Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32332d3233203d3e20323637333034.roa
File:                     34352e3233332e33322e302f32332d3233203d3e20323637333034.roa (raw, json)
Hash identifier:          tcqaZhFW6bBN7UvYIgoJpmSdZ1qva8B5L91lDqdqAZs=
Subject key identifier:   0D:1F:8A:56:26:4E:93:7B:7B:E6:E9:E6:74:1C:7C:5C:96:52:E0:EC
Certificate issuer:       /CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
Certificate serial:       255385C8D9483A0F28E1C6AC8BFE2C962DE081BA
Authority key identifier: DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32332d3233203d3e20323637333034.roa
Signing time:             Tue 23 Aug 2022 05:00:00 +0000
ROA not before:           Tue 23 Aug 2022 04:55:00 +0000
ROA not after:            Wed 23 Aug 2023 05:00:00 +0000
asID:                     267304
IP address blocks:        45.233.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:53:85:c8:d9:48:3a:0f:28:e1:c6:ac:8b:fe:2c:96:2d:e0:81:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA84F3349D037892FF53E38ABDA8EBDFA6F8F499
        Validity
            Not Before: Aug 23 04:55:00 2022 GMT
            Not After : Aug 23 05:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:9c:1e:0c:c2:34:3a:1d:30:8d:2a:9d:bd:
                    3a:24:d8:1e:91:af:d7:3d:d5:18:a3:56:28:34:72:
                    0f:30:4d:11:f7:18:73:d2:8a:01:76:3a:0f:85:af:
                    1d:13:b1:d9:f6:30:6b:ac:39:29:5a:9a:89:fc:1c:
                    6b:a5:57:05:8f:2d:f0:95:36:07:3f:14:8b:5a:95:
                    30:21:03:6b:9f:d8:38:3c:92:e9:b3:40:1a:cf:44:
                    0c:b2:25:02:8e:ac:3c:65:10:db:8e:e7:1e:f0:f9:
                    de:f6:87:e7:50:86:29:a4:72:da:f1:81:10:f8:6f:
                    83:73:8a:79:5c:89:51:d4:45:29:91:c3:f6:8c:5b:
                    f9:12:dd:a8:3d:ab:9f:a2:eb:6c:e1:96:5d:61:62:
                    5c:cf:4e:b2:f7:24:ec:3e:b8:3b:08:e3:50:69:ab:
                    bb:ac:f3:49:bf:b7:72:e7:d4:ee:7e:8d:3d:2b:a5:
                    88:d4:b8:97:d4:6f:a6:6b:92:09:0a:c7:51:40:e8:
                    69:d3:aa:1e:24:69:ec:ea:4e:79:37:5c:8b:11:e6:
                    70:8a:45:93:1a:c1:b3:2d:3c:e9:eb:da:ce:71:e1:
                    70:9f:73:aa:be:77:4d:bd:5a:e7:92:f2:ce:32:50:
                    e4:b6:cd:ec:10:51:b3:e1:ee:7c:c6:1f:8e:d4:51:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1F:8A:56:26:4E:93:7B:7B:E6:E9:E6:74:1C:7C:5C:96:52:E0:EC
            X509v3 Authority Key Identifier:
                keyid:DA:84:F3:34:9D:03:78:92:FF:53:E3:8A:BD:A8:EB:DF:A6:F8:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA84F3349D037892FF53E38ABDA8EBDFA6F8F499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32332d3233203d3e20323637333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:fb:2f:9b:dd:00:0c:cc:0b:e8:c8:06:ee:51:0a:8c:6e:
         ea:48:cd:10:c3:eb:cf:88:95:24:97:c0:ae:69:7c:7e:bb:b2:
         e0:db:e2:90:1b:7e:e6:24:84:ce:53:9c:3d:59:49:b6:65:80:
         4d:59:88:84:5b:aa:f8:32:9c:5b:88:28:8a:ac:b7:80:33:f6:
         88:bf:82:a2:51:77:4c:bd:27:ec:45:06:2d:ec:06:28:22:d4:
         a4:56:e1:57:b6:c7:0f:ee:53:e7:9f:76:d7:50:00:ae:e4:da:
         df:4f:03:3f:f9:1b:c7:53:ae:4d:ed:14:7c:21:d2:6c:7b:31:
         d4:35:c4:88:54:ce:24:60:ae:e6:c0:c2:94:a8:a8:4a:c2:9d:
         34:2d:14:a2:9c:70:79:8f:42:0b:25:03:8d:8c:9a:5a:62:e0:
         ba:9a:fb:1a:af:2d:17:a4:9e:e9:e0:f1:1d:10:1a:28:7e:27:
         b8:c8:d1:84:0c:cb:e6:83:74:48:04:7d:73:00:75:3f:b8:ad:
         0d:61:28:0d:ec:f0:fe:95:e5:95:e2:b0:65:04:99:00:af:c0:
         78:2a:7b:07:65:9a:8a:ec:c4:b9:dc:12:67:c8:05:b7:b7:01:
         7f:95:77:1a:1b:9d:c5:fa:dd:d9:b6:ab:8b:5e:df:eb:b0:76:
         56:e6:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org