Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/34352e3233342e3135322e302f32322d3332203d3e20323637333638.roa
File:                     34352e3233342e3135322e302f32322d3332203d3e20323637333638.roa (raw, json)
Hash identifier:          rJGJbYW0ZW1w0ohwYNOchsjBhKIdmfLFJZ6NJIn/u8E=
Subject key identifier:   91:33:89:39:E7:E7:09:94:77:79:2C:0E:D0:7D:2D:22:A3:BE:C3:2C
Certificate issuer:       /CN=D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB
Certificate serial:       5966D3FC86F0CDA71D2C18E3FBF32F8AA7188BFC
Authority key identifier: D0:B0:FF:C7:92:74:C4:84:9B:11:6D:8C:33:1A:C1:A9:D5:B3:3E:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/34352e3233342e3135322e302f32322d3332203d3e20323637333638.roa
Signing time:             Sat 17 Feb 2024 06:23:53 +0000
ROA not before:           Sat 17 Feb 2024 06:18:53 +0000
ROA not after:            Sat 15 Feb 2025 06:23:53 +0000
asID:                     267368
IP address blocks:        45.234.152.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:66:d3:fc:86:f0:cd:a7:1d:2c:18:e3:fb:f3:2f:8a:a7:18:8b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB
        Validity
            Not Before: Feb 17 06:18:53 2024 GMT
            Not After : Feb 15 06:23:53 2025 GMT
        Subject: CN=91338939E7E7099477792C0ED07D2D22A3BEC32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:fa:3d:8c:35:97:94:07:87:03:d0:ff:99:
                    99:15:e7:9b:52:c0:31:4b:72:fb:90:0a:cf:cf:64:
                    ce:b6:2e:78:32:91:66:2f:d0:d7:a6:2a:e2:5b:99:
                    90:8f:c3:67:3a:02:4b:a1:dd:c1:90:5b:06:dd:c8:
                    ce:7a:e5:b4:5b:c1:6e:57:a1:a5:31:b7:32:85:b4:
                    3f:03:8a:ce:40:8d:fb:c9:0a:d2:c8:de:3f:50:76:
                    ee:c0:7d:a5:bb:27:e0:d6:d1:b7:a1:4a:dd:20:8e:
                    65:2c:e8:6d:2b:12:8d:e1:90:cd:e1:53:96:cd:53:
                    a8:47:33:57:d1:dd:9f:cc:ad:c7:5c:99:29:99:4f:
                    28:a9:95:16:42:e0:de:04:04:61:ee:50:9b:d4:a4:
                    9c:e2:e7:82:6e:81:e8:e7:db:a7:27:40:0f:9e:1b:
                    a2:2d:fb:9d:e4:bb:c0:6e:0d:3f:68:c5:4f:5a:99:
                    21:cb:84:a5:c3:8c:dd:da:ac:a8:ad:37:cd:fa:9c:
                    9c:d7:19:13:9a:2e:56:ef:83:4f:9b:9e:69:16:28:
                    f6:3e:c2:47:17:71:0d:8a:c3:e0:6f:c8:1e:ec:be:
                    c4:fd:c6:86:5a:bb:4e:42:21:0e:6f:e6:d5:e0:5f:
                    1c:1a:67:bd:78:0c:25:45:f3:22:df:2b:a3:96:7d:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:33:89:39:E7:E7:09:94:77:79:2C:0E:D0:7D:2D:22:A3:BE:C3:2C
            X509v3 Authority Key Identifier:
                keyid:D0:B0:FF:C7:92:74:C4:84:9B:11:6D:8C:33:1A:C1:A9:D5:B3:3E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0B0FFC79274C4849B116D8C331AC1A9D5B33EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjmRGrgbwqhMRq9Tkk6bKhJu89krbqDdjh6DtNQZTvtb/0/34352e3233342e3135322e302f32322d3332203d3e20323637333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:47:36:8e:73:d0:12:7e:59:ee:6f:9d:0c:bb:9e:55:c2:13:
         1b:5c:49:1f:f7:15:2c:de:f2:6e:98:bf:a1:0e:5b:97:79:6f:
         17:3c:c3:08:db:b7:5f:bb:e7:dc:c2:47:38:fc:9e:50:27:ec:
         4b:da:a9:e0:1f:56:02:b5:e4:7b:05:42:3a:d8:9e:a6:15:c3:
         9a:c7:4e:61:0f:6d:30:5b:20:e8:eb:37:90:68:98:e0:a2:69:
         1a:77:f4:c9:b1:fc:b6:bc:b3:c7:4d:a5:bf:2e:41:4d:32:39:
         df:55:30:7d:0c:9b:ff:84:ea:b8:c4:78:81:4e:82:37:db:bf:
         96:6e:2b:67:2d:39:e2:f8:ec:68:c9:cc:4b:fc:da:93:df:cd:
         78:78:55:46:1b:be:b9:94:56:7d:61:bb:83:12:e1:da:c1:ba:
         d5:31:41:d6:2b:42:95:6d:b1:91:b5:a1:d8:c7:53:8e:66:93:
         f9:ef:27:c9:92:4a:a3:6e:c5:c0:52:bd:9c:b5:00:e9:74:dc:
         49:c9:ea:51:9c:25:3a:37:e3:ef:c3:a7:26:2f:4a:75:7f:bb:
         93:46:fd:6f:66:ef:7b:5e:35:bb:04:f1:96:df:ee:5d:26:57:
         fe:ea:e3:eb:04:72:47:3c:dc:38:66:75:e1:d5:0a:9a:71:e8:
         b4:01:83:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org