Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa
File:                     34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa (raw, json)
Hash identifier:          RFUlI7K1/GGyTGn2YuLoIC7FmyS6H4NkLvAkeaEekso=
Subject key identifier:   02:7F:57:A0:D9:65:8B:06:22:AE:35:30:89:F5:11:D0:D1:19:EE:8D
Certificate issuer:       /CN=2846EF00ABCF957143EA63F63FEA122DA8D3143E
Certificate serial:       451B69849FA1F2DB40FF879E4566357E3B195B9F
Authority key identifier: 28:46:EF:00:AB:CF:95:71:43:EA:63:F6:3F:EA:12:2D:A8:D3:14:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2846EF00ABCF957143EA63F63FEA122DA8D3143E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa
Signing time:             Sat 15 Jul 2023 16:00:00 +0000
ROA not before:           Sat 15 Jul 2023 15:55:00 +0000
ROA not after:            Mon 15 Jul 2024 16:00:00 +0000
asID:                     266979
IP address blocks:        45.226.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1b:69:84:9f:a1:f2:db:40:ff:87:9e:45:66:35:7e:3b:19:5b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2846EF00ABCF957143EA63F63FEA122DA8D3143E
        Validity
            Not Before: Jul 15 15:55:00 2023 GMT
            Not After : Jul 15 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e9:4c:e3:0e:5f:88:a2:fe:75:46:d9:9d:c9:
                    a1:eb:c8:0d:75:37:75:c2:a1:a2:b8:88:d1:05:6f:
                    b6:15:16:f7:d7:49:69:36:a0:b6:1f:af:eb:5a:86:
                    2d:33:54:db:c6:db:e5:32:02:2c:ef:8b:cc:d3:fb:
                    aa:cc:1c:a1:b7:4d:96:c7:bf:bb:f3:1b:6a:f9:c7:
                    60:b5:b2:a1:92:00:39:37:1d:14:87:b2:35:64:c6:
                    52:97:fe:fa:cc:20:0d:88:6d:a1:da:68:a1:48:3f:
                    3f:a4:13:0a:1b:ae:1f:b2:2d:39:14:e7:b7:1c:ca:
                    04:cd:fe:e5:5c:f0:07:49:f7:ee:ca:42:70:5b:5e:
                    4b:f9:60:9b:cf:a2:f4:0e:da:53:64:18:67:98:ce:
                    f4:71:cf:62:97:ae:84:87:96:5e:2c:1d:bf:20:3f:
                    1d:b4:c1:f7:2d:e9:b7:d1:3d:92:60:73:6f:f8:63:
                    1c:bc:87:c9:8e:6d:df:8f:1b:b2:44:32:22:18:7c:
                    69:ce:0c:13:b4:78:81:b4:7c:a6:21:ec:94:02:96:
                    1d:a8:0f:46:fd:e7:73:2e:cb:b4:22:bc:f5:3d:35:
                    ab:05:e1:a2:5a:74:fc:0e:b1:b0:9b:fd:69:4e:60:
                    30:bd:1a:f6:26:28:9c:91:c6:d6:0b:60:b5:20:4a:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7F:57:A0:D9:65:8B:06:22:AE:35:30:89:F5:11:D0:D1:19:EE:8D
            X509v3 Authority Key Identifier:
                keyid:28:46:EF:00:AB:CF:95:71:43:EA:63:F6:3F:EA:12:2D:A8:D3:14:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/2846EF00ABCF957143EA63F63FEA122DA8D3143E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2846EF00ABCF957143EA63F63FEA122DA8D3143E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPDEj9KGGbozz1wSvLnSsXTeiA1GBAjZyjbvSguDwse8/0/34352e3232362e3230302e302f32322d3234203d3e20323636393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:48:06:75:7a:e8:e2:40:89:88:8a:14:9d:df:09:8a:54:27:
         19:0d:43:af:37:14:30:50:5f:ed:a2:7b:ac:cb:5d:83:91:ca:
         7d:4c:aa:0b:3e:93:fd:cc:7c:47:14:5a:ae:28:b4:f4:cf:ba:
         9a:5f:79:ee:71:a7:de:26:7c:d2:4b:44:d0:03:2e:a6:95:14:
         d0:61:45:fb:2b:11:7a:28:4f:40:4b:0b:63:88:0f:21:a3:cf:
         b1:5d:8a:0b:bf:ca:bd:3a:17:7c:98:92:ca:71:ad:59:98:3d:
         29:a9:42:e4:02:ad:db:1a:ed:4f:27:3c:ba:58:73:c3:72:30:
         77:d6:fc:4e:db:d2:64:bc:a9:f5:5a:89:5b:28:ca:58:f1:aa:
         18:84:95:36:98:ed:05:a9:67:57:9b:53:d4:6e:ce:90:85:84:
         29:bb:26:6a:ea:4b:ef:c8:9d:5f:d0:eb:64:5d:1b:55:33:d8:
         0f:16:a3:f1:c4:69:e5:df:a9:4e:a9:1e:f0:a8:e8:ec:a1:f0:
         97:fe:b9:b8:f1:92:68:66:de:45:13:95:45:e1:99:20:fe:86:
         2a:56:75:ed:c0:eb:e1:f6:ab:aa:dd:b0:19:53:00:c7:19:53:
         69:83:12:52:a6:a4:d3:c7:09:0a:9f:b4:2b:23:57:3a:43:cf:
         ab:e3:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org