Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32322d3232203d3e20323637333034.roa
File:                     34352e3233332e33322e302f32322d3232203d3e20323637333034.roa (raw, json)
Hash identifier:          sQ1I9x8jGKVph3kIeUfA9cbZNgoK/qjgJIU0cgs8F7g=
Subject key identifier:   02:8E:0D:77:6B:51:5E:93:D5:29:C9:57:E2:CD:E8:20:55:F3:E7:BC
Certificate issuer:       /CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
Certificate serial:       0A7517DFAE5377E261FDAD8F245E380DBCB24B7B
Authority key identifier: DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32322d3232203d3e20323637333034.roa
Signing time:             Thu 14 Jul 2022 15:00:01 +0000
ROA not before:           Thu 14 Jul 2022 14:55:01 +0000
ROA not after:            Fri 14 Jul 2023 15:00:01 +0000
asID:                     267304
IP address blocks:        45.233.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:75:17:df:ae:53:77:e2:61:fd:ad:8f:24:5e:38:0d:bc:b2:4b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
        Validity
            Not Before: Jul 14 14:55:01 2022 GMT
            Not After : Jul 14 15:00:01 2023 GMT
        Subject: CN=3082010A0282010100B9FA3D4449EC17F0E7375A800027A7D1E09E5D952DA6A569583544DE0CB524C0C30DB2E69E2C1DD4A892BADC687DD15620AEE5355871D8975D6034E4CCC3D6DBA5CED85559044DBB12A26C8EACB625F958C518C5AD515A30A810B908957AFC732867A9F3584AD8BD8FA578890C5FB9F67FA1EC1B7FDD00FE6FF23747322F329BFCB4DDF293E819C6FA96148160AE8BA53451D876385BC4C691058EAD8F747A2091E6E3970D02596A360AB0B8BC91BC3F189344F56C062FEF7F1B2AA38BE9C7A219D4546A722CA4E5915760A4AB4527D11446AF0383B06EB5EEB278EEE1781B5D802CB2023561550B3946E165C04B6105755B314DCDBF89FB4E70AF0BFF779A5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:3d:44:49:ec:17:f0:e7:37:5a:80:00:27:
                    a7:d1:e0:9e:5d:95:2d:a6:a5:69:58:35:44:de:0c:
                    b5:24:c0:c3:0d:b2:e6:9e:2c:1d:d4:a8:92:ba:dc:
                    68:7d:d1:56:20:ae:e5:35:58:71:d8:97:5d:60:34:
                    e4:cc:c3:d6:db:a5:ce:d8:55:59:04:4d:bb:12:a2:
                    6c:8e:ac:b6:25:f9:58:c5:18:c5:ad:51:5a:30:a8:
                    10:b9:08:95:7a:fc:73:28:67:a9:f3:58:4a:d8:bd:
                    8f:a5:78:89:0c:5f:b9:f6:7f:a1:ec:1b:7f:dd:00:
                    fe:6f:f2:37:47:32:2f:32:9b:fc:b4:dd:f2:93:e8:
                    19:c6:fa:96:14:81:60:ae:8b:a5:34:51:d8:76:38:
                    5b:c4:c6:91:05:8e:ad:8f:74:7a:20:91:e6:e3:97:
                    0d:02:59:6a:36:0a:b0:b8:bc:91:bc:3f:18:93:44:
                    f5:6c:06:2f:ef:7f:1b:2a:a3:8b:e9:c7:a2:19:d4:
                    54:6a:72:2c:a4:e5:91:57:60:a4:ab:45:27:d1:14:
                    46:af:03:83:b0:6e:b5:ee:b2:78:ee:e1:78:1b:5d:
                    80:2c:b2:02:35:61:55:0b:39:46:e1:65:c0:4b:61:
                    05:75:5b:31:4d:cd:bf:89:fb:4e:70:af:0b:ff:77:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8E:0D:77:6B:51:5E:93:D5:29:C9:57:E2:CD:E8:20:55:F3:E7:BC
            X509v3 Authority Key Identifier:
                keyid:DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32322d3232203d3e20323637333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:b7:fa:6d:59:83:a7:3f:6e:b7:c7:a2:92:34:55:04:27:c0:
         b9:d2:46:7f:d9:ca:fb:dd:66:5a:cb:65:c2:97:18:06:e9:15:
         4d:81:5a:88:1e:ab:5a:f4:3d:11:9b:5b:7d:80:33:2b:ca:16:
         86:58:d4:e5:75:9a:82:13:60:96:e5:4d:69:94:25:d6:eb:4b:
         08:1e:c1:2b:1a:3a:cc:8e:0b:e2:c0:95:48:24:65:ba:97:3f:
         b8:74:99:0c:a9:87:47:b5:73:be:e2:ae:b5:f9:7e:2a:5c:7b:
         d9:21:a7:87:fa:0f:93:7a:92:67:14:69:e7:e1:58:e4:46:cb:
         a2:ce:15:82:a8:0b:7b:88:06:1e:e7:9e:7c:d7:20:a1:07:d8:
         3a:14:81:61:b2:b5:47:e6:39:21:06:49:97:c3:c7:65:d2:5c:
         8f:e0:33:8d:9c:51:6b:06:ea:14:c1:55:a9:df:e1:3f:1b:ec:
         39:dd:b5:ac:59:9c:bd:75:cd:1b:53:11:5a:9e:86:05:dd:b4:
         09:b0:e4:fb:98:7f:24:b3:30:d4:20:9d:e5:71:62:33:70:c3:
         dc:d3:de:bf:25:45:4b:80:7d:8c:1a:3d:a7:4c:a0:d4:87:21:
         09:e8:5b:e0:f7:8f:78:d5:93:b4:8d:99:2a:27:29:66:92:16:
         2a:90:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org