:4d:80:b2:7e:f5:c2:90:4a:b4:e9:54:
                    33:4d:d6:a0:37:2e:f1:a4:a6:c9:d6:96:19:42:35:
                    7c:63:70:88:69:55:8d:8e:f6:88:3b:41:a8:3a:41:
                    40:74:06:1c:13:83:7f:26:05:73:90:4d:da:4a:e4:
                    83:f6:72:87:aa:59:17:81:a8:4b:d4:ee:48:7d:b7:
                    83:29:ed:1b:9e:3a:29:9c:32:be:c4:f0:49:1e:a2:
                    2f:a1:8a:99:a2:66:bc:ce:e1:01:4a:58:be:5b:a9:
                    e7:70:52:7d:65:1e:e9:72:78:25:a2:dc:dd:7f:9c:
                    15:ea:d4:06:68:9e:3f:0f:46:0b:d0:4a:57:67:22:
                    5a:6f:d9:be:29:94:b0:a5:47:2b:34:54:6d:31:b1:
                    2b:60:74:2f:83:cd:d9:33:73:6b:6d:ad:96:ca:5b:
                    25:72:61:b1:ab:c2:5c:0b:a1:2f:80:c4:7d:f8:4c:
                    19:96:0c:29:19:4b:6b:fb:c3:8d:2d:89:4a:8d:2d:
                    45:e8:ea:40:58:7c:1f:fe:79:8b:be:6f:dc:c3:84:
                    29:a7:4f:19:68:4f:c3:37:15:8c:2e:ab:2f:a2:bc:
                    b4:9b:5c:d6:74:c4:7c:ac:c5:a4:75:a6:63:21:54:
                    2d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B0:80:05:9A:E4:D0:AA:91:29:EA:74:52:7D:20:50:E4:DD:82:A1
            X509v3 Authority Key Identifier:
                keyid:E9:F3:84:C7:06:E4:A5:CE:F9:A2:32:E6:DB:03:91:8B:52:C8:71:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32302e302f32342d3234203d3e20323638323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:26:07:81:fe:dd:43:d9:3d:be:8e:51:0c:28:06:62:70:b5:
         9c:a6:5a:5b:bd:d2:dc:76:0a:32:5a:99:44:d7:15:de:98:79:
         e0:a7:5c:2e:69:9e:a5:ee:d2:da:24:a0:93:ad:b5:83:5e:d2:
         29:8c:e0:cf:f5:d7:e8:82:55:57:58:c6:a9:62:9b:10:eb:73:
         5d:58:2b:90:ab:93:b3:29:b3:9d:14:f4:3a:ed:2a:f4:81:a3:
         36:81:3f:14:0c:87:a3:46:34:bb:71:a3:56:c3:ac:ca:5a:7a:
         2f:63:47:9c:e8:b3:fe:71:94:60:0c:24:dc:b9:ee:64:cb:50:
         a0:54:e5:6c:02:e9:b0:bf:15:bb:e9:7c:74:d6:ad:6e:cc:d8:
         df:42:90:04:90:0e:58:f2:7c:fe:ec:0d:ee:0c:e7:3b:29:7f:
         28:23:96:7e:82:03:fc:38:e1:a2:94:cd:48:40:41:54:a0:c1:
         79:e7:00:35:f0:51:ab:a2:90:19:0f:93:d4:6d:1c:14:27:f0:
         31:db:4a:27:92:1c:fc:a1:53:a3:82:9e:de:4c:5a:94:a1:fc:
         46:f3:42:78:a8:96:b7:25:ca:4a:4e:fa:5e:40:62:9b:fb:30:
         7d:35:d1:10:a3:6f:a6:d0:ea:d6:b0:69:f4:a3:05:9f:35:89:
         09:72:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org