Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32322d3234203d3e20323637323038.roa
File:                     34352e3233302e3230302e302f32322d3234203d3e20323637323038.roa (raw, json)
Hash identifier:          EsrcXToCXLYfYXk9i+lDTYgiRAjqRnqXVFqWsXy/ksM=
Subject key identifier:   CC:DB:FA:25:11:50:F9:7D:EB:32:51:82:92:1E:65:6E:26:0F:EC:CA
Certificate issuer:       /CN=2B459FB80D38F6E1C89A79735D843E8119304AE4
Certificate serial:       32A84214E94EF877F5BA33667B1B587BF22DFB1A
Authority key identifier: 2B:45:9F:B8:0D:38:F6:E1:C8:9A:79:73:5D:84:3E:81:19:30:4A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B459FB80D38F6E1C89A79735D843E8119304AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32322d3234203d3e20323637323038.roa
Signing time:             Mon 05 Feb 2024 21:19:31 +0000
ROA not before:           Mon 05 Feb 2024 21:14:31 +0000
ROA not after:            Mon 03 Feb 2025 21:19:31 +0000
asID:                     267208
IP address blocks:        45.230.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a8:42:14:e9:4e:f8:77:f5:ba:33:66:7b:1b:58:7b:f2:2d:fb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B459FB80D38F6E1C89A79735D843E8119304AE4
        Validity
            Not Before: Feb  5 21:14:31 2024 GMT
            Not After : Feb  3 21:19:31 2025 GMT
        Subject: CN=CCDBFA251150F97DEB325182921E656E260FECCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:f7:50:e7:ac:c0:e4:c1:2f:66:dc:ea:e0:
                    9c:8a:c9:7f:c7:29:92:75:2b:95:3c:45:10:a8:be:
                    cd:63:ef:f6:32:bc:44:7d:96:8f:70:d4:81:43:76:
                    8f:76:cd:6f:45:03:82:75:7c:33:9e:8f:44:e2:42:
                    00:0a:e1:5c:c2:4e:93:99:e4:33:15:d7:8c:f2:cc:
                    75:86:22:df:6f:fe:86:29:71:ce:e4:a0:4d:d7:1b:
                    2f:c2:f5:ca:8a:17:3d:3d:0c:e7:48:d3:40:66:e1:
                    04:fb:79:a9:c2:5c:b9:57:f4:2a:72:a4:99:09:80:
                    39:e5:2b:e6:ae:f5:6a:54:28:87:82:81:c0:0e:25:
                    46:c7:65:1f:0b:10:b3:e6:72:61:de:0d:3f:0b:a7:
                    86:b0:d3:e0:02:37:f7:eb:8f:52:4e:f0:02:31:35:
                    60:23:07:6f:fd:c2:24:09:5c:b0:75:73:40:69:2b:
                    0d:ac:8c:84:2b:ef:00:fe:8f:b4:0a:26:62:2e:c3:
                    f6:79:cc:13:57:0a:ef:88:bd:1c:dd:70:6f:57:82:
                    43:f1:44:a0:17:7c:66:46:69:1e:b9:b8:23:f6:72:
                    7e:3c:a6:7e:8c:73:09:60:13:3d:64:57:35:ab:9b:
                    41:be:11:80:a0:77:af:15:73:f1:dc:c9:e3:79:9c:
                    b7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DB:FA:25:11:50:F9:7D:EB:32:51:82:92:1E:65:6E:26:0F:EC:CA
            X509v3 Authority Key Identifier:
                keyid:2B:45:9F:B8:0D:38:F6:E1:C8:9A:79:73:5D:84:3E:81:19:30:4A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/2B459FB80D38F6E1C89A79735D843E8119304AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B459FB80D38F6E1C89A79735D843E8119304AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/0/34352e3233302e3230302e302f32322d3234203d3e20323637323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:2b:b4:5e:a4:c0:a4:c8:b9:7b:a2:98:d2:78:76:c7:93:c7:
         84:92:42:0e:e8:31:12:b7:fe:25:22:a6:97:23:2b:46:bd:ff:
         47:34:53:53:0c:1c:18:32:f3:41:3f:72:66:7d:fe:67:9a:dd:
         6f:ca:89:5c:bd:f4:89:7e:ba:8a:c2:ea:25:90:0b:40:bf:43:
         6a:68:ac:4b:56:b1:e7:f5:b0:a4:ec:d0:ee:aa:71:3f:67:96:
         f4:1a:12:76:6c:fc:1a:7b:7e:ae:5e:18:7a:85:5e:7c:1f:46:
         82:ab:b4:de:f7:9a:3f:0b:50:8d:21:be:9c:61:94:2a:88:18:
         68:1b:eb:69:fd:b3:46:72:42:2d:49:68:e4:b8:02:40:c7:6e:
         62:62:4d:7a:53:1c:b6:9f:f8:26:db:c2:de:25:20:ad:5c:e2:
         1f:8f:96:8c:07:24:d9:a9:37:0d:79:25:34:4f:61:c8:4f:bb:
         de:4f:ac:67:ed:8e:8d:b0:d7:3c:84:5f:ff:55:ed:80:6c:19:
         06:df:e2:ce:05:b3:82:2c:92:e0:b3:97:66:d0:3e:41:bc:b5:
         bf:d7:3a:2e:31:b9:59:da:66:b0:c2:9e:64:d0:4c:26:28:85:
         af:c1:36:f3:a5:9e:94:d5:cd:bf:7a:96:90:a3:81:db:5c:2b:
         83:57:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:26 2024 by rpki-client on console-ams.rpki-client.org