Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa
File:                     34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa (raw, json)
Hash identifier:          WOiumSYXVOnYjWc58DQw+EGpA5o89oOYtB7r8OxOLyE=
Subject key identifier:   93:73:DC:A2:58:3E:F7:CB:5D:51:72:D6:BF:BC:B9:CF:05:07:F8:79
Certificate issuer:       /CN=DB3E50975F2B07750187C76A4B0E0E6B4A2692BF
Certificate serial:       2DD2CC52B58FCE666643626D2F121BAD80249F41
Authority key identifier: DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa
Signing time:             Wed 20 Mar 2024 18:10:21 +0000
ROA not before:           Wed 20 Mar 2024 18:05:21 +0000
ROA not after:            Wed 19 Mar 2025 18:10:21 +0000
asID:                     266964
IP address blocks:        45.225.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d2:cc:52:b5:8f:ce:66:66:43:62:6d:2f:12:1b:ad:80:24:9f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3E50975F2B07750187C76A4B0E0E6B4A2692BF
        Validity
            Not Before: Mar 20 18:05:21 2024 GMT
            Not After : Mar 19 18:10:21 2025 GMT
        Subject: CN=9373DCA2583EF7CB5D5172D6BFBCB9CF0507F879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:3c:8d:22:1e:2b:2a:96:0e:40:41:21:a6:97:
                    27:61:bc:4b:73:c6:2a:31:b8:3a:68:a3:32:96:31:
                    f3:ae:fd:f8:86:2d:7b:4e:bc:0e:e3:4f:3a:ad:7c:
                    32:d9:b1:0b:7c:47:13:27:82:4e:04:4d:e6:23:3f:
                    65:1a:01:1e:3e:16:be:e5:2c:84:35:29:ce:ff:7a:
                    dc:97:c0:4b:c3:a3:0d:20:6a:4d:d1:37:37:69:55:
                    21:08:bc:e4:d8:34:54:71:28:83:dc:f1:12:2a:ea:
                    42:b9:1f:0f:ad:da:2a:51:b1:ed:56:b2:74:53:5f:
                    8e:65:1c:00:5b:2a:07:62:18:7c:62:b5:dc:24:03:
                    64:26:44:2a:3b:7b:6f:cd:00:be:ff:9c:de:8e:5c:
                    b0:25:3b:fb:f0:58:a9:7e:47:8e:e4:66:5e:4c:e8:
                    d9:b7:5b:f9:0b:4a:4a:bd:ee:6a:c4:5c:7e:b8:9c:
                    2c:d4:f0:98:30:e3:f9:54:25:45:85:81:14:8b:c5:
                    cd:9d:89:1a:29:39:3d:a4:1d:7c:4c:bf:b1:9c:9c:
                    0b:7c:8a:ac:36:a6:f2:be:47:21:16:4c:2b:b8:d6:
                    6b:e1:58:98:cf:c6:3e:4e:01:f3:21:9c:1e:c6:ab:
                    49:a1:6b:b2:e4:80:c7:de:fe:f1:08:72:ad:bd:29:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:73:DC:A2:58:3E:F7:CB:5D:51:72:D6:BF:BC:B9:CF:05:07:F8:79
            X509v3 Authority Key Identifier:
                keyid:DB:3E:50:97:5F:2B:07:75:01:87:C7:6A:4B:0E:0E:6B:4A:26:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB3E50975F2B07750187C76A4B0E0E6B4A2692BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/34352e3232352e3233342e302f32332d3233203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:fe:85:4c:18:fe:50:99:14:a7:0f:b3:39:a8:99:ce:c7:
         f7:3d:fc:f0:39:9b:c7:9a:62:ef:f2:34:a9:17:de:40:93:b3:
         5f:a3:d0:4b:6a:34:ff:a7:35:e9:c8:22:5f:bf:3b:d6:11:d9:
         c0:a4:51:28:67:cc:41:51:95:8e:85:65:ef:a6:e6:ae:3c:60:
         23:9f:6e:6a:31:08:23:ea:11:45:55:44:ed:95:92:6d:b4:36:
         5d:99:12:6a:db:39:70:d8:2f:00:3e:86:95:69:6f:79:4c:aa:
         68:85:ce:41:60:14:b6:1a:26:2c:94:ea:ec:e5:0a:b0:8b:f6:
         16:2f:c9:9c:e1:ad:43:45:5b:c2:82:55:05:f8:24:85:d6:8c:
         9b:22:22:7e:57:e2:a4:d9:4a:89:45:a4:2a:9e:97:cb:0f:82:
         a1:ad:7c:ac:dc:bf:25:8b:ce:6f:02:70:44:64:b3:f8:4c:87:
         33:7e:bc:19:8f:3c:53:3d:78:44:1c:ec:40:e4:d7:9a:23:f1:
         39:ca:65:0b:11:cc:fc:4e:ed:e7:0f:da:0b:13:a3:9a:28:ca:
         5d:1f:8c:31:d5:cf:69:7a:dd:fc:27:bc:a2:f8:dc:14:99:8e:
         5e:59:fd:22:e5:a8:8f:e1:41:d9:f2:79:97:b6:65:6b:50:4e:
         09:85:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org