Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233332e302f32342d3234203d3e20323636393634.roa
File:                     34352e3232352e3233332e302f32342d3234203d3e20323636393634.roa (raw, json)
Hash identifier:          IMS2WpeU/hPdOCsh4kODmHX6yZbpn4ozDuaF9/2RuW8=
Subject key identifier:   2D:D7:CF:B3:F2:2E:BC:E7:70:FE:64:D4:B8:77:03:33:2E:9A:AF:E8
Certificate issuer:       /CN=86820D0B7A959E43A8F413514A96C5825B5B2485
Certificate serial:       05A058605599C84D20B9CBCE5ED5CA16235BB094
Authority key identifier: 86:82:0D:0B:7A:95:9E:43:A8:F4:13:51:4A:96:C5:82:5B:5B:24:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86820D0B7A959E43A8F413514A96C5825B5B2485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233332e302f32342d3234203d3e20323636393634.roa
Signing time:             Mon 20 Mar 2023 20:26:39 +0000
ROA not before:           Mon 20 Mar 2023 20:21:39 +0000
ROA not after:            Mon 18 Mar 2024 20:26:39 +0000
asID:                     266964
IP address blocks:        45.225.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a0:58:60:55:99:c8:4d:20:b9:cb:ce:5e:d5:ca:16:23:5b:b0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86820D0B7A959E43A8F413514A96C5825B5B2485
        Validity
            Not Before: Mar 20 20:21:39 2023 GMT
            Not After : Mar 18 20:26:39 2024 GMT
        Subject: CN=2DD7CFB3F22EBCE770FE64D4B87703332E9AAFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:34:04:dd:a1:2c:89:2e:cf:82:74:c2:b4:
                    3a:a3:a2:eb:56:f3:f7:af:34:3b:66:16:04:23:64:
                    ca:35:d7:43:57:6a:73:58:11:46:d6:2f:7d:57:d9:
                    fb:30:d6:f8:43:fc:47:ce:1d:54:05:b4:c1:25:61:
                    72:bc:e4:4e:5f:9f:3d:53:57:07:12:16:9a:d0:39:
                    ff:17:e4:fc:45:d9:7d:d3:32:16:4d:12:2e:c3:8b:
                    1e:69:07:0d:ce:bc:64:9c:68:de:98:1e:e7:ba:3c:
                    fc:21:cf:69:15:e0:c6:a7:51:a0:39:da:df:69:fc:
                    4f:cc:0c:68:00:3e:6c:17:66:72:db:ce:cb:8e:c2:
                    61:80:4d:5e:cc:5c:9b:44:b2:12:2c:c9:ef:92:e5:
                    6e:7d:3d:97:bd:26:a0:e8:fb:7d:f9:92:f9:00:5d:
                    96:16:20:06:9e:de:8e:89:55:b9:60:ef:69:4c:36:
                    54:d8:f9:5e:03:8d:a3:e8:81:c4:ca:ac:07:15:9e:
                    be:34:80:1a:11:d4:41:b0:4d:53:ab:7c:0b:d8:44:
                    ec:03:1b:62:45:55:6e:aa:9e:e8:f9:be:4b:6e:23:
                    52:86:2f:b5:c9:25:7d:57:33:5e:88:9b:df:ca:92:
                    db:1d:89:9b:7e:73:da:6c:bf:81:76:f5:48:b0:1f:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D7:CF:B3:F2:2E:BC:E7:70:FE:64:D4:B8:77:03:33:2E:9A:AF:E8
            X509v3 Authority Key Identifier:
                keyid:86:82:0D:0B:7A:95:9E:43:A8:F4:13:51:4A:96:C5:82:5B:5B:24:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/86820D0B7A959E43A8F413514A96C5825B5B2485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86820D0B7A959E43A8F413514A96C5825B5B2485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233332e302f32342d3234203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:e3:11:dd:d1:6b:ec:1a:25:c3:73:3c:29:19:b0:a7:5d:
         07:2b:d0:c1:82:ee:61:03:6a:4f:d2:5d:33:93:35:e5:a0:d0:
         35:74:76:51:2e:52:bf:d5:93:dc:68:99:7b:29:b7:6a:16:ee:
         cb:1e:0a:9c:5a:02:42:d7:89:80:fc:d1:18:10:18:c2:2d:df:
         1e:a7:eb:56:e1:57:00:4d:7f:bb:57:1e:50:39:d1:3d:57:b0:
         fa:b2:8d:71:14:fe:40:b0:75:99:fb:91:b7:b5:0a:dc:81:1a:
         4c:cd:21:5c:84:d0:e1:5f:88:7e:42:82:f4:de:a6:b2:6e:70:
         2c:31:5b:74:24:04:2e:8a:fe:92:69:e3:24:58:9a:9b:19:41:
         79:6f:14:86:92:5b:37:4e:e3:95:ee:32:b3:d2:fa:f2:d8:95:
         4d:1c:4c:1e:8b:13:2e:f4:97:31:e5:f2:c9:34:6d:c4:ad:9b:
         ca:56:07:61:e6:12:23:67:b3:25:de:39:68:19:61:cf:9c:05:
         1a:48:c5:2f:87:33:e0:1d:d7:52:fb:74:4e:6c:f8:a3:8f:fa:
         23:69:aa:a3:19:eb:7e:48:d8:28:af:93:4f:64:25:6b:88:c4:
         50:fd:69:e4:98:6e:62:15:19:bd:8b:c3:aa:9f:44:c4:52:26:
         16:ce:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:19 2023 by rpki-client on console-ams.rpki-client.org