Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e322e302f32332d3233203d3e20323730343830.roa
File:                     32342e3135322e322e302f32332d3233203d3e20323730343830.roa (raw, json)
Hash identifier:          2CUsLLXSAzF8XIgEGGL2l8L654VGbzUsMLFE12jqojs=
Subject key identifier:   28:43:4A:17:70:37:22:F3:33:F1:67:7F:CE:E3:0A:63:BF:0C:E7:B0
Certificate issuer:       /CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
Certificate serial:       21B9DFE0AEC7C9D569E9F8000DD01445682CBE5C
Authority key identifier: AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e322e302f32332d3233203d3e20323730343830.roa
Signing time:             Wed 24 Nov 2021 03:47:54 +0000
ROA not before:           Wed 24 Nov 2021 03:42:54 +0000
ROA not after:            Wed 23 Nov 2022 03:47:54 +0000
asID:                     270480
IP address blocks:        24.152.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b9:df:e0:ae:c7:c9:d5:69:e9:f8:00:0d:d0:14:45:68:2c:be:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
        Validity
            Not Before: Nov 24 03:42:54 2021 GMT
            Not After : Nov 23 03:47:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:b1:b6:71:ad:3c:47:a9:3e:b8:3d:52:33:
                    70:2f:56:a2:95:5a:06:8c:66:2c:13:f9:37:26:da:
                    c0:9f:37:4c:2a:b6:92:53:23:30:83:e6:5f:43:24:
                    6a:01:a2:c0:29:46:31:f2:4d:49:d7:5f:67:e6:7c:
                    02:e9:53:77:5d:f8:9b:c7:0a:4b:36:34:b4:16:79:
                    03:fa:37:80:57:c5:fa:89:09:ab:12:0e:9a:8b:3e:
                    5a:9a:1a:27:60:f6:01:8d:04:02:bf:02:cc:5a:9e:
                    69:9c:68:08:80:ea:0b:6f:34:64:4a:dd:e5:36:ce:
                    ab:75:c0:b3:f7:74:22:8b:3f:f8:d8:e1:44:e5:f4:
                    92:9a:f7:c3:1d:b8:b3:60:bb:e5:8f:b6:60:2c:8c:
                    ed:e2:2e:4d:48:8a:59:13:00:a7:86:eb:99:2e:a2:
                    0c:95:9e:06:56:f0:56:b0:cf:85:41:0a:0c:86:6e:
                    99:c5:54:d7:3e:1e:16:a4:8b:2f:f6:52:f7:29:2e:
                    ac:6a:ef:d9:fb:b0:96:b8:df:74:6c:5c:13:a3:d6:
                    68:d1:e5:5d:20:c7:f8:20:e3:bd:9b:7b:6e:7e:91:
                    dc:84:39:64:22:2f:30:96:23:2b:86:8a:c3:81:69:
                    26:dd:ed:8d:25:9c:ea:a1:41:45:a7:3f:97:fd:7b:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:43:4A:17:70:37:22:F3:33:F1:67:7F:CE:E3:0A:63:BF:0C:E7:B0
            X509v3 Authority Key Identifier:
                keyid:AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e322e302f32332d3233203d3e20323730343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:3f:a0:83:bb:28:38:e5:4d:fe:0e:03:93:4a:a5:97:9c:
         75:aa:1e:53:71:bf:3f:d9:ae:ab:f7:e7:75:1e:cc:1c:6b:a4:
         53:06:43:a4:24:6d:4a:a3:7f:7b:9d:00:8e:52:ee:09:31:21:
         aa:db:91:b2:00:4e:91:8a:5e:9b:2c:90:2f:e7:57:a2:a1:75:
         fd:dd:00:dd:e9:5e:95:3c:44:12:c0:bd:95:1a:9a:e2:ad:34:
         c6:68:eb:5f:61:c4:dc:39:d4:a0:55:29:c5:f5:25:ec:b6:1d:
         12:72:a4:07:94:cc:67:1c:d0:ff:41:d7:91:61:97:cf:23:73:
         fa:81:91:fc:4c:fc:0e:a6:06:99:00:ee:34:4d:b5:19:5f:c9:
         95:04:c4:44:dc:ab:ad:5d:0d:6d:a7:fb:46:57:f0:a1:01:92:
         d7:e3:53:6d:ba:59:4e:de:22:69:ef:13:66:03:37:e5:8c:fe:
         cd:b0:dd:87:28:a8:18:ec:8b:c0:77:49:b1:32:7e:91:bc:96:
         65:f4:e8:f9:18:c0:c3:95:31:96:2a:85:fe:fe:25:75:6a:44:
         23:ab:16:0f:91:2d:58:b1:38:99:75:7c:a7:2f:b0:7b:a4:92:
         41:44:a6:fa:5d:75:c8:cf:8a:4e:d7:66:de:1a:de:c0:27:e8:
         f7:0b:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org