Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/34352e3233382e39362e302f32322d3234203d3e203532333230.roa
File:                     34352e3233382e39362e302f32322d3234203d3e203532333230.roa (raw, json)
Hash identifier:          +08yyQ4OKGpW6/rmZyPrTpBnZEYwmaG/GoPWG1YZ0DY=
Subject key identifier:   2C:17:68:F1:CA:E1:ED:55:DB:15:05:E2:30:9A:7E:8F:6F:D1:17:4D
Certificate issuer:       /CN=7CE899C5D216A4124AAE990089106D0A238C23BE
Certificate serial:       50F516F6DBAF940FEA129C7683D1D5843C505243
Authority key identifier: 7C:E8:99:C5:D2:16:A4:12:4A:AE:99:00:89:10:6D:0A:23:8C:23:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE899C5D216A4124AAE990089106D0A238C23BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/34352e3233382e39362e302f32322d3234203d3e203532333230.roa
Signing time:             Fri 27 Oct 2023 14:00:50 +0000
ROA not before:           Fri 27 Oct 2023 13:55:50 +0000
ROA not after:            Fri 25 Oct 2024 14:00:50 +0000
asID:                     52320
IP address blocks:        45.238.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:16:f6:db:af:94:0f:ea:12:9c:76:83:d1:d5:84:3c:50:52:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE899C5D216A4124AAE990089106D0A238C23BE
        Validity
            Not Before: Oct 27 13:55:50 2023 GMT
            Not After : Oct 25 14:00:50 2024 GMT
        Subject: CN=2C1768F1CAE1ED55DB1505E2309A7E8F6FD1174D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:90:a1:67:a8:30:e1:c4:56:e4:24:aa:56:
                    58:c8:84:c5:4a:b8:5a:a1:7e:62:92:24:9b:9b:9e:
                    cf:54:91:8f:72:96:9f:b2:15:21:8d:82:1e:74:c5:
                    95:d4:0d:14:ef:64:6b:fb:d8:a4:5f:59:38:82:71:
                    1a:8e:d3:09:d9:eb:8b:ee:d9:24:54:98:d6:b9:67:
                    1b:92:bd:e3:0f:43:17:a9:3b:ce:63:fe:e9:76:18:
                    28:79:ca:79:44:e1:e7:91:77:a1:65:d6:8c:fb:8f:
                    af:d1:52:10:e1:f9:3b:4f:3b:84:4a:2a:6b:c5:0d:
                    49:22:71:b1:7c:e3:82:36:c2:42:46:67:67:37:99:
                    ca:bf:cb:8a:5e:78:e6:1e:2d:dc:93:16:1f:52:18:
                    00:99:a3:90:4c:58:b9:37:c2:c7:7f:3c:65:9a:a5:
                    d5:8e:c6:f5:29:ac:92:b0:a6:2e:03:b5:30:3f:11:
                    0e:e4:e5:39:d1:2a:61:6e:af:47:1e:3b:dd:21:2f:
                    cf:46:db:8e:84:9f:7e:5f:b7:7b:4b:1d:72:cd:96:
                    43:63:98:31:b9:d4:18:6d:21:31:5c:85:07:a6:ef:
                    73:06:4a:83:e5:f3:69:db:bd:c7:14:9c:14:b2:a5:
                    cc:5c:a9:4e:b2:f2:e1:54:25:15:5a:48:30:46:c3:
                    6d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:68:F1:CA:E1:ED:55:DB:15:05:E2:30:9A:7E:8F:6F:D1:17:4D
            X509v3 Authority Key Identifier:
                keyid:7C:E8:99:C5:D2:16:A4:12:4A:AE:99:00:89:10:6D:0A:23:8C:23:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/7CE899C5D216A4124AAE990089106D0A238C23BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE899C5D216A4124AAE990089106D0A238C23BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkpfEHCQWmV4fY35MbQAgut9Y1ykwJnZNZ7DCZNg5gMD/0/34352e3233382e39362e302f32322d3234203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:55:42:39:1d:ad:5e:9d:c9:83:2a:e8:87:ba:10:e0:ab:
         12:bf:46:86:a1:0f:c6:c7:8f:c4:f2:27:c7:23:15:9a:ce:85:
         fc:5a:b3:15:31:b6:a4:c3:29:27:2e:3e:10:47:0c:0f:ac:f6:
         13:29:e8:8c:27:1a:f7:33:ab:42:f1:43:b4:69:f7:7a:48:46:
         09:c2:0c:12:c8:6d:b3:6b:d2:5a:d7:f1:28:bf:c2:08:f5:46:
         66:47:27:cd:e4:98:ac:6d:11:a9:df:ad:05:55:b0:41:e1:43:
         39:0a:62:b9:d7:59:83:62:24:58:3a:f9:0c:a8:50:a4:ca:14:
         00:f7:67:6a:8e:5c:58:a0:28:0a:12:55:50:4c:84:b9:33:d8:
         e3:93:4b:3f:f8:90:3d:b8:c7:e5:03:60:51:24:06:df:b1:f4:
         3c:cb:08:52:00:8d:18:85:03:9e:a0:69:6c:0c:c3:1e:f5:18:
         2d:a8:cb:fc:b4:20:d1:f0:e2:e1:36:fa:06:5a:0a:6f:bf:28:
         35:e9:c3:cf:e2:d0:a3:29:fd:c6:a0:aa:39:e6:f2:bf:32:7b:
         95:33:8a:1c:9e:53:97:21:c6:26:3c:88:d4:f2:24:87:ed:32:
         a1:e4:8f:e0:2d:b8:c9:04:6e:0f:ce:b1:db:ca:ba:e2:83:fd:
         24:a3:ed:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 00:32:27 2023 by rpki-client on console-ams.rpki-client.org