Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233322e302f32332d3233203d3e20323636393634.roa
File:                     34352e3232352e3233322e302f32332d3233203d3e20323636393634.roa (raw, json)
Hash identifier:          BdOYopWx2YQJ7bGwLJytgwVuVFC8fwYcf8C4zMUUxVA=
Subject key identifier:   26:10:EB:4A:F0:F6:C5:EC:94:97:65:A1:94:C5:ED:87:B0:3F:59:77
Certificate issuer:       /CN=DB3E50975F2B07750187C76A4B0E0E6B4A2692BF
Certificate serial:       242A215FCAEDCE11AF8843AB2FDDF12E5351EE40
Authority key identifier: DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233322e302f32332d3233203d3e20323636393634.roa
Signing time:             Wed 20 Mar 2024 18:10:21 +0000
ROA not before:           Wed 20 Mar 2024 18:05:21 +0000
ROA not after:            Wed 19 Mar 2025 18:10:21 +0000
asID:                     266964
IP address blocks:        45.225.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2a:21:5f:ca:ed:ce:11:af:88:43:ab:2f:dd:f1:2e:53:51:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3E50975F2B07750187C76A4B0E0E6B4A2692BF
        Validity
            Not Before: Mar 20 18:05:21 2024 GMT
            Not After : Mar 19 18:10:21 2025 GMT
        Subject: CN=2610EB4AF0F6C5EC949765A194C5ED87B03F5977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b8:b2:20:76:3e:c1:e3:4c:41:f9:0c:5e:3b:
                    4e:9a:b4:b5:c5:4e:ee:74:a3:d7:8f:e9:54:85:9c:
                    84:3a:e1:a0:1d:85:a2:35:4b:d4:09:b2:54:f0:34:
                    9a:e3:5c:17:42:02:3c:3c:32:f3:6d:f0:f5:ec:11:
                    04:23:2c:f3:1d:09:09:88:e4:58:71:b8:a2:5f:4c:
                    a8:c2:e9:5e:a5:1a:14:fb:e6:b4:17:9b:dd:70:09:
                    b7:b8:13:64:7f:12:10:33:80:e4:45:74:db:c9:e5:
                    98:f6:d0:42:e0:ef:47:d3:63:45:3f:be:7d:13:3e:
                    25:c3:8d:e2:aa:b1:71:c1:d4:a9:3d:17:11:59:cc:
                    21:44:ef:9a:7c:03:e7:3d:16:ab:3a:2b:91:a6:57:
                    89:58:c4:e9:75:4e:d2:6d:17:c4:b6:e9:cf:3a:42:
                    e3:f8:c3:54:62:80:3d:15:f2:50:65:cd:8e:ff:72:
                    eb:e5:9d:f7:09:1b:79:06:a8:e3:16:11:3b:51:81:
                    55:ab:b4:97:62:b0:6e:dc:89:af:87:f1:8d:eb:6a:
                    ea:8b:5a:a5:3c:30:43:b9:dd:a4:18:13:24:67:3f:
                    d2:db:ed:cb:3f:15:08:89:9a:75:1b:fe:5b:75:44:
                    fb:4c:d4:80:0b:47:55:12:84:5a:82:dd:96:45:6c:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:10:EB:4A:F0:F6:C5:EC:94:97:65:A1:94:C5:ED:87:B0:3F:59:77
            X509v3 Authority Key Identifier:
                keyid:DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233322e302f32332d3233203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:d3:73:bd:6e:76:53:3e:ac:fe:bd:b3:a7:d1:56:d9:ea:26:
         9c:75:44:70:a7:43:2d:0f:8d:7a:75:c5:ce:75:5e:01:1f:d8:
         55:c7:a3:0e:4d:c7:90:ba:71:80:90:15:00:41:f2:ac:57:f0:
         e7:46:46:60:76:b2:c1:59:e7:da:8e:a0:43:1d:4c:53:d9:66:
         f0:3e:b0:67:8f:8d:e6:09:7e:29:7a:f2:b5:1b:fe:ca:4e:14:
         f7:ff:78:7c:98:80:e4:ee:6b:70:2b:9b:b4:6e:89:01:35:99:
         6e:ee:8a:23:1d:8b:12:9f:7d:e1:be:ea:8a:fc:ab:e4:59:cd:
         5b:86:1b:59:dd:37:3e:35:ab:6d:ab:d3:e6:4a:89:23:b1:4a:
         16:8c:21:4f:ad:80:74:e4:cd:28:e0:7c:84:6a:e9:3f:f7:4c:
         42:e6:74:e0:a6:d2:f4:fd:7a:ba:cd:43:8c:ee:86:b8:d1:b9:
         45:e8:1e:af:ce:05:a9:10:38:0f:0b:7f:ac:33:fc:1d:77:e4:
         5c:6d:22:7f:f5:21:49:1e:a5:df:b6:bb:1f:da:9c:44:fc:8b:
         3a:50:1d:37:c9:5c:dd:6e:44:05:3d:29:28:92:6d:ba:e5:a6:
         85:a8:0d:22:f4:a3:e3:72:43:88:75:fa:1c:ab:23:bd:52:23:
         e5:e4:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org