Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33372e302f32342d3234203d3e20323636303830.roa
File:                     34352e352e33372e302f32342d3234203d3e20323636303830.roa (raw, json)
Hash identifier:          pLJ9pQpSFL/ABVBrvXcyDzgMtud5EgkD0YP1rGsbwP0=
Subject key identifier:   D0:AE:22:49:E8:0B:77:BA:73:7F:4C:B3:D7:E2:0C:DD:F9:A3:98:12
Certificate issuer:       /CN=332114655712F86B1FFE277DAA3E55AC2887C145
Certificate serial:       7157EFC0D730E452216A845F23712EC73535E756
Authority key identifier: 33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33372e302f32342d3234203d3e20323636303830.roa
Signing time:             Fri 15 Sep 2023 12:42:08 +0000
ROA not before:           Fri 15 Sep 2023 12:37:08 +0000
ROA not after:            Fri 13 Sep 2024 12:42:08 +0000
asID:                     266080
IP address blocks:        45.5.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:57:ef:c0:d7:30:e4:52:21:6a:84:5f:23:71:2e:c7:35:35:e7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332114655712F86B1FFE277DAA3E55AC2887C145
        Validity
            Not Before: Sep 15 12:37:08 2023 GMT
            Not After : Sep 13 12:42:08 2024 GMT
        Subject: CN=D0AE2249E80B77BA737F4CB3D7E20CDDF9A39812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:74:60:9c:ac:fe:d3:5c:a9:c1:54:10:1c:
                    77:9a:e5:55:1f:50:8c:89:46:69:36:06:08:25:cd:
                    e4:4c:c3:7f:7a:33:cf:78:6f:4b:dd:1e:5d:6c:ba:
                    e7:d4:9d:ad:b3:44:37:d9:74:49:9f:f0:3f:19:46:
                    76:cd:ba:c6:30:38:b7:d3:aa:5a:a2:06:36:6e:08:
                    36:27:c4:45:a9:02:be:fe:58:ec:5c:e5:1f:7b:91:
                    47:11:13:8d:0c:fa:27:ad:4e:0a:3d:69:f3:21:08:
                    84:5e:bd:5c:15:07:02:eb:03:95:00:e3:28:8e:7e:
                    20:75:1c:bf:ae:e0:28:21:04:b6:f4:b2:84:eb:96:
                    76:95:35:4f:e9:5b:3b:0d:13:e9:17:97:68:28:fc:
                    36:dc:fc:7b:4d:be:47:c1:8e:f0:14:83:f8:60:19:
                    8b:45:9e:7e:cc:8f:8f:2d:4e:1f:78:c8:f8:70:63:
                    7d:81:32:01:ad:bf:a6:c6:6b:5a:5a:9c:e7:a5:86:
                    97:68:2b:13:51:24:a6:4a:fe:2a:83:bf:52:88:09:
                    d6:d2:66:e0:44:0a:f5:ee:4f:6a:6e:11:de:79:f1:
                    a1:70:32:97:9e:41:dd:cb:4b:26:78:36:ac:4c:62:
                    5a:d4:0c:fd:3b:70:b3:a2:52:48:7d:43:bb:63:fc:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AE:22:49:E8:0B:77:BA:73:7F:4C:B3:D7:E2:0C:DD:F9:A3:98:12
            X509v3 Authority Key Identifier:
                keyid:33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/332114655712F86B1FFE277DAA3E55AC2887C145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33372e302f32342d3234203d3e20323636303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:6c:61:08:19:d1:e9:3d:54:f4:23:7d:b5:a5:f9:ce:0d:
         b8:13:9f:3a:d6:4b:5b:2d:78:40:78:fd:0e:13:9d:6b:6b:c5:
         0b:60:c5:79:36:e9:26:da:3c:59:cd:d2:f6:13:b8:63:0c:9a:
         bb:d0:2b:94:a5:d2:0d:38:0d:a5:1c:e2:b6:72:0f:72:2f:f2:
         07:20:d1:32:b4:d0:6e:e3:36:ee:fe:96:48:78:7f:83:d3:cc:
         52:1c:da:06:83:d2:55:7a:23:67:ab:ec:37:ff:be:e4:d8:57:
         ae:30:aa:d9:32:88:2a:62:ef:76:ac:53:f8:56:23:83:74:66:
         a4:9f:60:77:ad:49:aa:6d:73:92:b2:5f:2e:c6:1c:84:bb:0b:
         bd:7f:df:4b:47:8a:62:e3:3a:4f:ce:89:62:36:15:c9:69:e5:
         02:74:3e:55:63:23:49:d9:e0:61:84:0b:d5:b3:da:20:56:e4:
         29:fd:45:98:a2:38:0c:bc:ad:3d:5c:a6:c0:e3:13:79:3b:a6:
         8d:c1:a7:d0:0e:d3:b2:65:44:79:ca:2b:a4:55:8e:d3:c9:83:
         30:0b:4c:a3:8b:64:1a:6f:71:5a:1d:fd:97:9a:09:bf:65:2d:
         1e:0d:6d:2b:f1:b8:45:48:38:99:f9:4e:e5:f0:18:1d:01:c5:
         b4:5a:c3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org